last executing test programs: 2m16.544702528s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 2m16.406932475s ago: executing program 3 (id=8): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m14.828837113s ago: executing program 3 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x32}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a4, 0x200, 0x3, 0xbe}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x7}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) prctl$PR_SET_THP_DISABLE(0x29, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000780)={0xc, {"a2e3ad214fc752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b08346c060890e0878f0e1ac6e70a9b3368959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62239c6f30e065cd5b91cd0a03000000000018001b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd7878a37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b412435139000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a4cd13c257ac06c7d8ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190ba4d7909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810ba2e201007e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e8134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b000000807ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd776d443e8b40426db6fe2907ac0ca3d24145a2e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a0400000000000000f463661c953fcad6f37725c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2ca8378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa04006651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed004000000b53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f090056b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b5c7fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d050000002a308e15fc37d06aeac289c0523f652f2ef91d4f2b01987b0f463934c54edc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a3b89f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ed60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d3560aba573bd16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22005b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db239dfe785b54c34a0a5db4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbf4c807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9edbaaadaea56765404e0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901003a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d50b00", 0x1000}}, 0x1006) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m14.793469629s ago: executing program 32 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x32}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a4, 0x200, 0x3, 0xbe}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x7}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) prctl$PR_SET_THP_DISABLE(0x29, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000780)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.370984244s ago: executing program 0 (id=1703): syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r0 = eventfd2(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x8, 0x0, 0x0}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="cf"]) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1fd, r0, 0x0, 0x0, 0x4, 0x0, 0x1, r0}]) 5.211618812s ago: executing program 0 (id=1709): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000003000000000000000500000d"], 0x0, 0x4b}, 0x20) bind$packet(r0, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x1, 0xff, 0x6, @local}, 0x14) 5.210829943s ago: executing program 0 (id=1711): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6", 0xb}], 0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000000480)=""/124, 0x7c}], 0x2) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMPLAYBLK(r2, 0x5317, &(0x7f00000003c0)={0x8, 0x13}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) (async) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) 5.040576934s ago: executing program 0 (id=1715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0xff000000, 0x8000}, 0x0) 4.988930052s ago: executing program 0 (id=1717): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x133) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06006220b8709aed"], 0x9) r1 = socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4d000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x2e}, {&(0x7f0000000080)="d3b397dfa90ba40b352996e329c18fc3581755e65e53d40c4cfd4811b31312a33b7c8b39014300e98d180b31a307fd811129468c4618a799b10fc36aa683f46c56463feb755cddfc3c439dae8c1d82d06be32c1e8cfdeec0c74090dddd566710344746b9c75b96ff45ee8e6c26014b3497869bf834a6f79fd7695c335005312b5c", 0x81}, {&(0x7f0000000140)="c650757d108bae19cfa8e630f72f", 0xe}], 0x3, 0x0, 0x0, 0x4000}, 0x3500000000040010) 4.654150047s ago: executing program 0 (id=1720): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) (async) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r0 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) r2 = syz_open_dev$I2C(&(0x7f0000001000), 0x33, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x2) (async) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) renameat2(r5, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async, rerun: 32) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000010c0)={0x1, 0xf7, 0x2, &(0x7f0000001040)={0x0, "fa6f394d6eec98aaf370535ac95977c05edbebb84734f1da4145d7dbc01de97db4"}}) (async, rerun: 32) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) (async) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4) (async, rerun: 64) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x12, 0x1, 0x0, 0x0, 0x0}) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async, rerun: 64) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r10, 0xc018937a, &(0x7f0000000180)={{0x20, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './bus\x00'}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, r11, 0x0, 0x0, 0x0, 0x22, 0x1}) 3.694927472s ago: executing program 1 (id=1736): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) 3.693649583s ago: executing program 1 (id=1737): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x41240, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="030f00000000f0ffffff34000000"], 0x14}}, 0x80) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x126, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008861}, 0x20004045) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1100400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000081) r10 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockname$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) getpeername$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) sendmsg$can_bcm(r10, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r11}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x4, 0x6, {}, {0x77359400}, {0x2, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x20, 0x0, 0x0, 0x0, "1d65ff3e158953bd8e589f586dd99be7b0a9ae4997fcb628d62dff52094e44d97816bae115b94ab16f0df5e589268e9e2478eaf071d1b8e36a4052e8cf6dbdf2"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004001}, 0x10) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r12, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x0, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x25}, 0x60) close(r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r13, 0x541b, &(0x7f00000002c0)) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) 3.094979849s ago: executing program 4 (id=1740): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x259) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000000, 0x6031, 0xffffffffffffffff, 0xe38a5000) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000df9000/0x3000)=nil, 0x3000, 0x1) munlockall() r0 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) 3.031735326s ago: executing program 4 (id=1741): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) setreuid(0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x411a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x4}}, 0x0}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x48}}, 0x0) sendto(r4, 0x0, 0x0, 0x4014, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0xd0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000280)=0x1) syz_usbip_server_init(0x3) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000006c0)=[@rdmsr={0x32, 0x18, {0x359}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0xc, 0x7}}, @wr_crn={0x46, 0x20, {0x2, 0x1}}, @uexit={0x0, 0x18}], 0x88}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640f", 0x2}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000040)=@ccm_128={{0x304}, "25ecf153229eb317", "1df37f4a59a2ee017fccac1d6b380090", "b83e87bc", "dad5a31319f28078"}, 0x28) fcntl$dupfd(r8, 0x0, r1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r9) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r10, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0xc0) 2.4532846s ago: executing program 4 (id=1742): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.452758023s ago: executing program 4 (id=1743): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x90) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r2, 0x0, &(0x7f00000002c0)="000600003a4bfc8fe86976d278803bee18a3f22d758794d80b632778d661c914e477d892afde42f0b604e327e842074892e3571f94c7bf3453983ae3265f131e1930a08d8c09", 0x46, 0x7fff800000000002}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r2, r2, 0x1000, 0x5, 0x9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r2, 0x0, &(0x7f0000000200)='(', 0x1, 0xa}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000180)={0x28, 0x6, r3, r4, 0x10001, 0x0, 0x9b}) 2.447887322s ago: executing program 4 (id=1744): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) (async) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x30004000) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) (async, rerun: 64) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0xc, r3, 0x1d}, 0x10) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x8000, 0xf) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000280)=0x220800, 0x29) 1.299651538s ago: executing program 1 (id=1754): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x19bb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) 1.299195178s ago: executing program 1 (id=1755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000280)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)={@rand_addr, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3, 0xb}, {0x5, 0x3}, {0x1, 0x8}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xa6ac}, {0xfffffe72, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x0, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x48004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x6000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3e9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d4980fc7682bc4c2999aaddd8bceb38fe8eca2a80100000037c4e14ddee2660f38810b", 0x38}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, 0x0) 1.098114046s ago: executing program 1 (id=1756): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc7d4a", 0x4, r0) keyctl$link(0x8, r1, r0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x2, 0x20000000, 0xfffffff3, 0x5}, 0xb}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc7d4a", 0x4, r0) (async) keyctl$link(0x8, r1, r0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x2, 0x20000000, 0xfffffff3, 0x5}, 0xb}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) (async) 1.096851325s ago: executing program 1 (id=1757): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x805) ioctl$FS_IOC_GETVERSION(r1, 0x5b04, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@getrule={0x14, 0x22, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x0) 743.152273ms ago: executing program 2 (id=1762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000680)={&(0x7f0000000240)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)="fd5ee5b1d7387d4a6dbff15837857819d0bbe9012687df832e79fa6a2b8b16c95ae09585f87b965b7ea4feeab8aa090b7e0b9dcfe89e63cf166cd0cea8eb9c81e3e7514aef92c2fda67a63c09ce695615ce588f4778664e26361f35dceddd3c95fc50bb9200e36a668", 0x69}, {&(0x7f0000000400)="34d5cf447914cff8959d5e0014cc6fce5608f1f3f4207941bf323491897a8bccdfec05830602ff51729683ab93f72763108a751a06c06fad40f7bbc43a01", 0x3e}, {&(0x7f0000000440)}, {&(0x7f0000000480)="c6e102298ae218", 0x7}, {&(0x7f0000000500)="b0904c2bcce3814e70e8d3936cf77270ad829cc57630ce87cce8954a66a2069f5940a12efbabe81ccee05a9520590ab961bf37f2f52115004c4ee04e53fe117cd2ef36c22446da841a70", 0x4a}, {&(0x7f0000000580)="c52807e57ed65b1d95283283f1f51deaa05c72e1dfa991176ddfee6cd0010699cfe2d94da13fd0835244ed4f04ddb9fef050dd878f928a70ec6478e7fba8c18648f7624fb19651485261244899ffb5", 0x4f}], 0x6, &(0x7f0000000940)=[{0x1010, 0x113, 0x6, "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"}, {0x80, 0x114, 0x6, "932e2113cdef3ed66da11a4afd6bdde52fdc92c6b93de55d83dd39209cde83f4e40afdef59db1ec3f8aca52b6aecc6b3a293636262b97bea80d62d176cf4da4f72997a307f23268c25fb565b6a4fea12a007f32699eee9993883eaf1ff8346eda3e757b8a64a27dae119"}, {0x30, 0x104, 0x6, "c804534d825312bd1bf1dd6b76b980388cdb0979554c50454b2f2ad5"}, {0xf8, 0x117, 0x80000000, "edafc7dce55c6a7079596a7b76e5afceb8c223d5a96d0dd1d83b252f39fd3d8332eaf85661489ecb1b5aa443a4a742e5a0c0ca1897a32d8478589e49643f84c09c9c4835f32b2ac951ec5e66780ff9ba87ef5883aa9cccfa2be9fa9db01b516a71680e8e837614236a58f6aaf390fe84c6a7fb88b79b43c6f9f8f40c4afa88106eb4d37cfb171f9868d1d36932fb4e2ab123de90369d3833a65fd112317c5c3b8113dbeacb0882ee1b8f3b76c37919216f181f771e8db10d327d19d454789fb5e92619a925836152573867c94a3e9bd5c9d4817ec87b46af379482b03b5e189454fe7f79c1dfec"}, {0xf8, 0x117, 0xa581, "ab3e2b78b56516363ba9556e90dd64131fd83ae3d34516b089a02b1359971517963c13dcf629412856a042535fe1edadd8c63996cdd7f726a49b6d719aa400bd3f98cec0d8d47b921d490d5bd7825ea5d222131b6fcc63b30077cdec45cbbf06894e0b9b3752a0618996fc90a80ca849c468a6bee48ba3d8cae488c2b50034e9425f12101be9a783c1756ae2222f625ed711d0860f82ccf860be7baed0fabda36f904f8d871acf2e6a391200468786eb5387498c25dcc830b3102b8366dbd0a088599a959dd66297b49b4574db82b3a540a07efc705386766fc39d20c70b4885b8"}], 0x12b0}, 0x4000004) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xa}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getaddr={0x58, 0x16, 0x4, 0x70bd27, 0x9, {0xa, 0x18, 0xc2, 0xc8, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0xa9c, 0x6, 0x40, 0x3ff}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 571.769151ms ago: executing program 2 (id=1763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x3, 0x1) (async) r2 = socket$inet(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x10000000) (async) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x10000000) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x60, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048004}, 0x1000) write(r4, &(0x7f0000000000)="38000000010003", 0x7) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0xa}, 0x18) (async) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0xa}, 0x18) readlinkat(r7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000042000000200012800800010067747000140002800800020093ed43d10053d37db8a883b1f4bc5128406697286e735eec4ebc2506cdc43f1bd52e17e6c8116e2032027e9537a732aa358814e50cf5dc0000003138c3898faf5c8292ea87922f3bc23a04b6a73196427450ed472cad8ad76a5b322c8767beb114e926fe6ddaec231cb767f8e9f2af45dc05cc139e1a825ac38ad0fb801b87953944f974322d618047e4da993b42618bd9ca79ccc6ccd623b8ffcf78eb5ce03e11bf31f0196b81d466d1ce41e6624ec520ce56138b6873cf1104d1295661f71b6c37e9607a1b0e0bd84e1cd0b164859f3412d00e942c4c8d87d1f4933574a3ba1804036873000000000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) 569.993775ms ago: executing program 2 (id=1764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYBLOB="2572739049806638cb419ae711f0e474548d1b490000bed955bdb655a00fe73568ce9077ec0bfc689279a00c32048810b040f8ff9d77be22965d84ab9303f5f879e1d4ed1238657f0ca3b481a7fec96149", @ANYBLOB="cc36b724b7379069a57c2fcd43cde87e84719c67208fe7b3526ad8d083a856975b0cf981d4624e5463d051c24c73b6772ad8dafb39e0102363849a3edd32ef657ee5c015099b4e07ce41234d3566922996cf6de57198bb43105b34743e687e426482c585f5fbf1614015fc8063489a63977b0e10fd345d4cbbebe6ef393910ebd72567464d2975a14c1a66a5dc064b696d3e75214aef7d9cf1e29b6ae03762de915af6ab1ace990c7d31ba185bcb320579e1352184f27d0db706e76779ef1c6d822c4f5f88139e8498a731d2890368b566ce06287daa3d386e6f9ab342a081da"], 0x7c}, 0x1, 0x0, 0x0, 0x40090}, 0x24000844) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 494.949047ms ago: executing program 2 (id=1765): r0 = socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x18, 0x3f9, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x1}, ["", "", ""]}, 0x18}}, 0x4008850) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10}, 0xc) r4 = getpgrp(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_clone(0x20800000, &(0x7f00000000c0)="0daa9fdd01b3f064a9917e6173b4b2f1f18e2b0a94eabf1a6182408858f6cffa9d1fbee04846d5a62c57f454032b5015ec3376074835aba7bfe544df47289f1f562d1b0c797d65776c5809738b2d43b0210f595c7ab0a6628de343df904797411bf95fce513c18eb8906e132af23621296e4a1f9721370a77d4485b5cbfbc46e51eca3e3595159b220c53c68090c080d94f95e429e6cfad46cffca003cc65663d325d35096f7a5bb6125f89fa663e0d261c2", 0xb2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)="d932c326002960e67901977083e30f87ec14c7df0150631f828101b28dc53c53d552470ac447b087b23d6233c77f020560c1edca861039746f1c380aad8988ae1ded70941b3caaa23f26658e3f7c618cfc663f") socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000002640)={0x23f8, 0x14, 0x10, 0x2, 0x25dfdbfc, {0xe}, [@generic="ba582d0e9fab6917e189116fe87b1341f068a540a69bcd11d08d204dfe06e09740716d10df7dd92f13f3c5c782956afdc0a0ef641e6db6a5b911601fd0848c756f5d98c3994288dedcb34b6874ad0568472b7e4a39a1b83a92b24769dbe1c61a360314543c60c91c20600f4aec716fc90de83b2116a41a6284839064626043b741e194e1bbe4fbe9d95c044fba7de1c349e9c6c9974490711bca2d26593c1979d8924620b80e2763542b5dd5c87b2bf8275f3475990144d81f2a86283eb43a543081191bb6ff", @generic="cde0bda771120ab6730a927ff1ff0b77ddc253d393d04f26918a008fe01d0c0d22d523cb764c593294e0499e50251f9b9443992b0cb734e9c56cc898d16374b88fb2b88afb7d74285a88443cc388f2311eaac4d56f5e28e1738c53c70006fb7bc94ad126fd6c3f840cfd020c858a7156266237d635e043f1ad5b11c0814e4908dd749670632c2a61102f15b2f1a3ca9536e0ffb66207a7001d7fb9743f19ea4a3865e1010b71d2f871a8edce3f7969f25f", @typed={0x8, 0x11e, 0x0, 0x0, @pid=r4}, @generic="1469bb866ef4649c802e98dc4090113a3afc294877e47e1050e53c4247bb6d98b7fd1f0f27955013de17884f61b634d404f42e52c900eb1b4853f3e3d33dc2aeed2ffa8ea77b1a759d18", @generic="6dd9116a2ae5a92be76c81d22f69c71d82e6a48b647113f512a2", @nested={0x112f, 0x138, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid=r5}, @typed={0x1004, 0x81, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x144}, @generic="6f1697a9cbd51b250f4c6c60b32611ccc0d7e704e1c9958132ba6c438b4dff2322dc4397ebe86d2f72a3858b", @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@private1}, @generic="6c210e46cf0947a1338083555940c70fa62deedd21ba912d8e4c1c7522b3d491503bae3d8ba11923715f28b6114cfe3f5006b648bca41cdb04ead223dc91de60b891d0496eadcf53fca90365bbf9eb78ac38a3a80fa7a091c35527c14c61d23021e4c87a01bc7089e05fda0e9685c7214dd44f5254206d7f2d43532efa010659f459c96fbb26dda36e5b04c5d83d56795d34fcbc1c69d31d2fc9c8d34a50824adc048fd7adbe3024c3c814e1bdc6723a31b392b66e7cc879a3ac866081f398645fa1c9e768186b26c1b1f7c4d9d9eaf8875ae3", @typed={0x6, 0xb9, 0x0, 0x0, @str=':\x00'}]}, @typed={0x6, 0x48, 0x0, 0x0, @str='\xc7\x00'}, @nested={0x10c5, 0x42, 0x0, 0x1, [@nested={0x4, 0xcc}, @typed={0x8, 0x50, 0x0, 0x0, @pid=r6}, @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0x143}, @generic="6604a0a319f35df22b01578ca4b073f827d58681a955b4431c343612cc615012d32c639ec1d22abf6c4728bbf118867c7bd2b4e355fc1f4eaa6331f96307a9be48ca626b73d2f95a175f218586985959dedcb2881e0c825d4d3115bc804f1ed6480bf3bc11d0241cc4c821cb5a6f914f1dc8e41a9e925c1bac17edbe4ff4d97ef84390f45065d97fc8a9606760e23ec967fbaa29b80fb83c2887d5eee090d3468faf42d4e1c1052eec", @generic="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"]}]}, 0x23f8}, 0x1, 0x0, 0x0, 0x4084}, 0x4000810) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000580)={0x2, 0x1}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e22, 0x6fe3, @mcast2, 0x393}, 0x0, {[0x3, 0x8, 0x7, 0x9, 0xbd, 0x7ff, 0xbb23, 0x400]}}, 0x5c) 494.5841ms ago: executing program 2 (id=1766): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x20000, 0x4, 0x1f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r5, &(0x7f00000000c0)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000140)={{@host, 0xf}, 0x3, 0x0, 0xfffffffa}) 423.171702ms ago: executing program 2 (id=1767): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) bind$xdp(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (rerun: 32) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x610, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x437}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x5c0, 0x111, 0x0, 0x1, {0x5bc, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7a8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x65e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x78b}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}]}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x12d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2f7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}]}, 0x610}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40) 0s ago: executing program 4 (id=1745): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x6, &(0x7f0000000000)={0x0, 0x6}) r1 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x3c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000008010800dfa1a8c9688236b60000010073797a31000000000900010073797a3100000000060002406558000006000240891700000c000480080006400000020b61ed2183fd40bdfc2f2f6f1741dd959fcc53914e338bbbab98f5a0896c188588ed97dcdf63a9f146172e9d6685ebc337ce7ad9700a8f3759166e89874f381e3b5fe97ffcc70f768989e85e19c5bf225e3759a4d8dea478c89f8dda46b3c29a9c7e8de85d0850fb741e45718ce4869df2a7f333b25e4210a7fe3f758c134c4714245fc7096512d5754372bdff0309616fe3a5000000000000000000000074c92be80967b24700501b1213299a2454e4784bc235326f015fc98eea0b472c304bfe358a6074afeef3e1f9de84c1819d8e1890eea92b4db2d7d4e89e067b0b2178e106ca8d4a5d4e96e916000ac3a39c89afae8d6f7b2c819a446ab2ae862d909b4dda5393fb65ad5193cf5362"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x2, 0x1, 0x1, {0x0, r4, r7}}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r8) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x40080) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc04c5349, &(0x7f0000001380)={0x8, 0x0, 0x0, 'queue1\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x881) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r14 = socket$unix(0x1, 0x1, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01042aad7000fedbdfe41bd2fe0008000100000000000c00060001"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe880000000000000000000000000001000000000000000000000000000000100000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000070000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004201"], 0x184}}, 0x0) kernel console output (not intermixed with test programs): 5184.428:2103): avc: denied { mount } for pid=7796 comm="syz.2.566" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.603750][ T40] audit: type=1400 audit(1756515184.428:2104): avc: denied { unmount } for pid=7796 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.652535][ T7800] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 105.655117][ T7800] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 105.661519][ T7800] vhci_hcd vhci_hcd.0: Device attached [ 105.664167][ T7802] vhci_hcd: connection closed [ 105.665844][ T1156] vhci_hcd: stop threads [ 105.670045][ T1156] vhci_hcd: release socket [ 105.671729][ T1156] vhci_hcd: disconnect device [ 105.869138][ T40] audit: type=1400 audit(1756515184.680:2105): avc: denied { map } for pid=7812 comm="syz.0.570" path="socket:[21055]" dev="sockfs" ino=21055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 105.980155][ T7821] lo speed is unknown, defaulting to 1000 [ 106.125823][ T40] audit: type=1400 audit(1756515184.924:2106): avc: denied { getopt } for pid=7825 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.126003][ T7826] fuse: Unknown parameter '' [ 106.239515][ T7829] bridge0: entered promiscuous mode [ 106.241737][ T7829] macsec1: entered promiscuous mode [ 106.246339][ T7829] netlink: 152 bytes leftover after parsing attributes in process `syz.2.575'. [ 106.252199][ T7829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.257223][ T7676] em28xx 6-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 106.271536][ T40] audit: type=1400 audit(1756515185.064:2107): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 106.297329][ T7831] loop3: detected capacity change from 0 to 1 [ 106.303435][ T7831] Dev loop3: unable to read RDB block 1 [ 106.305537][ T7831] loop3: unable to read partition table [ 106.307686][ T7831] loop3: partition table beyond EOD, truncated [ 106.310200][ T7831] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 106.329621][ T5949] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 106.333568][ T5949] em28xx 6-1:0.0: dvb set to bulk mode. [ 106.340363][ T840] em28xx 6-1:0.0: Binding DVB extension [ 106.345146][ T5949] usb 6-1: USB disconnect, device number 5 [ 106.351950][ T5949] em28xx 6-1:0.0: Disconnecting em28xx [ 106.354445][ T40] audit: type=1400 audit(1756515185.139:2108): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 106.390672][ T840] em28xx 6-1:0.0: Registering input extension [ 106.392945][ T5949] em28xx 6-1:0.0: Closing input extension [ 106.411900][ T5949] em28xx 6-1:0.0: Freeing device [ 106.412812][ T1146] syzkaller0: tun_net_xmit 76 [ 106.417902][ T1146] syzkaller0: tun_net_xmit 48 [ 106.436454][ T6818] syzkaller0: tun_net_xmit 76 [ 106.810056][ T7842] fuse: Bad value for 'fd' [ 106.950242][ T40] audit: type=1400 audit(1756515185.700:2109): avc: denied { read } for pid=7845 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.072877][ T40] audit: type=1400 audit(1756515185.812:2110): avc: denied { bind } for pid=7845 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.514381][ T13] syzkaller0: tun_net_xmit 76 [ 107.516250][ T13] syzkaller0: tun_net_xmit 48 [ 107.537496][ T839] syzkaller0: tun_net_xmit 76 [ 107.707705][ T7871] loop3: detected capacity change from 0 to 1 [ 107.738478][ T5968] Dev loop3: unable to read RDB block 1 [ 107.741006][ T5968] loop3: unable to read partition table [ 107.743438][ T5968] loop3: partition table beyond EOD, truncated [ 107.769138][ T7871] Dev loop3: unable to read RDB block 1 [ 107.771140][ T7871] loop3: unable to read partition table [ 107.773370][ T7871] loop3: partition table beyond EOD, truncated [ 107.775940][ T7871] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 107.781670][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.588'. [ 107.909890][ T7882] block nbd0: Attempted send on invalid socket [ 107.920291][ T7882] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.931088][ T7882] hpfs: hpfs_map_sector(): read error [ 108.062973][ T839] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 108.225647][ T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.229421][ T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.232925][ T839] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.238012][ T839] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.240881][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.246872][ T839] usb 7-1: config 0 descriptor?? [ 108.297512][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.742891][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.591'. [ 108.776554][ T7894] overlayfs: failed to resolve 'euid=00000000000000000000': -2 [ 108.780793][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.593'. [ 108.863743][ T7908] loop3: detected capacity change from 0 to 1 [ 108.867061][ T7908] Dev loop3: unable to read RDB block 1 [ 108.868982][ T7908] loop3: unable to read partition table [ 108.871304][ T7908] loop3: partition table beyond EOD, truncated [ 108.875058][ T7908] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 108.881747][ T7910] overlayfs: failed to resolve './file1': -2 [ 108.899789][ T839] usbhid 7-1:0.0: can't add hid device: -71 [ 108.901934][ T839] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 108.906481][ T839] usb 7-1: USB disconnect, device number 5 [ 108.911882][ T7911] lo speed is unknown, defaulting to 1000 [ 108.918919][ T7915] ALSA: seq fatal error: cannot create timer (-22) [ 108.967835][ T1156] syzkaller0: tun_net_xmit 76 [ 108.969535][ T1156] syzkaller0: tun_net_xmit 48 [ 108.991423][ T6035] syzkaller0: tun_net_xmit 76 [ 109.994252][ T7924] warning: `syz.0.603' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.185395][ T7939] overlayfs: failed to resolve 'w5T)`)YFnA@T<3ڂ$rcnHwC" -8/': -2 [ 110.264341][ T7946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.607'. [ 111.158084][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 111.158098][ T40] audit: type=1400 audit(1756515189.629:2121): avc: denied { ioctl } for pid=7948 comm="syz.1.608" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.299371][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.614'. [ 111.509117][ T7975] mmap: syz.0.618 (7975) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.528445][ T7975] lo speed is unknown, defaulting to 1000 [ 111.655988][ T40] audit: type=1400 audit(1756515190.096:2122): avc: denied { ioctl } for pid=7980 comm="syz.4.620" path="socket:[19334]" dev="sockfs" ino=19334 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.130679][ T8016] netlink: 52 bytes leftover after parsing attributes in process `syz.0.631'. [ 112.130801][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 112.208765][ T8021] tmpfs: Bad value for 'mpol' [ 112.284787][ T40] audit: type=1400 audit(1756515190.686:2123): avc: denied { create } for pid=8022 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.289255][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 112.295934][ T8023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'. [ 112.504238][ T8045] sctp: [Deprecated]: syz.2.639 (pid 8045) Use of int in maxseg socket option. [ 112.504238][ T8045] Use struct sctp_assoc_value instead [ 112.525338][ T8047] netlink: 44 bytes leftover after parsing attributes in process `syz.4.640'. [ 112.531862][ T8050] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.535003][ T8050] FAT-fs (loop0): unable to read boot sector [ 112.655065][ T8067] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 112.694137][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 112.777543][ T40] audit: type=1400 audit(1756515191.144:2124): avc: denied { write } for pid=8055 comm="syz.0.644" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.818884][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.654'. [ 112.828948][ T40] audit: type=1400 audit(1756515191.191:2125): avc: denied { execute } for pid=8086 comm="syz.0.654" dev="hugetlbfs" ino=24603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 112.838971][ T40] audit: type=1400 audit(1756515191.191:2126): avc: denied { execute_no_trans } for pid=8086 comm="syz.0.654" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=24603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 112.927823][ T8101] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 112.927823][ T8101] The task syz.4.659 (8101) triggered the difference, watch for misbehavior. [ 112.933774][ T8105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.660'. [ 113.001708][ T8117] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 113.004637][ T8117] batman_adv: batadv0: Removing interface: ipvlan2 [ 113.057857][ T8120] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 113.086705][ T8120] net_ratelimit: 11 callbacks suppressed [ 113.086718][ T8120] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 113.307552][ T40] audit: type=1400 audit(1756515191.640:2127): avc: denied { ioctl } for pid=8135 comm="syz.1.671" path="socket:[23269]" dev="sockfs" ino=23269 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.442235][ T8146] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 113.445873][ T8146] netlink: 'syz.2.675': attribute type 22 has an invalid length. [ 113.455695][ T165] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.455775][ T8146] netlink: 'syz.2.675': attribute type 22 has an invalid length. [ 113.458661][ T165] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.465118][ T165] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.468253][ T165] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.492574][ T8148] comedi comedi0: no devices specified [ 113.533516][ T8154] loop2: detected capacity change from 0 to 7 [ 113.538698][ T8154] Dev loop2: unable to read RDB block 7 [ 113.540877][ T8154] loop2: unable to read partition table [ 113.543113][ T8154] loop2: partition table beyond EOD, truncated [ 113.545214][ T8154] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 113.550917][ T8154] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 113.787199][ T8172] loop3: detected capacity change from 0 to 1 [ 113.794082][ T8172] Dev loop3: unable to read RDB block 1 [ 113.796134][ T8172] loop3: unable to read partition table [ 113.798212][ T8172] loop3: partition table beyond EOD, truncated [ 113.803326][ T8172] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 113.843385][ T8178] fuse: Bad value for 'fd' [ 113.965637][ T8200] loop3: detected capacity change from 0 to 1 [ 113.968671][ T8200] Dev loop3: unable to read RDB block 1 [ 113.970531][ T8200] loop3: unable to read partition table [ 113.972421][ T8200] loop3: partition table beyond EOD, truncated [ 113.975139][ T8200] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 114.013914][ T8205] fuse: Bad value for 'fd' [ 114.035041][ T40] audit: type=1400 audit(1756515192.323:2128): avc: denied { append } for pid=8207 comm="syz.2.700" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.129719][ T8222] overlayfs: failed to get index nlink (file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, err=-61) [ 114.141684][ T8227] loop3: detected capacity change from 0 to 1 [ 114.148951][ T8227] Dev loop3: unable to read RDB block 1 [ 114.151041][ T8227] loop3: unable to read partition table [ 114.153163][ T8227] loop3: partition table beyond EOD, truncated [ 114.155943][ T8227] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 114.157065][ T8228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8228 comm=syz.4.705 [ 114.169005][ T8222] zonefs (nbd2) ERROR: Not a zoned block device [ 114.249944][ T8243] sp0: Synchronizing with TNC [ 114.255733][ T8245] sp0: Found TNC [ 114.258711][ T8242] [U] ` [ 114.268941][ T40] audit: type=1400 audit(1756515192.538:2129): avc: denied { read write } for pid=8246 comm="syz.2.712" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 114.281309][ T40] audit: type=1400 audit(1756515192.538:2130): avc: denied { open } for pid=8246 comm="syz.2.712" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 114.410380][ T8277] netlink: 'syz.2.722': attribute type 10 has an invalid length. [ 114.426957][ T8277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.430253][ T8277] team0: Port device bond0 added [ 114.614783][ T6175] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 114.690652][ T8293] loop3: detected capacity change from 0 to 1 [ 114.696713][ T5968] Dev loop3: unable to read RDB block 1 [ 114.698517][ T5968] loop3: unable to read partition table [ 114.700628][ T5968] loop3: partition table beyond EOD, truncated [ 114.704610][ T8293] Dev loop3: unable to read RDB block 1 [ 114.706959][ T8293] loop3: unable to read partition table [ 114.708919][ T8293] loop3: partition table beyond EOD, truncated [ 114.711614][ T8293] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 114.777626][ T6175] usb 5-1: Using ep0 maxpacket: 8 [ 114.781429][ T6175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.785049][ T6175] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.788313][ T6175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.793018][ T6175] usb 5-1: config 0 descriptor?? [ 114.924582][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 114.926667][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 114.930592][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 114.934694][ T8307] vhci_hcd: connection closed [ 114.935789][ T46] vhci_hcd: stop threads [ 114.938881][ T46] vhci_hcd: release socket [ 114.940398][ T46] vhci_hcd: disconnect device [ 115.004930][ T8311] 9pnet_virtio: no channels available for device syz [ 115.018443][ T6175] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.096019][ T8314] overlayfs: failed to resolve './bus': -2 [ 115.233881][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.237014][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.255700][ T29] usb 5-1: USB disconnect, device number 6 [ 115.297482][ T46] syzkaller0: tun_net_xmit 76 [ 115.301353][ T46] syzkaller0: tun_net_xmit 48 [ 115.384225][ T839] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 115.515299][ T8340] overlayfs: invalid origin (0000) [ 115.559771][ T839] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 115.562634][ T839] usb 6-1: config 0 has no interface number 0 [ 115.564689][ T839] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 115.568608][ T839] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 115.572207][ T839] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.576876][ T839] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 115.580378][ T839] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 115.583482][ T839] usb 6-1: Product: syz [ 115.584940][ T839] usb 6-1: SerialNumber: syz [ 115.594490][ T839] usb 6-1: config 0 descriptor?? [ 115.605352][ T839] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 115.615299][ T839] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input8 [ 115.837166][ T8316] __nla_validate_parse: 16 callbacks suppressed [ 115.837180][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.734'. [ 116.466876][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.467612][ T840] usb 6-1: USB disconnect, device number 6 [ 116.469099][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 116.479651][ T840] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 116.704764][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 116.704778][ T40] audit: type=1400 audit(1756515194.820:2140): avc: denied { bind } for pid=8372 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.714956][ T8370] bridge_slave_0: entered promiscuous mode [ 116.717504][ T8370] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.729189][ T8370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.748'. [ 116.737836][ T8370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.748'. [ 116.747556][ T8378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.751'. [ 117.000613][ T40] audit: type=1400 audit(1756515195.101:2141): avc: denied { rename } for pid=8384 comm="syz.2.753" name="file0" dev="tmpfs" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.362112][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 117.579410][ T40] audit: type=1400 audit(1756515195.643:2142): avc: denied { ioctl } for pid=8396 comm="syz.0.758" path="socket:[26629]" dev="sockfs" ino=26629 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.662830][ T40] audit: type=1400 audit(1756515195.709:2143): avc: denied { create } for pid=8405 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.750977][ T8411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.764'. [ 118.621035][ T8433] loop3: detected capacity change from 0 to 1 [ 118.624596][ T8433] Dev loop3: unable to read RDB block 1 [ 118.626992][ T8433] loop3: unable to read partition table [ 118.628939][ T8433] loop3: partition table beyond EOD, truncated [ 118.632970][ T8433] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 118.664298][ T40] audit: type=1400 audit(1756515196.653:2144): avc: denied { bind } for pid=8441 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.672848][ T40] audit: type=1400 audit(1756515196.653:2145): avc: denied { node_bind } for pid=8441 comm="syz.4.775" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 118.680078][ T40] audit: type=1400 audit(1756515196.653:2146): avc: denied { name_bind } for pid=8442 comm="syz.0.774" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 118.726047][ T13] syzkaller0: tun_net_xmit 76 [ 118.728019][ T13] syzkaller0: tun_net_xmit 48 [ 119.856726][ T8468] fuse: Bad value for 'fd' [ 119.860565][ T40] audit: type=1400 audit(1756515197.767:2147): avc: denied { ioctl } for pid=8467 comm="syz.4.780" path="socket:[25013]" dev="sockfs" ino=25013 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.861294][ T8468] netlink: 44 bytes leftover after parsing attributes in process `syz.4.780'. [ 119.982827][ T40] audit: type=1400 audit(1756515197.879:2148): avc: denied { write } for pid=8488 comm="syz.0.787" name="file0" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.177694][ T8510] loop3: detected capacity change from 0 to 1 [ 120.180923][ T5968] Dev loop3: unable to read RDB block 1 [ 120.182837][ T5968] loop3: unable to read partition table [ 120.184958][ T5968] loop3: partition table beyond EOD, truncated [ 120.189645][ T8510] Dev loop3: unable to read RDB block 1 [ 120.191627][ T8510] loop3: unable to read partition table [ 120.193637][ T8510] loop3: partition table beyond EOD, truncated [ 120.196084][ T8510] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 121.118575][ T40] audit: type=1400 audit(1756515198.955:2149): avc: denied { watch watch_reads } for pid=8515 comm="syz.2.795" path="/213/file0" dev="tmpfs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.272488][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 121.275726][ T8521] gretap1: left allmulticast mode [ 121.277998][ T8521] gretap1: left promiscuous mode [ 121.280213][ T8521] bridge0: port 3(gretap1) entered disabled state [ 121.285086][ T8521] bridge_slave_1: left allmulticast mode [ 121.287551][ T8521] bridge_slave_1: left promiscuous mode [ 121.294160][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.300799][ T8521] bridge_slave_0: left allmulticast mode [ 121.303040][ T8521] bridge_slave_0: left promiscuous mode [ 121.305556][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.419959][ T8527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.799'. [ 121.552067][ T8543] netlink: 'syz.2.805': attribute type 1 has an invalid length. [ 121.555079][ T8543] netlink: 'syz.2.805': attribute type 4 has an invalid length. [ 121.593591][ T8547] random: crng reseeded on system resumption [ 121.608181][ T8547] program syz.2.806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.653047][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 121.755843][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 121.935042][ T8570] lo speed is unknown, defaulting to 1000 [ 121.943704][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 121.948299][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 121.958919][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 121.962383][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.969120][ T29] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 121.973846][ T29] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 121.978934][ T29] usb 6-1: Product: syz [ 121.980632][ T29] usb 6-1: Manufacturer: syz [ 121.982254][ T29] usb 6-1: SerialNumber: syz [ 121.986931][ T8535] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.997292][ T29] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input9 [ 122.095066][ T8585] netlink: 14 bytes leftover after parsing attributes in process `syz.0.811'. [ 122.154267][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 122.154278][ T40] audit: type=1400 audit(1756515199.918:2155): avc: denied { shutdown } for pid=8569 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.163566][ T840] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 122.207298][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.211419][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.248266][ T8585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.257444][ T8585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.264515][ T8585] bond0 (unregistering): Released all slaves [ 122.290138][ T6685] usb 6-1: USB disconnect, device number 7 [ 122.305946][ T6685] appletouch 6-1:1.0: input: appletouch disconnected [ 122.527497][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'. [ 122.612162][ T8614] vlan2: entered allmulticast mode [ 122.614275][ T8614] veth0_to_hsr: entered allmulticast mode [ 122.734629][ T40] audit: type=1400 audit(1756515200.461:2156): avc: denied { ioctl } for pid=8627 comm="syz.4.817" path="socket:[26775]" dev="sockfs" ino=26775 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 122.736108][ T8628] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.818'. [ 122.758352][ T40] audit: type=1400 audit(1756515200.461:2157): avc: denied { remove_name } for pid=8626 comm="syz.2.818" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.769931][ T40] audit: type=1400 audit(1756515200.461:2158): avc: denied { unlink } for pid=8626 comm="syz.2.818" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.152723][ T8637] cgroup: none used incorrectly [ 123.224818][ T40] audit: type=1400 audit(1756515200.919:2159): avc: denied { unmount } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 123.248849][ T40] audit: type=1400 audit(1756515200.938:2160): avc: denied { setattr } for pid=8653 comm="syz.1.825" name="video9" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.263076][ T40] audit: type=1400 audit(1756515200.956:2161): avc: denied { open } for pid=8660 comm="syz.0.827" path="/dev/ttyq4" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 123.281700][ T8665] netlink: 360 bytes leftover after parsing attributes in process `syz.4.828'. [ 123.287055][ T8663] tty tty1: ldisc open failed (-12), clearing slot 0 [ 123.320605][ T8675] loop3: detected capacity change from 0 to 1 [ 123.326428][ T8675] Dev loop3: unable to read RDB block 1 [ 123.330145][ T8675] loop3: unable to read partition table [ 123.332204][ T8675] loop3: partition table beyond EOD, truncated [ 123.336510][ T8675] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 123.373323][ T40] audit: type=1400 audit(1756515201.059:2162): avc: denied { map } for pid=8683 comm="syz.4.835" path="socket:[25158]" dev="sockfs" ino=25158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.374326][ T8685] netlink: 'syz.4.835': attribute type 11 has an invalid length. [ 123.376930][ T8688] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.382490][ T40] audit: type=1400 audit(1756515201.059:2163): avc: denied { accept } for pid=8683 comm="syz.4.835" path="socket:[25158]" dev="sockfs" ino=25158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.492755][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 123.508298][ T8712] loop3: detected capacity change from 0 to 1 [ 123.515637][ T8712] Dev loop3: unable to read RDB block 1 [ 123.517691][ T8712] loop3: unable to read partition table [ 123.519637][ T8712] loop3: partition table beyond EOD, truncated [ 123.525822][ T8712] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 123.564330][ T40] audit: type=1400 audit(1756515201.237:2164): avc: denied { setopt } for pid=8718 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.602807][ T8730] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 123.608356][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 123.686712][ T8735] netlink: 'syz.4.850': attribute type 7 has an invalid length. [ 123.891393][ T8744] lo speed is unknown, defaulting to 1000 [ 124.381835][ T8748] dvmrp1: entered allmulticast mode [ 124.504716][ T8757] binder: 8756:8757 ioctl c0306201 200000000080 returned -14 [ 124.584408][ T8764] 9pnet: Unknown protocol version 9p20\++} [ 124.588141][ T8764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=8764 comm=syz.4.861 [ 124.598847][ T8764] tipc: Started in network mode [ 124.601075][ T8764] tipc: Node identity 2, cluster identity 4711 [ 124.603734][ T8764] tipc: Node number set to 2 [ 124.711250][ T8781] overlayfs: failed to clone upperpath [ 124.798511][ T8784] loop7: detected capacity change from 0 to 7 [ 124.807442][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.811957][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.816455][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.819662][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.822545][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.826236][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.829057][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.831972][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.835023][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.838677][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.841859][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.844762][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.848124][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.852069][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.855307][ T5968] ldm_validate_partition_table(): Disk read failed. [ 124.857692][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.860789][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.891000][ T8788] bond0: (slave bond_slave_1): Releasing backup interface [ 124.914171][ T8789] Invalid logical block size (6) [ 124.923797][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.926681][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.929489][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.933565][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 124.936579][ T5968] Dev loop7: unable to read RDB block 0 [ 124.939238][ T5968] loop7: unable to read partition table [ 124.941895][ T5968] loop7: partition table beyond EOD, truncated [ 124.962006][ T8784] ldm_validate_partition_table(): Disk read failed. [ 124.966963][ T8784] Dev loop7: unable to read RDB block 0 [ 124.970013][ T8784] loop7: unable to read partition table [ 124.972100][ T8784] loop7: partition table beyond EOD, truncated [ 124.974298][ T8784] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 125.337240][ T6175] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 125.499248][ T6175] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.503522][ T6175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.507049][ T6175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.511095][ T6175] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.515357][ T6175] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.518466][ T6175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.522757][ T6175] usb 6-1: config 0 descriptor?? [ 125.727045][ T8809] fuse: Bad value for 'fd' [ 125.935543][ T8827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8827 comm=syz.0.883 [ 125.942411][ T8827] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 125.951956][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 125.983009][ T6175] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 126.016968][ T8827] bridge2: port 1(veth5) entered blocking state [ 126.019484][ T8827] bridge2: port 1(veth5) entered disabled state [ 126.024772][ T8827] veth5: entered allmulticast mode [ 126.035832][ T8827] veth5: entered promiscuous mode [ 126.047462][ T8840] vlan2: entered allmulticast mode [ 126.049298][ T8840] veth0_to_hsr: entered allmulticast mode [ 126.051702][ T8840] bridge2: port 2(vlan2) entered blocking state [ 126.058102][ T8840] bridge2: port 2(vlan2) entered disabled state [ 126.061834][ T8840] vlan2: entered promiscuous mode [ 126.063872][ T8840] veth0_to_hsr: entered promiscuous mode [ 126.084298][ T6685] IPVS: starting estimator thread 0... [ 126.152616][ T8862] 9pnet_virtio: no channels available for device syz [ 126.181874][ T8848] IPVS: using max 45 ests per chain, 108000 per kthread [ 126.251333][ T6685] usb 6-1: USB disconnect, device number 8 [ 126.430767][ T8887] capability: warning: `syz.4.901' uses 32-bit capabilities (legacy support in use) [ 126.622677][ T8905] __nla_validate_parse: 5 callbacks suppressed [ 126.622694][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 126.628108][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 126.859948][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.909'. [ 127.594107][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 127.594118][ T40] audit: type=1400 audit(1756515204.997:2172): avc: denied { audit_write } for pid=8949 comm="syz.4.919" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 128.725931][ T40] audit: type=1400 audit(1756515206.064:2173): avc: denied { open } for pid=8957 comm="syz.4.921" path="/279/file0" dev="tmpfs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.728093][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 128.778621][ T8965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=8965 comm=syz.4.924 [ 128.804474][ T8967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=8967 comm=syz.2.925 [ 128.881297][ T8970] kvm: pic: non byte write [ 128.886912][ T8960] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 128.967832][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.932'. [ 129.064683][ T1125] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 129.070019][ T1125] sr 2:0:0:0: [sr0] tag#16 Sense Key : Illegal Request [current] [ 129.073530][ T1125] sr 2:0:0:0: [sr0] tag#16 Add. Sense: Invalid command operation code [ 129.079352][ T1125] sr 2:0:0:0: [sr0] tag#16 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 129.095988][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 129.101115][ T40] audit: type=1400 audit(1756515206.410:2174): avc: denied { getopt } for pid=8993 comm="syz.4.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.109884][ T8994] sctp: [Deprecated]: syz.4.935 (pid 8994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.109884][ T8994] Use struct sctp_sack_info instead [ 129.120802][ T8994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.935'. [ 129.125066][ T8995] netlink: 32 bytes leftover after parsing attributes in process `syz.4.935'. [ 129.199641][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 129.244535][ T40] audit: type=1326 audit(1756515206.550:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.2.941" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d978ebe9 code=0x0 [ 129.383192][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.386559][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.400667][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.405062][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.408887][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.413021][ T29] usb 6-1: config 0 descriptor?? [ 129.886930][ T29] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 129.901035][ T9027] netlink: 'syz.0.944': attribute type 7 has an invalid length. [ 129.901071][ T9035] netlink: 'syz.0.944': attribute type 7 has an invalid length. [ 129.903889][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 129.906394][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 129.916915][ T40] audit: type=1400 audit(1756515207.177:2176): avc: denied { create } for pid=9025 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 129.924269][ T40] audit: type=1400 audit(1756515207.177:2177): avc: denied { write } for pid=9025 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 129.940041][ T9027] bridge4: port 1(bond2) entered blocking state [ 129.942787][ T9027] bridge4: port 1(bond2) entered disabled state [ 129.945622][ T9027] bond2: entered allmulticast mode [ 129.978738][ T9038] fuse: Bad value for 'rootmode' [ 130.522136][ T839] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 130.696286][ T839] usb 7-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 130.699406][ T839] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.702189][ T839] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 130.704959][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.715699][ T839] usb 7-1: config 0 descriptor?? [ 130.985199][ T40] audit: type=1400 audit(1756515208.178:2178): avc: denied { listen } for pid=9050 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.994366][ T40] audit: type=1400 audit(1756515208.178:2179): avc: denied { nlmsg_read } for pid=9050 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.995346][ T9052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.008084][ T9052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.019894][ T6175] usb 7-1: USB disconnect, device number 6 [ 131.233184][ T9064] kvm: MWAIT instruction emulated as NOP! [ 131.289458][ T9070] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 131.292244][ T9070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.341035][ T9074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.676776][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.765748][ T40] audit: type=1400 audit(1756515208.907:2180): avc: denied { write } for pid=9084 comm="syz.2.963" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 131.772961][ T40] audit: type=1400 audit(1756515208.907:2181): avc: denied { open } for pid=9084 comm="syz.2.963" path="/241/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 131.776755][ T9085] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.784238][ T9085] block device autoloading is deprecated and will be removed. [ 132.077224][ T9106] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 132.092360][ T6685] usb 6-1: USB disconnect, device number 9 [ 132.095690][ T9107] __nla_validate_parse: 4 callbacks suppressed [ 132.095700][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 132.333949][ T9106] binder: 9105:9106 ioctl c018620c 200000000240 returned -22 [ 132.375340][ T9119] loop3: detected capacity change from 0 to 1 [ 132.378674][ T5968] Dev loop3: unable to read RDB block 1 [ 132.380608][ T5968] loop3: unable to read partition table [ 132.383268][ T5968] loop3: partition table beyond EOD, truncated [ 132.386138][ T9119] Dev loop3: unable to read RDB block 1 [ 132.388051][ T9119] loop3: unable to read partition table [ 132.390281][ T9119] loop3: partition table beyond EOD, truncated [ 132.393271][ T9119] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 132.679517][ T9135] netlink: 'syz.2.981': attribute type 21 has an invalid length. [ 132.682983][ T9135] netlink: 156 bytes leftover after parsing attributes in process `syz.2.981'. [ 132.760390][ T9147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9147 comm=syz.2.983 [ 132.760569][ T9148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9148 comm=syz.2.983 [ 132.801380][ T9151] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 133.054964][ T9165] netlink: 'syz.2.989': attribute type 11 has an invalid length. [ 133.057735][ T9165] netlink: 44 bytes leftover after parsing attributes in process `syz.2.989'. [ 133.061691][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 133.061702][ T40] audit: type=1400 audit(1756515210.123:2190): avc: denied { ioctl } for pid=9164 comm="syz.2.989" path="socket:[28981]" dev="sockfs" ino=28981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.067261][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 133.067760][ T9167] netlink: 'syz.4.990': attribute type 13 has an invalid length. [ 133.102670][ T40] audit: type=1400 audit(1756515210.161:2191): avc: denied { watch } for pid=9172 comm="syz.4.992" path="/302" dev="tmpfs" ino=1619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.109439][ T40] audit: type=1400 audit(1756515210.161:2192): avc: denied { watch_sb } for pid=9172 comm="syz.4.992" path="/302" dev="tmpfs" ino=1619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 133.213333][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.996'. [ 133.220883][ T9185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9185 comm=syz.4.996 [ 133.224656][ T9187] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.230095][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.996'. [ 133.283246][ T40] audit: type=1400 audit(1756515210.329:2193): avc: denied { read } for pid=9195 comm="syz.2.999" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 133.290520][ T40] audit: type=1400 audit(1756515210.329:2194): avc: denied { open } for pid=9195 comm="syz.2.999" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 133.311313][ T40] audit: type=1400 audit(1756515210.348:2195): avc: denied { setattr } for pid=9195 comm="syz.2.999" name="SMC" dev="sockfs" ino=29006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.344723][ T40] audit: type=1400 audit(1756515210.395:2196): avc: denied { read } for pid=9200 comm="syz.2.1001" path="socket:[29010]" dev="sockfs" ino=29010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.372860][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 133.433843][ T9216] netlink: 'syz.4.1006': attribute type 12 has an invalid length. [ 133.436442][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 133.439983][ T9216] netlink: 'syz.4.1006': attribute type 12 has an invalid length. [ 133.443868][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 133.588057][ T9235] loop3: detected capacity change from 0 to 1 [ 133.591599][ T9235] Dev loop3: unable to read RDB block 1 [ 133.593803][ T9235] loop3: unable to read partition table [ 133.596059][ T9235] loop3: partition table beyond EOD, truncated [ 133.598528][ T9235] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 133.922186][ T1125] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.925691][ T1125] sr 2:0:0:0: [sr0] tag#5 Sense Key : Illegal Request [current] [ 133.928383][ T1125] sr 2:0:0:0: [sr0] tag#5 Add. Sense: Logical block address out of range [ 133.931622][ T1125] sr 2:0:0:0: [sr0] tag#5 CDB: Read(10) 28 00 00 00 00 20 00 00 02 00 [ 133.934634][ T1125] blk_print_req_error: 26 callbacks suppressed [ 133.934645][ T1125] I/O error, dev sr0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 133.940805][ T9242] gfs2: error -5 reading superblock [ 134.087522][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'. [ 134.120551][ T40] audit: type=1400 audit(1756515211.115:2197): avc: denied { listen } for pid=9246 comm="syz.1.1017" lport=45811 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.168823][ T40] audit: type=1400 audit(1756515211.162:2198): avc: denied { accept } for pid=9246 comm="syz.1.1017" lport=45811 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.257451][ T9254] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.338705][ T6685] IPVS: starting estimator thread 0... [ 134.374580][ T40] audit: type=1400 audit(1756515211.349:2199): avc: denied { write } for pid=9258 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.446053][ T9261] IPVS: using max 26 ests per chain, 62400 per kthread [ 134.577765][ T9283] xfrm1: entered allmulticast mode [ 134.712998][ T6035] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 134.785964][ T9304] geneve2: entered promiscuous mode [ 134.793944][ T9305] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.796013][ T9304] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.884048][ T6035] usb 7-1: Using ep0 maxpacket: 8 [ 134.887532][ T6035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.891382][ T6035] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.894204][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.900138][ T6035] usb 7-1: config 0 descriptor?? [ 134.988349][ T9313] trusted_key: encrypted_key: keylen parameter is missing [ 135.017341][ T9318] netlink: 'syz.1.1038': attribute type 16 has an invalid length. [ 135.019966][ T9318] netlink: 'syz.1.1038': attribute type 17 has an invalid length. [ 135.029979][ T9318] gre0: left promiscuous mode [ 135.114896][ T9318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.123108][ T6035] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.132234][ T9318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.151362][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 135.154658][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.156901][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.214802][ T9318] xfrm1: left allmulticast mode [ 135.219113][ T9318] geneve2: left promiscuous mode [ 135.223105][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.227526][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.230753][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.234223][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.340457][ T9272] sp0: Synchronizing with TNC [ 135.411978][ T840] usb 7-1: USB disconnect, device number 7 [ 135.455296][ T9329] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 135.458664][ T9329] ref_ctr increment failed for inode: 0x538 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888026cfe0c0 [ 135.464300][ T9329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.467266][ T9329] IPv6: NLM_F_CREATE should be set when creating new route [ 135.469733][ T9329] IPv6: NLM_F_CREATE should be set when creating new route [ 135.472862][ T9329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.588289][ T9333] fuse: Unknown parameter '' [ 135.707853][ T9342] vivid-000: ================= START STATUS ================= [ 135.710849][ T9342] vivid-000: Test Pattern: 75% Colorbar [ 135.714205][ T9342] vivid-000: Fill Percentage of Frame: 5 [ 135.716061][ T9342] vivid-000: Horizontal Movement: No Movement [ 135.718147][ T9342] vivid-000: Vertical Movement: No Movement [ 135.720441][ T9342] vivid-000: OSD Text Mode: All [ 135.722069][ T9342] vivid-000: Show Border: true [ 135.723660][ T9342] vivid-000: Show Square: false [ 135.725481][ T9342] vivid-000: Sensor Flipped Horizontally: false [ 135.727763][ T9342] vivid-000: Sensor Flipped Vertically: false [ 135.731096][ T9342] vivid-000: Insert SAV Code in Image: false [ 135.733007][ T9342] vivid-000: Insert EAV Code in Image: false [ 135.735071][ T9342] vivid-000: Insert Video Guard Band: false [ 135.737314][ T9342] vivid-000: Reduced Framerate: false [ 135.739687][ T9342] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 135.742878][ T9342] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 135.745967][ T9342] vivid-000: Enable Capture Cropping: true [ 135.747804][ T9342] vivid-000: Enable Capture Composing: true [ 135.749641][ T9342] vivid-000: Enable Capture Scaler: true [ 135.751871][ T9342] vivid-000: Timestamp Source: End of Frame [ 135.754160][ T9342] vivid-000: Colorspace: Rec. 709 [ 135.756018][ T9342] vivid-000: Transfer Function: Default [ 135.757945][ T9342] vivid-000: Y'CbCr Encoding: Default [ 135.760784][ T9342] vivid-000: HSV Encoding: Hue 0-179 [ 135.764454][ T9342] vivid-000: Quantization: Default [ 135.766673][ T9342] vivid-000: Apply Alpha To Red Only: false [ 135.768770][ T9342] vivid-000: Standard Aspect Ratio: 4x3 [ 135.770719][ T9342] vivid-000: DV Timings Signal Mode: Current DV Timings [ 135.773067][ T9342] vivid-000: DV Timings: 640x480p59 inactive [ 135.774996][ T9342] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 135.777617][ T9342] vivid-000: Maximum EDID Blocks: 2 [ 135.779552][ T9342] vivid-000: Limited RGB Range (16-235): true [ 135.782598][ T9342] vivid-000: Rx RGB Quantization Range: Automatic [ 135.785188][ T9342] vivid-000: Power Present: 0x00000001 [ 135.786869][ T9342] tpg source WxH: 1280x720 (Y'CbCr) [ 135.788486][ T9342] tpg field: 1 [ 135.789576][ T9342] tpg crop: (0,0)/1280x720 [ 135.791186][ T9342] tpg compose: (0,0)/1280x720 [ 135.792832][ T9342] tpg colorspace: 3 [ 135.794332][ T9342] tpg transfer function: 0/0 [ 135.795887][ T9342] tpg Y'CbCr encoding: 0/0 [ 135.797312][ T9342] tpg quantization: 0/0 [ 135.798652][ T9342] tpg RGB range: 0/1 [ 135.799886][ T9342] vivid-000: ================== END STATUS ================== [ 136.695090][ T9369] mkiss: ax0: crc mode is auto. [ 136.713032][ T9369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.278707][ T6175] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 137.440847][ T6175] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.444346][ T6175] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.447490][ T6175] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.451884][ T6175] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.454792][ T6175] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.458583][ T6175] usb 7-1: config 0 descriptor?? [ 137.926310][ T6175] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 138.109345][ T9406] netlink: 'syz.1.1065': attribute type 39 has an invalid length. [ 140.134544][ T34] usb 7-1: USB disconnect, device number 8 [ 152.355613][ T9422] __nla_validate_parse: 5 callbacks suppressed [ 152.355630][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1071'. [ 152.362037][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 152.362049][ T40] audit: type=1400 audit(1756515228.167:2208): avc: denied { getopt } for pid=9421 comm="syz.1.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 152.419949][ T40] audit: type=1400 audit(1756515228.233:2209): avc: denied { mount } for pid=9424 comm="syz.2.1072" name="/" dev="autofs" ino=35326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 152.431845][ T40] audit: type=1400 audit(1756515228.242:2210): avc: denied { setattr } for pid=9424 comm="syz.2.1072" name="ALG" dev="sockfs" ino=32982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.434334][ T9442] fuse: Unknown parameter 'fdn!>WX#' [ 152.492441][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1080'. [ 153.264911][ T40] audit: type=1400 audit(1756515229.018:2211): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 153.300220][ T40] audit: type=1400 audit(1756515229.046:2212): avc: denied { setcheckreqprot } for pid=9462 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 153.338324][ T9473] program syz.2.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.372540][ T9474] 9pnet_fd: p9_fd_create_unix (9474): problem connecting socket: qY3aK: -91 [ 153.372624][ T9473] 9pnet_fd: p9_fd_create_unix (9473): problem connecting socket: qY3aK: -91 [ 153.808487][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 154.021821][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 154.060161][ T40] audit: type=1400 audit(1756515229.757:2213): avc: denied { listen } for pid=9499 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.130120][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 154.133032][ T9512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1097'. [ 154.136171][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 154.140015][ T9512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1097'. [ 154.194576][ T40] audit: type=1400 audit(1756515229.888:2214): avc: denied { read } for pid=9516 comm="syz.4.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.253219][ T9519] cgroup: Need name or subsystem set [ 154.263218][ T9519] dvmrp17: entered allmulticast mode [ 154.267754][ T9519] dvmrp17: left allmulticast mode [ 154.323748][ T40] audit: type=1400 audit(1756515230.010:2215): avc: denied { bind } for pid=9518 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.329741][ T40] audit: type=1400 audit(1756515230.010:2216): avc: denied { name_bind } for pid=9518 comm="syz.0.1100" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 154.336084][ T40] audit: type=1400 audit(1756515230.010:2217): avc: denied { node_bind } for pid=9518 comm="syz.0.1100" saddr=fc01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 154.383106][ T9522] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1101'. [ 154.422194][ T9526] usb usb8: usbfs: process 9526 (syz.0.1102) did not claim interface 0 before use [ 154.814130][ T9549] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 154.828318][ T9549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.838108][ T9549] bond1: (slave ip6erspan0): making interface the new active one [ 154.842473][ T9549] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 154.956481][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1115'. [ 154.963388][ T9567] 9pnet_fd: p9_fd_create_tcp (9567): problem connecting socket to 127.0.0.1 [ 155.162705][ T9592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9592 comm=syz.1.1124 [ 155.717962][ T9623] netlink: 'syz.2.1137': attribute type 21 has an invalid length. [ 155.720718][ T9624] netlink: 'syz.2.1137': attribute type 21 has an invalid length. [ 155.748177][ T9626] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 155.869569][ T9634] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 156.113247][ T9640] netlink: 'syz.4.1143': attribute type 21 has an invalid length. [ 156.116540][ T9640] netlink: 'syz.4.1143': attribute type 6 has an invalid length. [ 156.120641][ T9640] netlink: 'syz.4.1143': attribute type 21 has an invalid length. [ 156.123296][ T9640] netlink: 'syz.4.1143': attribute type 6 has an invalid length. [ 156.157655][ T9644] overlayfs: failed to clone upperpath [ 156.500643][ T9670] vlan0: entered allmulticast mode [ 156.502434][ T9670] veth0_to_hsr: entered allmulticast mode [ 156.504416][ T9670] bridge6: port 1(vlan0) entered blocking state [ 156.506649][ T9670] bridge6: port 1(vlan0) entered disabled state [ 156.509817][ T9670] vlan0: entered promiscuous mode [ 156.511719][ T9670] veth0_to_hsr: entered promiscuous mode [ 156.708553][ T9688] netlink: 'syz.4.1159': attribute type 4 has an invalid length. [ 156.716934][ T9688] netlink: 'syz.4.1159': attribute type 4 has an invalid length. [ 156.750588][ T9688] IPVS: Scheduler module ip_vs_sip not found [ 156.757891][ T9697] loop3: detected capacity change from 0 to 1 [ 156.762748][ T9697] Dev loop3: unable to read RDB block 1 [ 156.762858][ T9689] lo: Master is either lo or non-ether device [ 156.764659][ T9697] loop3: unable to read partition table [ 156.767001][ T9688] lo: Master is either lo or non-ether device [ 156.769507][ T9697] loop3: partition table beyond EOD, truncated [ 156.773637][ T9697] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 156.806125][ T9691] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 156.812193][ T9691] block nbd0: Unsupported socket: shutdown callout must be supported. [ 156.820073][ T9704] gfs2: path_lookup on 6(+dQnB!eUV!`: 8DSE y|YT{-,mb/ returned error -2 [ 156.820425][ T9691] serio: Serial port ptm0 [ 156.979752][ T9717] ip6_vti0: entered allmulticast mode [ 157.176239][ T9716] ip6_vti0: left allmulticast mode [ 157.276916][ T9730] loop3: detected capacity change from 0 to 1 [ 157.280002][ T9730] Dev loop3: unable to read RDB block 1 [ 157.282674][ T9730] loop3: unable to read partition table [ 157.284836][ T9730] loop3: partition table beyond EOD, truncated [ 157.287835][ T9730] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 157.336442][ T9731] bond0: (slave wlan1): Opening slave failed [ 157.636324][ T9754] 9pnet_rdma: rdma_create_trans (9754): problem binding to privport: 13 [ 157.782887][ T9763] overlayfs: failed to clone upperpath [ 157.830729][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 157.830740][ T40] audit: type=1400 audit(1756515233.293:2234): avc: denied { connect } for pid=9767 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.839328][ T40] audit: type=1400 audit(1756515233.293:2235): avc: denied { connect } for pid=9767 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.846898][ T40] audit: type=1400 audit(1756515233.302:2236): avc: denied { ioctl } for pid=9762 comm="syz.4.1183" path="socket:[34605]" dev="sockfs" ino=34605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.907796][ T9777] IPv4: Oversized IP packet from 127.202.26.0 [ 158.110428][ T9783] Invalid option length (1048180) for dns_resolver key [ 158.172529][ T9787] JFS: discard option not supported on device [ 158.198007][ T9787] block nbd2: Attempted send on invalid socket [ 158.207421][ T9787] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.224470][ T9787] block nbd2: Attempted send on invalid socket [ 158.226637][ T9787] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.229644][ T9787] Mount JFS Failure: -5 [ 158.402736][ T40] audit: type=1400 audit(1756515233.817:2237): avc: denied { unmount } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 158.471793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 159.392990][ T40] audit: type=1400 audit(1756515234.752:2238): avc: denied { read } for pid=9798 comm="syz.1.1193" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.406411][ T9804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=9804 comm=syz.2.1194 [ 159.457955][ T9808] __nla_validate_parse: 11 callbacks suppressed [ 159.457973][ T9808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1196'. [ 159.483250][ T9808] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 159.485834][ T9808] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 159.489589][ T9808] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1196'. [ 159.518043][ T40] audit: type=1400 audit(1756515234.874:2239): avc: denied { ioctl } for pid=9811 comm="syz.2.1197" path="socket:[33257]" dev="sockfs" ino=33257 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.554089][ T40] audit: type=1400 audit(1756515234.902:2240): avc: denied { name_bind 0x1000000 } for pid=9807 comm="syz.0.1196" path="socket:[35617]" dev="sockfs" ino=35617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 159.565490][ T9818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7168 sclass=netlink_route_socket pid=9818 comm=syz.0.1196 [ 159.648038][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1195'. [ 159.651804][ T9828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1195'. [ 159.781540][ T9842] f2fs: Unknown parameter 'dzsCvdP(Ȝu@w͠Nic#:I"J3dTeq@:' [ 159.846194][ T40] audit: type=1400 audit(1756515235.173:2241): avc: denied { map } for pid=9849 comm="syz.2.1210" path="pipe:[34671]" dev="pipefs" ino=34671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 159.855749][ T40] audit: type=1400 audit(1756515235.173:2242): avc: denied { execute } for pid=9849 comm="syz.2.1210" path="pipe:[34671]" dev="pipefs" ino=34671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 159.885045][ T40] audit: type=1400 audit(1756515235.211:2243): avc: denied { ioctl } for pid=9851 comm="syz.2.1211" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 160.097025][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 160.189546][ T6685] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 160.196246][ T840] hid-generic 07FF:18000:0003.0008: item fetching failed at offset 0/4 [ 160.199327][ T840] hid-generic 07FF:18000:0003.0008: probe with driver hid-generic failed with error -22 [ 160.311205][ T9864] netlink: 'syz.4.1216': attribute type 11 has an invalid length. [ 160.325842][ T9864] bond1: entered promiscuous mode [ 160.328490][ T9864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.350644][ T6685] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.354221][ T6685] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.357401][ T6685] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.360530][ T6685] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.366875][ T9855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.373669][ T6685] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.457941][ T1125] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 160.461462][ T1125] sr 2:0:0:0: [sr0] tag#23 Sense Key : Illegal Request [current] [ 160.464444][ T1125] sr 2:0:0:0: [sr0] tag#23 Add. Sense: Logical block address out of range [ 160.467642][ T1125] sr 2:0:0:0: [sr0] tag#23 CDB: Read(10) 28 00 00 00 00 20 00 00 02 00 [ 160.470689][ T1125] I/O error, dev sr0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 160.474054][ T9874] gfs2: error -5 reading superblock [ 160.594058][ T6685] usb 7-1: USB disconnect, device number 9 [ 160.650915][ T9900] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1212'. [ 160.710437][ T9904] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 160.730687][ T9906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.735028][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 160.824813][ T9916] overlayfs: failed to clone upperpath [ 160.860955][ T9919] tmpfs: Group quota inode hardlimit too large. [ 160.864957][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 160.868014][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 160.871754][ T9919] validate_nla: 1 callbacks suppressed [ 160.871772][ T9919] netlink: 'syz.4.1234': attribute type 19 has an invalid length. [ 160.959300][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 161.304990][ T9953] IPVS: set_ctl: invalid protocol: 51 172.20.20.14:20000 [ 161.307495][ T9952] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20000 [ 161.703353][ T9996] netdevsim netdevsim1 : renamed from netdevsim0 [ 161.784428][T10007] openvswitch: netlink: Duplicate or invalid key (type 0). [ 161.786792][T10007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.794533][T10007] veth1_to_bond: entered allmulticast mode [ 161.915886][T10015] fuse: Unknown parameter 'fdn!>WX#' [ 162.439640][T10039] pim6reg: entered allmulticast mode [ 162.442676][T10039] pim6reg: left allmulticast mode [ 162.588235][T10058] tty tty25: ldisc open failed (-12), clearing slot 24 [ 162.676367][T10006] veth1_to_bond: left allmulticast mode [ 162.850815][T10116] bond0: entered promiscuous mode [ 162.852557][T10116] bond_slave_0: entered promiscuous mode [ 162.854603][T10116] bond_slave_1: entered promiscuous mode [ 162.857273][T10116] bond0: left promiscuous mode [ 162.858830][T10116] bond_slave_0: left promiscuous mode [ 162.860682][T10116] bond_slave_1: left promiscuous mode [ 163.011002][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 163.027099][T10137] program syz.1.1302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.173772][T10160] IPv6: addrconf: prefix option has invalid lifetime [ 163.187140][ T29] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.191597][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.196339][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.199116][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.208307][T10091] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.216006][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.268019][T10166] sctp: [Deprecated]: syz.1.1309 (pid 10166) Use of int in max_burst socket option deprecated. [ 163.268019][T10166] Use struct sctp_assoc_value instead [ 163.328937][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 163.328950][ T40] audit: type=1400 audit(1756515238.428:2261): avc: denied { write } for pid=10167 comm="syz.0.1312" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.338434][ T40] audit: type=1400 audit(1756515238.428:2262): avc: denied { open } for pid=10167 comm="syz.0.1312" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.340660][T10168] bond5: entered allmulticast mode [ 163.348153][T10168] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.362831][T10168] bond6: entered allmulticast mode [ 163.366016][T10168] 8021q: adding VLAN 0 to HW filter on device bond6 [ 163.381107][T10168] bond7: entered allmulticast mode [ 163.383246][T10168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.410078][T10168] bond8: entered allmulticast mode [ 163.411971][T10168] 8021q: adding VLAN 0 to HW filter on device bond8 [ 163.426120][T10168] bond9: entered allmulticast mode [ 163.428856][T10168] 8021q: adding VLAN 0 to HW filter on device bond9 [ 163.448980][T10168] bond10: entered allmulticast mode [ 163.451283][T10168] 8021q: adding VLAN 0 to HW filter on device bond10 [ 163.459248][ T839] usb 7-1: USB disconnect, device number 10 [ 163.467801][T10168] bond11: entered allmulticast mode [ 163.470152][T10168] 8021q: adding VLAN 0 to HW filter on device bond11 [ 163.487340][T10168] bond12: entered allmulticast mode [ 163.490574][T10168] 8021q: adding VLAN 0 to HW filter on device bond12 [ 163.503988][T10168] bond13: entered allmulticast mode [ 163.505984][T10168] 8021q: adding VLAN 0 to HW filter on device bond13 [ 163.519320][T10168] bond14: entered allmulticast mode [ 163.521165][T10168] 8021q: adding VLAN 0 to HW filter on device bond14 [ 163.536421][T10168] bond15: entered allmulticast mode [ 163.538697][T10168] 8021q: adding VLAN 0 to HW filter on device bond15 [ 163.552228][T10168] bond16: entered allmulticast mode [ 163.554315][T10168] 8021q: adding VLAN 0 to HW filter on device bond16 [ 163.567285][T10168] bond17: entered allmulticast mode [ 163.569226][T10168] 8021q: adding VLAN 0 to HW filter on device bond17 [ 163.580598][T10168] bond18: entered allmulticast mode [ 163.582484][T10168] 8021q: adding VLAN 0 to HW filter on device bond18 [ 163.596726][T10168] bond19: entered allmulticast mode [ 163.598864][T10168] 8021q: adding VLAN 0 to HW filter on device bond19 [ 163.611323][T10168] bond20: entered allmulticast mode [ 163.613456][T10168] 8021q: adding VLAN 0 to HW filter on device bond20 [ 163.626798][T10168] bond21: entered allmulticast mode [ 163.629027][T10168] 8021q: adding VLAN 0 to HW filter on device bond21 [ 163.644349][T10168] bond22: entered allmulticast mode [ 163.646689][T10168] 8021q: adding VLAN 0 to HW filter on device bond22 [ 163.660455][T10168] bond23: entered allmulticast mode [ 163.663305][T10168] 8021q: adding VLAN 0 to HW filter on device bond23 [ 163.678371][T10168] bond24: entered allmulticast mode [ 163.680712][T10168] 8021q: adding VLAN 0 to HW filter on device bond24 [ 163.697091][T10168] bond25: entered allmulticast mode [ 163.699770][T10168] 8021q: adding VLAN 0 to HW filter on device bond25 [ 163.722412][T10168] bond26: entered allmulticast mode [ 163.726800][T10168] 8021q: adding VLAN 0 to HW filter on device bond26 [ 163.748394][T10168] bond27: entered allmulticast mode [ 163.751245][T10168] 8021q: adding VLAN 0 to HW filter on device bond27 [ 163.764727][T10168] bond28: entered allmulticast mode [ 163.767380][T10168] 8021q: adding VLAN 0 to HW filter on device bond28 [ 163.781769][T10168] bond29: entered allmulticast mode [ 163.784126][T10168] 8021q: adding VLAN 0 to HW filter on device bond29 [ 163.798250][T10168] bond30: entered allmulticast mode [ 163.800580][T10168] 8021q: adding VLAN 0 to HW filter on device bond30 [ 163.814772][T10168] bond31: entered allmulticast mode [ 163.817007][T10168] 8021q: adding VLAN 0 to HW filter on device bond31 [ 163.831187][T10168] bond32: entered allmulticast mode [ 163.833420][T10168] 8021q: adding VLAN 0 to HW filter on device bond32 [ 163.847647][T10168] bond33: entered allmulticast mode [ 163.849680][T10168] 8021q: adding VLAN 0 to HW filter on device bond33 [ 163.862485][T10168] bond34: entered allmulticast mode [ 163.864472][T10168] 8021q: adding VLAN 0 to HW filter on device bond34 [ 163.878572][T10168] bond35: entered allmulticast mode [ 163.880695][T10168] 8021q: adding VLAN 0 to HW filter on device bond35 [ 163.897435][T10168] bond36: entered allmulticast mode [ 163.900633][T10168] 8021q: adding VLAN 0 to HW filter on device bond36 [ 163.957567][T10204] netlink: 'syz.4.1313': attribute type 21 has an invalid length. [ 164.014651][T10168] bond37: entered allmulticast mode [ 164.017431][T10168] 8021q: adding VLAN 0 to HW filter on device bond37 [ 164.037380][T10168] bond38: entered allmulticast mode [ 164.040196][T10168] 8021q: adding VLAN 0 to HW filter on device bond38 [ 164.068466][T10168] bond39: entered allmulticast mode [ 164.073754][T10168] 8021q: adding VLAN 0 to HW filter on device bond39 [ 164.100763][T10168] bond40: entered allmulticast mode [ 164.103737][T10168] 8021q: adding VLAN 0 to HW filter on device bond40 [ 164.127813][T10168] bond41: entered allmulticast mode [ 164.130081][T10168] 8021q: adding VLAN 0 to HW filter on device bond41 [ 164.147377][T10168] bond42: entered allmulticast mode [ 164.149518][T10168] 8021q: adding VLAN 0 to HW filter on device bond42 [ 164.156545][ T40] audit: type=1400 audit(1756515239.214:2263): avc: denied { listen } for pid=10230 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.167854][T10168] bond43: entered allmulticast mode [ 164.170483][T10168] 8021q: adding VLAN 0 to HW filter on device bond43 [ 164.184602][T10168] bond44: entered allmulticast mode [ 164.187511][T10168] 8021q: adding VLAN 0 to HW filter on device bond44 [ 164.206435][T10168] bond45: entered allmulticast mode [ 164.208713][T10168] 8021q: adding VLAN 0 to HW filter on device bond45 [ 164.240720][T10168] bond46: entered allmulticast mode [ 164.242874][T10168] 8021q: adding VLAN 0 to HW filter on device bond46 [ 164.255711][ T40] audit: type=1400 audit(1756515239.298:2264): avc: denied { create } for pid=10243 comm="syz.2.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 164.322756][ T40] audit: type=1400 audit(1756515239.364:2265): avc: denied { listen } for pid=10252 comm="syz.0.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 164.330885][ T40] audit: type=1400 audit(1756515239.364:2266): avc: denied { accept } for pid=10252 comm="syz.0.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 164.378255][T10265] JFS: discard option not supported on device [ 164.384013][T10265] block nbd0: Attempted send on invalid socket [ 164.387135][T10265] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.392118][T10265] block nbd0: Attempted send on invalid socket [ 164.394945][T10265] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.399424][T10265] Mount JFS Failure: -5 [ 164.439938][ T40] audit: type=1400 audit(1756515239.467:2267): avc: denied { getopt } for pid=10268 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.171467][T10337] netlink: 'syz.4.1354': attribute type 30 has an invalid length. [ 165.217293][ T40] audit: type=1400 audit(1756515240.196:2268): avc: denied { setopt } for pid=10341 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 165.264157][T10348] mkiss: ax0: crc mode is auto. [ 165.418620][T10358] loop3: detected capacity change from 0 to 1 [ 165.424453][ T9618] Dev loop3: unable to read RDB block 1 [ 165.426468][ T9618] loop3: unable to read partition table [ 165.429145][ T9618] loop3: partition table beyond EOD, truncated [ 165.433027][T10358] Dev loop3: unable to read RDB block 1 [ 165.436072][T10358] loop3: unable to read partition table [ 165.439742][T10358] loop3: partition table beyond EOD, truncated [ 165.441867][T10358] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 165.467533][T10357] openvswitch: netlink: EtherType 0 is less than min 600 [ 165.498411][ T40] audit: type=1400 audit(1756515240.458:2269): avc: granted { setsecparam } for pid=10359 comm="syz.1.1364" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 165.553339][T10365] __nla_validate_parse: 14 callbacks suppressed [ 165.553354][T10365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1365'. [ 165.558582][T10365] netlink: 'syz.2.1365': attribute type 7 has an invalid length. [ 165.561985][T10365] netlink: 'syz.2.1365': attribute type 8 has an invalid length. [ 165.565772][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 165.610964][T10385] afs: Unknown parameter 'dyn.uw' [ 165.615961][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1374'. [ 165.619955][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1374'. [ 165.646551][ T40] audit: type=1400 audit(1756515240.599:2270): avc: denied { setopt } for pid=10390 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 165.704390][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 165.711067][T10405] fuse: Bad value for 'fd' [ 165.743835][T10409] loop3: detected capacity change from 0 to 1 [ 165.747470][T10409] Dev loop3: unable to read RDB block 1 [ 165.750492][T10409] loop3: unable to read partition table [ 165.752768][T10409] loop3: partition table beyond EOD, truncated [ 165.754815][T10409] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 165.761831][T10413] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 165.808702][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1388'. [ 165.812837][T10417] IPVS: persistence engine module ip_vs_pe_s not found [ 165.824987][T10419] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 165.833292][ T839] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 165.993565][ T839] usb 6-1: Using ep0 maxpacket: 32 [ 165.997278][ T839] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 165.999699][ T839] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 166.003101][ T839] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 166.008904][ T839] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 166.012690][ T839] usb 6-1: config 0 interface 0 has no altsetting 0 [ 166.017193][ T839] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 166.020712][ T839] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 166.023564][ T839] usb 6-1: Product: syz [ 166.025379][ T839] usb 6-1: Manufacturer: syz [ 166.027521][ T839] usb 6-1: SerialNumber: syz [ 166.031974][ T839] usb 6-1: config 0 descriptor?? [ 166.036769][ T839] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 166.041546][ T839] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 166.097164][T10426] netlink: 'syz.2.1390': attribute type 7 has an invalid length. [ 166.159358][T10441] fuse: Bad value for 'fd' [ 166.220561][T10443] team0: Port device bond0 removed [ 166.232200][T10443] bond0: (slave netdevsim0): Releasing backup interface [ 166.243621][T10443] netlink: 'syz.2.1393': attribute type 10 has an invalid length. [ 166.246598][T10443] bond0: (slave wlan1): Opening slave failed [ 166.252976][ T839] usb 6-1: USB disconnect, device number 10 [ 166.254495][T10380] openvswitch: netlink: IPv6 tunnel dst address is zero [ 166.256326][ T839] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 166.603153][ T6175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.661343][T10462] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1400'. [ 166.750406][T10468] netlink: 'syz.4.1402': attribute type 10 has an invalid length. [ 166.754220][T10468] bond0: (slave wlan1): Opening slave failed [ 166.780645][T10473] netlink: 'syz.4.1404': attribute type 12 has an invalid length. [ 166.783795][T10473] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1404'. [ 166.873645][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 166.876543][T10494] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1411'. [ 166.898608][T10492] netlink: 'syz.0.1410': attribute type 20 has an invalid length. [ 166.908081][T10492] netlink: 'syz.0.1410': attribute type 20 has an invalid length. [ 166.908107][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.916297][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.924074][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.927497][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.932402][T10489] 9pnet_virtio: no channels available for device syz [ 167.034536][T10509] syzkaller1: entered promiscuous mode [ 167.036327][T10509] syzkaller1: entered allmulticast mode [ 167.042930][T10509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.130890][T10509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.205734][T10531] fuse: Unknown parameter 'fdn!>WX#' [ 167.258929][T10538] netlink: 'syz.1.1421': attribute type 25 has an invalid length. [ 167.383535][T10519] cgroup: fork rejected by pids controller in /syz2 [ 167.557600][T10565] tipc: Bearer : already 2 bearers with priority 10 [ 167.559969][T10565] tipc: Bearer : trying with adjusted priority [ 167.562772][T10565] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.565647][T10565] tipc: Enabled bearer , priority 9 [ 167.602137][T10573] gtp0: entered promiscuous mode [ 167.705272][ T839] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 167.714805][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.802659][T10600] xfrm0 speed is unknown, defaulting to 1000 [ 167.805312][T10600] xfrm0 speed is unknown, defaulting to 1000 [ 167.808103][T10600] xfrm0 speed is unknown, defaulting to 1000 [ 167.813797][T10600] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.823391][T10600] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.838662][T10600] xfrm0 speed is unknown, defaulting to 1000 [ 167.842944][T10600] xfrm0 speed is unknown, defaulting to 1000 [ 167.847198][T10600] xfrm0 speed is unknown, defaulting to 1000 [ 167.849845][T10600] xfrm0 speed is unknown, defaulting to 1000 [ 167.889858][ T839] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 167.893875][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.899219][T10608] overlayfs: failed to resolve './bus': -2 [ 167.900555][ T839] usb 5-1: Product: syz [ 167.903109][ T839] usb 5-1: Manufacturer: syz [ 167.905108][ T839] usb 5-1: SerialNumber: syz [ 167.908632][ T839] usb 5-1: config 0 descriptor?? [ 167.911425][ T839] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 168.003667][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.128759][ T839] usb 5-1: USB disconnect, device number 8 [ 168.413789][T10644] binder: 10643:10644 ioctl 400c620e 200000000640 returned -22 [ 168.434491][T10642] 0: renamed from hsr0 (while UP) [ 168.441166][T10642] 0: entered allmulticast mode [ 168.443382][T10642] hsr_slave_0: entered allmulticast mode [ 168.445205][T10642] hsr_slave_1: entered allmulticast mode [ 168.447447][T10642] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 168.521115][T10652] fuse: Unknown parameter 'fdn!>WX#' [ 168.580708][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.656541][T10662] netlink: 'syz.4.1447': attribute type 21 has an invalid length. [ 168.660966][T10662] netlink: 'syz.4.1447': attribute type 4 has an invalid length. [ 168.664305][T10662] netlink: 'syz.4.1447': attribute type 5 has an invalid length. [ 168.693858][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 168.693874][ T40] audit: type=1400 audit(1756515243.452:2286): avc: denied { map } for pid=10664 comm="syz.4.1448" path="socket:[37620]" dev="sockfs" ino=37620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.173727][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.176816][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.248654][T10717] fuse: Unknown parameter 'fdn!>WX#' [ 169.446730][ T6035] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 169.505134][T10724] ./cgroup: Can't lookup blockdev [ 169.617880][ T6035] usb 7-1: Using ep0 maxpacket: 8 [ 169.621141][ T6035] usb 7-1: config 0 interface 0 has no altsetting 0 [ 169.623416][ T6035] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 169.626454][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.630608][ T6035] usb 7-1: config 0 descriptor?? [ 169.713929][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.737001][T10679] ceph: No mds server is up or the cluster is laggy [ 169.759269][ T40] audit: type=1400 audit(1756515244.443:2287): avc: denied { bind } for pid=10732 comm="syz.4.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.861603][T10743] fuse: Unknown parameter 'fdn!>WX#' [ 170.088371][ T6818] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.121334][ T6035] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 170.250375][ T6818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.253582][ T6818] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 170.257684][ T6818] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.260636][ T6818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.264745][ T6818] usb 5-1: config 0 descriptor?? [ 170.268753][ T6818] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 170.338922][T10711] netlink: 'syz.2.1460': attribute type 1 has an invalid length. [ 170.351590][T10712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.729748][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.815030][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.077176][T10761] sch_tbf: burst 824 is lower than device lo mtu (11337746) ! [ 171.087500][T10761] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 171.091140][T10762] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 171.208262][ T40] audit: type=1400 audit(1756515245.799:2288): avc: denied { read } for pid=10772 comm="syz.4.1480" name="file0" dev="tmpfs" ino=2666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.267292][T10778] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 171.337274][T10785] __nla_validate_parse: 9 callbacks suppressed [ 171.337288][T10785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1483'. [ 171.343622][T10785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1483'. [ 171.926903][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.390977][ T34] usb 7-1: USB disconnect, device number 11 [ 172.435667][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 172.438671][T10797] validate_nla: 1 callbacks suppressed [ 172.438682][T10797] netlink: 'syz.4.1488': attribute type 14 has an invalid length. [ 172.444931][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 172.449520][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 172.454161][T10797] netlink: 'syz.4.1488': attribute type 14 has an invalid length. [ 172.457590][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 172.467574][T10800] loop3: detected capacity change from 0 to 1 [ 172.470841][T10800] Dev loop3: unable to read RDB block 1 [ 172.473819][T10800] loop3: unable to read partition table [ 172.475932][T10800] loop3: partition table beyond EOD, truncated [ 172.481846][T10800] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 172.491962][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 172.514852][ T6035] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 172.583947][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 172.651047][T10816] lo speed is unknown, defaulting to 1000 [ 172.679321][ T6035] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 172.681819][ T6035] usb 6-1: can't read configurations, error -71 [ 172.737422][T10816] xfrm0 speed is unknown, defaulting to 1000 [ 173.038740][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.041844][ T6818] usb 5-1: USB disconnect, device number 9 [ 173.141467][ C1] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 173.145177][ C1] sr 2:0:0:0: [sr0] tag#24 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 173.158731][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 173.185430][T10830] macvlan4: entered promiscuous mode [ 173.187674][T10830] macvlan4: entered allmulticast mode [ 173.190920][T10830] bond4: entered promiscuous mode [ 173.194650][T10830] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 173.203397][T10830] bond4: left promiscuous mode [ 173.269899][T10838] syzkaller1: entered promiscuous mode [ 173.271753][T10838] syzkaller1: entered allmulticast mode [ 173.491007][T10854] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 173.500580][T10854] CIFS: Unable to determine destination address [ 173.552282][T10860] overlayfs: failed to clone upperpath [ 173.659465][ T40] audit: type=1400 audit(1756515248.100:2289): avc: denied { create } for pid=10863 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 173.667725][ T40] audit: type=1400 audit(1756515248.100:2290): avc: denied { getopt } for pid=10863 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 173.730732][ T40] audit: type=1400 audit(1756515248.157:2291): avc: denied { setopt } for pid=10872 comm="syz.0.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.739084][ T40] audit: type=1400 audit(1756515248.157:2292): avc: denied { nlmsg_read } for pid=10872 comm="syz.0.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.780394][T10876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1050 sclass=netlink_route_socket pid=10876 comm=syz.0.1516 [ 173.787322][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 173.847458][T10877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10877 comm=syz.0.1516 [ 173.949088][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.952618][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.955765][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.960034][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.963038][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.968421][ T34] usb 7-1: config 0 descriptor?? [ 174.150583][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 174.405289][ T34] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 174.759423][T10899] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 174.761583][T10899] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.764499][T10899] vhci_hcd vhci_hcd.0: Device attached [ 174.768843][T10900] vhci_hcd: connection closed [ 174.770055][ T66] vhci_hcd: stop threads [ 174.773313][ T66] vhci_hcd: release socket [ 174.774797][ T66] vhci_hcd: disconnect device [ 174.854973][T10907] fuse: Bad value for 'group_id' [ 174.856899][T10907] fuse: Bad value for 'group_id' [ 175.261729][T10924] netlink: 'syz.1.1530': attribute type 10 has an invalid length. [ 175.262466][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.267104][T10924] batman_adv: batadv0: Adding interface: team0 [ 175.269748][T10924] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.278006][T10924] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 175.353648][T10935] netlink: 'syz.0.1533': attribute type 4 has an invalid length. [ 175.415083][T10945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1537'. [ 175.461386][ T40] audit: type=1400 audit(1756515249.784:2293): avc: denied { add_name } for pid=10946 comm="syz.0.1538" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.469513][ T40] audit: type=1400 audit(1756515249.784:2294): avc: denied { create } for pid=10946 comm="syz.0.1538" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 175.476479][ T40] audit: type=1400 audit(1756515249.784:2295): avc: denied { associate } for pid=10946 comm="syz.0.1538" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 175.484081][ T40] audit: type=1400 audit(1756515249.784:2296): avc: denied { read append open } for pid=10946 comm="syz.0.1538" path="/304/file0/cpuset.effective_cpus" dev="9p" ino=35913967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.493423][ T40] audit: type=1400 audit(1756515249.794:2297): avc: denied { lock } for pid=10946 comm="syz.0.1538" path="/304/file0/cpuset.effective_cpus" dev="9p" ino=35913967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.502189][ T40] audit: type=1400 audit(1756515249.794:2298): avc: denied { write } for pid=10946 comm="syz.0.1538" name="cpuset.effective_cpus" dev="9p" ino=35913967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.622124][T10959] loop3: detected capacity change from 0 to 1 [ 175.624773][T10959] Dev loop3: unable to read RDB block 1 [ 175.626927][T10959] loop3: unable to read partition table [ 175.628902][T10959] loop3: partition table beyond EOD, truncated [ 175.630890][T10959] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 175.660503][ T40] audit: type=1326 audit(1756515249.971:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10960 comm="syz.0.1542" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa54a78ebe9 code=0x0 [ 175.716323][ T40] audit: type=1400 audit(1756515250.018:2300): avc: denied { mounton } for pid=10960 comm="syz.0.1542" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 175.717252][T10962] overlayfs: conflicting lowerdir path [ 175.800241][ T40] audit: type=1400 audit(1756515250.102:2301): avc: denied { associate } for pid=10955 comm="syz.1.1540" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 175.813458][T10979] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 175.817345][T10979] kAFS: unparsable volume name [ 175.817397][T10980] kAFS: unparsable volume name [ 175.978337][T10992] overlayfs: conflicting options: userxattr,redirect_dir=on [ 176.376440][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.464279][T11008] nbd: must specify an index to disconnect [ 176.550068][ T840] usb 7-1: USB disconnect, device number 12 [ 177.282174][T11020] input: syz1 as /devices/virtual/input/input13 [ 177.496689][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.597837][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.631841][ T40] audit: type=1400 audit(1756515252.749:2302): avc: denied { read } for pid=5365 comm="acpid" name="event4" dev="devtmpfs" ino=3120 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 178.633911][T11082] __nla_validate_parse: 3 callbacks suppressed [ 178.633923][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 178.649690][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 178.777386][T11094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1583'. [ 178.786033][T11094] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1583'. [ 178.791401][T11094] netlink: 'syz.4.1583': attribute type 5 has an invalid length. [ 178.796111][T11094] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1583'. [ 178.858133][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 179.711242][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.380809][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 180.384487][T11097] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1584'. [ 180.392557][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 180.395832][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 180.417667][T11103] loop3: detected capacity change from 0 to 1 [ 180.420700][T11103] Dev loop3: unable to read RDB block 1 [ 180.422486][T11103] loop3: unable to read partition table [ 180.424313][T11103] loop3: partition table beyond EOD, truncated [ 180.427080][T11103] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 180.472821][T11110] netlink: 'syz.1.1588': attribute type 39 has an invalid length. [ 180.531428][T11116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.535481][T11116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.538564][T11116] batman_adv: batadv0: Removing interface: team0 [ 180.544695][T11118] fuse: Unknown parameter 'fdn!>WX#' [ 180.831842][T11143] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 182.312285][T11163] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 182.351567][T11170] netlink: 'syz.2.1607': attribute type 2 has an invalid length. [ 182.384518][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 182.384530][ T40] audit: type=1400 audit(1756515256.257:2308): avc: denied { shutdown } for pid=11177 comm="syz.2.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.496601][T11191] lo speed is unknown, defaulting to 1000 [ 182.581844][ T40] audit: type=1400 audit(1756517834.444:2309): avc: denied { link } for pid=11180 comm="syz.1.1611" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 182.607367][T11191] xfrm0 speed is unknown, defaulting to 1000 [ 182.609873][T11205] netlink: 'syz.4.1619': attribute type 13 has an invalid length. [ 182.613478][T11205] sctp: [Deprecated]: syz.4.1619 (pid 11205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.613478][T11205] Use struct sctp_sack_info instead [ 182.695327][T11214] all: renamed from lo (while UP) [ 182.732810][T11223] IPv6: sit2: Disabled Multicast RS [ 182.736091][T11223] sit2: entered allmulticast mode [ 182.743289][T11225] fuse: Unknown parameter 'fdn!>WX#' [ 182.895126][T11236] netlink: 'syz.4.1631': attribute type 13 has an invalid length. [ 182.900302][T11236] netlink: 'syz.4.1631': attribute type 13 has an invalid length. [ 182.905246][T11236] netlink: 'syz.4.1631': attribute type 13 has an invalid length. [ 182.909084][T11236] netlink: 'syz.4.1631': attribute type 13 has an invalid length. [ 182.952500][T11249] netlink: 'syz.1.1634': attribute type 16 has an invalid length. [ 182.955328][T11249] netlink: 'syz.1.1634': attribute type 17 has an invalid length. [ 182.971902][T11251] /dev/nullb0: Can't lookup blockdev [ 183.001425][T11249] gtp0: left promiscuous mode [ 183.049458][ T40] audit: type=1400 audit(1756517834.883:2310): avc: denied { remount } for pid=11254 comm="syz.2.1637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 183.084724][T11259] fuse: Unknown parameter 'fdn!>WX#' [ 183.326808][T11285] ceph: No source [ 183.368318][T11293] input: syz0 as /devices/virtual/input/input15 [ 183.414215][T11301] fuse: Unknown parameter 'fdn!>WX#' [ 183.684024][T11322] overlayfs: missing 'lowerdir' [ 183.699295][T11322] fuse: Unknown parameter '' [ 183.699315][T11323] fuse: Unknown parameter '' [ 183.815324][T11344] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 183.818961][T11344] syzkaller0: entered promiscuous mode [ 183.821323][T11344] syzkaller0: entered allmulticast mode [ 183.853603][T11344] tmpfs: Bad value for 'huge' [ 183.999997][T11349] fuse: Unknown parameter 'fdn!>WX#' [ 184.229184][ T40] audit: type=1400 audit(1756517835.978:2311): avc: denied { append } for pid=11360 comm="syz.1.1670" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.237454][ T40] audit: type=1400 audit(1756517835.978:2312): avc: denied { setopt } for pid=11360 comm="syz.1.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 184.693177][ T40] audit: type=1400 audit(1756517836.417:2313): avc: denied { read } for pid=11367 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.806750][T11379] overlayfs: failed to clone upperpath [ 184.921816][T11387] validate_nla: 1 callbacks suppressed [ 184.921829][T11387] netlink: 'syz.2.1681': attribute type 2 has an invalid length. [ 184.928179][T11387] __nla_validate_parse: 16 callbacks suppressed [ 184.928191][T11387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1681'. [ 184.993941][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 185.042842][T11399] loop3: detected capacity change from 0 to 1 [ 185.045690][T11399] Dev loop3: unable to read RDB block 1 [ 185.047562][T11399] loop3: unable to read partition table [ 185.049566][T11399] loop3: partition table beyond EOD, truncated [ 185.051696][T11399] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 185.131890][T11409] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1689'. [ 185.163538][T11412] fuse: Unknown parameter 'fdn!>WX#' [ 185.220368][T11405] lo speed is unknown, defaulting to 1000 [ 185.315970][T11411] lo speed is unknown, defaulting to 1000 [ 185.322939][T11405] xfrm0 speed is unknown, defaulting to 1000 [ 185.421837][T11411] xfrm0 speed is unknown, defaulting to 1000 [ 185.922400][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 185.922541][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1695'. [ 185.928908][T11434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1694'. [ 185.966420][T11436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11436 comm=syz.2.1695 [ 185.967330][ T40] audit: type=1400 audit(1756517837.615:2314): avc: denied { map } for pid=11439 comm="syz.1.1697" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.032091][T11450] [U] :Vc[rQ<.)'ZYG]@­NFdh ,0y@f;&U}[#,s/Ȭ:fN(B0'0/n/2Mg]42} j;BTw5Ӿ18udRR [ 186.039611][T11452] bond0: (slave bond_slave_0): Releasing backup interface [ 186.040152][T11450] [U] -uW"Ez2俆hH0m=041uLbB`["FYV0M6u=}_ [ 186.046755][T11450] [U] .f_a[Yb8XGYB Z Q\g} [ 186.049510][T11450] [U] C>M˭܀KD2X\sYb:3u`oıΧm}(f&BHGg7)%8XgP fm_OӲ~!Ik3R0D *yHEum [ 186.051840][T11452] bond0: (slave bond_slave_1): Releasing backup interface [ 186.053765][T11450] [U] {~`frYW&4Lm.ֲaZi8\%Մ}%8{J" +ԍshW(U<&k؊nT'Z֕^"gQ~ [ 186.053789][T11450] [U] ^Z+3'B7 [ 186.053794][T11450] [U] `RDi1 [ 186.053802][T11450] [U] m7!aO@ve9/S.u&r [ 186.053809][T11450] [U] q֩zIݟi1s [ 186.067218][T11450] [U] ~̀Buݗgxu6e|@F˘$+Zɡ.A=!tm>kc>/S\N%99m'!|Kc&d|{PeW2(jr BL:+*SxMJ&vh#rK[i${7-T=2TWd _ݲ@&wk[nnX.fH܂JB Mpb [ 186.080233][T11450] [U] ÛlZF$u-UyF!CA4i3'~iB/"Z)L{0WA0tW?q [ 186.081084][T11452] team0: Port device team_slave_0 removed [ 186.090145][T11452] team0: Port device team_slave_1 removed [ 186.092573][T11452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.098384][T11452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.110698][T11452] vlan0: left promiscuous mode [ 186.112860][T11452] veth0_to_hsr: left promiscuous mode [ 186.113868][T11449] [U] Q*Eru@'g@ [ 186.116576][T11452] bridge6: port 1(vlan0) entered disabled state [ 186.129907][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 186.136149][T11452] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1701'. [ 186.139541][T11452] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1701'. [ 186.143182][T11452] team0: Mode changed to "random" [ 186.230311][T11468] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 186.341586][T11481] netlink: 'syz.1.1710': attribute type 32 has an invalid length. [ 186.360262][T11484] random: crng reseeded on system resumption [ 186.363433][ T40] audit: type=1400 audit(1756517837.980:2315): avc: denied { write } for pid=11483 comm="syz.0.1711" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 186.384315][T11490] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1708'. [ 186.385760][T11489] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 186.390508][T11489] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 186.396575][T11489] vhci_hcd vhci_hcd.0: Device attached [ 186.399562][T11491] vhci_hcd: connection closed [ 186.400952][T11071] vhci_hcd: stop threads [ 186.405425][T11071] vhci_hcd: release socket [ 186.407331][T11071] vhci_hcd: disconnect device [ 186.957028][T11527] CIFS mount error: No usable UNC path provided in device string! [ 186.957028][T11527] [ 186.961586][T11527] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 186.964810][ T40] audit: type=1400 audit(1756517838.541:2316): avc: denied { override_creds } for pid=11524 comm="syz.2.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.004971][ T40] audit: type=1400 audit(1756517838.578:2317): avc: denied { unmount } for pid=11529 comm="syz.2.1722" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 187.866840][ T40] audit: type=1400 audit(1756517839.392:2318): avc: denied { write } for pid=11568 comm="syz.1.1737" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 188.123288][ T840] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 188.286942][ T840] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.290048][ T840] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 188.293261][ T840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.296996][ T840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 188.301145][ T840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 188.306638][ T840] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.309476][ T840] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.312694][ T840] usb 6-1: Product: syz [ 188.314287][ T840] usb 6-1: Manufacturer: syz [ 188.320943][ T840] cdc_wdm 6-1:1.0: skipping garbage [ 188.322658][ T840] cdc_wdm 6-1:1.0: skipping garbage [ 188.325729][ T840] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 188.335296][ T840] cdc_wdm 6-1:1.0: Unknown control protocol [ 188.535766][ T840] usb 6-1: USB disconnect, device number 13 [ 189.170656][ T40] audit: type=1400 audit(1756517840.599:2319): avc: denied { execute } for pid=11592 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 189.191535][ T40] audit: type=1400 audit(1756517840.599:2320): avc: denied { execute_no_trans } for pid=11592 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 189.224415][ T6818] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 189.344737][ T5970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.351481][ T5970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.355818][ T5970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.375995][ T5970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.390871][ T6818] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.394603][ T5970] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.396990][ T6818] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.400203][ T6818] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.403469][ T6818] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 189.404012][ T5979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.407904][ T6818] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 189.415652][ T5979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.418506][ T6818] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.421386][ T5979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.422334][ T6818] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.424936][ T5979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.426818][ T6818] usb 6-1: Product: syz [ 189.429812][ T5979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.431101][ T6818] usb 6-1: Manufacturer: syz [ 189.443231][ T6818] cdc_wdm 6-1:1.0: skipping garbage [ 189.445176][ T6818] cdc_wdm 6-1:1.0: skipping garbage [ 189.456861][T11597] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 189.460005][ T6818] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 189.460021][ T6818] cdc_wdm 6-1:1.0: Unknown control protocol [ 189.468258][T11593] lo speed is unknown, defaulting to 1000 [ 189.609475][T11593] xfrm0 speed is unknown, defaulting to 1000 [ 189.665506][ T839] usb 6-1: USB disconnect, device number 14 [ 189.715896][ T40] audit: type=1400 audit(1756517841.113:2321): avc: denied { append } for pid=11604 comm="syz.2.1747" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 189.731559][T11593] chnl_net:caif_netlink_parms(): no params data found [ 189.831176][T11593] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.833993][T11593] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.836357][T11593] bridge_slave_0: entered allmulticast mode [ 189.839899][T11593] bridge_slave_0: entered promiscuous mode [ 189.844943][T11593] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.847528][T11593] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.850391][T11593] bridge_slave_1: entered allmulticast mode [ 189.854163][T11593] bridge_slave_1: entered promiscuous mode [ 189.917884][T11593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.923116][T11593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.979675][T11593] team0: Port device team_slave_0 added [ 189.984225][T11593] team0: Port device team_slave_1 added [ 190.030461][T11593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.032847][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.041666][T11593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.049003][T11593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.051395][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.061198][T11593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.119866][T11593] hsr_slave_0: entered promiscuous mode [ 190.123402][T11593] hsr_slave_1: entered promiscuous mode [ 190.634978][ T40] audit: type=1400 audit(1756517841.974:2322): avc: denied { ioctl } for pid=11639 comm="syz.2.1759" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 190.637651][T11641] netlink: 'syz.2.1759': attribute type 10 has an invalid length. [ 190.646804][T11641] __nla_validate_parse: 3 callbacks suppressed [ 190.646815][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1759'. [ 190.653992][T11641] dummy0: entered promiscuous mode [ 190.659102][T11641] bridge0: port 1(dummy0) entered blocking state [ 190.661609][T11641] bridge0: port 1(dummy0) entered disabled state [ 190.663907][T11641] dummy0: entered allmulticast mode [ 190.668651][T11641] bridge0: port 1(dummy0) entered blocking state [ 190.670707][T11641] bridge0: port 1(dummy0) entered forwarding state [ 190.715677][ T40] audit: type=1400 audit(1756517842.049:2323): avc: denied { compute_member } for pid=11644 comm="syz.2.1760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 190.743726][ T839] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 190.754996][T11593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.770047][T11593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.777594][T11593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.782677][T11593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.835598][T11593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.850058][T11593] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.855874][T11071] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.858593][T11071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.866915][T11071] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.869249][T11071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.900971][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'. [ 190.906312][ T839] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.909636][ T839] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.914501][ T839] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.917563][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.959291][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'. [ 191.021933][T11593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.042004][T11671] pim6reg: entered allmulticast mode [ 191.091012][ T40] audit: type=1400 audit(1756517842.404:2324): avc: denied { connect } for pid=11675 comm="syz.2.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 191.142438][ T839] usb 6-1: usb_control_msg returned -32 [ 191.144313][ T839] usbtmc 6-1:16.0: can't read capabilities [ 191.171079][T11679] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.175366][T11679] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.265774][T11679] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.272513][T11679] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.293296][T11593] veth0_vlan: entered promiscuous mode [ 191.300895][T11593] veth1_vlan: entered promiscuous mode [ 191.321134][T11593] veth0_macvtap: entered promiscuous mode [ 191.326072][T11593] veth1_macvtap: entered promiscuous mode [ 191.337492][T11593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.348448][T11593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.366789][T11679] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.370727][T11679] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.382686][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.386367][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.393828][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.397650][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.452740][T11679] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.456093][T11679] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.486904][T11066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.489680][T11066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.521247][T11071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.525857][T11071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.538415][ T40] audit: type=1400 audit(1756517842.816:2325): avc: denied { mounton } for pid=11593 comm="syz-executor" path="/syzkaller.VCOiLU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 191.565981][ T40] audit: type=1400 audit(1756517842.844:2326): avc: denied { mounton } for pid=11593 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 191.595278][T11685] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1745'. [ 191.602909][T11071] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.605663][T11071] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.608350][ T5979] Bluetooth: hci4: command tx timeout [ 191.622846][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.625617][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.643828][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.646571][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.661074][T11071] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.663759][T11071] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.674795][T11679] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.679102][T11679] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.701765][T11686] XFS (nullb0): Invalid superblock magic number [ 191.705349][T11071] ================================================================== [ 191.707935][T11071] BUG: KASAN: slab-use-after-free in __mutex_lock+0xc70/0x1060 [ 191.710690][T11071] Read of size 8 at addr ffff88810aad18b0 by task kworker/u32:18/11071 [ 191.714273][T11071] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 191.716426][T11071] CPU: 0 UID: 0 PID: 11071 Comm: kworker/u32:18 Not tainted syzkaller #0 PREEMPT(full) [ 191.716444][T11071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.716453][T11071] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 191.716485][T11071] Call Trace: [ 191.716490][T11071] [ 191.716494][T11071] dump_stack_lvl+0x116/0x1f0 [ 191.716508][T11071] print_report+0xcd/0x630 [ 191.716530][T11071] ? __virt_addr_valid+0x81/0x610 [ 191.716546][T11071] ? __phys_addr+0xe8/0x180 [ 191.716560][T11071] ? __mutex_lock+0xc70/0x1060 [ 191.716592][T11071] kasan_report+0xe0/0x110 [ 191.716604][T11071] ? __mutex_lock+0xc70/0x1060 [ 191.716618][T11071] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 191.716634][T11071] __mutex_lock+0xc70/0x1060 [ 191.716646][T11071] ? udp_tunnel_nic_device_sync_work+0x27/0xa10 [ 191.716662][T11071] ? register_lock_class+0x41/0x4c0 [ 191.716680][T11071] ? __pfx___mutex_lock+0x10/0x10 [ 191.716694][T11071] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 191.716706][T11071] ? debug_object_deactivate+0x1ec/0x3a0 [ 191.716724][T11071] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 191.716739][T11071] ? rtnl_lock+0x9/0x20 [ 191.716754][T11071] udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 191.716771][T11071] ? rcu_is_watching+0x12/0xc0 [ 191.716786][T11071] process_one_work+0x9cf/0x1b70 [ 191.716887][T11071] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 191.716904][T11071] ? __pfx_process_one_work+0x10/0x10 [ 191.716918][T11071] ? assign_work+0x1a0/0x250 [ 191.716929][T11071] worker_thread+0x6c8/0xf10 [ 191.716944][T11071] ? __pfx_worker_thread+0x10/0x10 [ 191.716956][T11071] kthread+0x3c5/0x780 [ 191.716967][T11071] ? __pfx_kthread+0x10/0x10 [ 191.716978][T11071] ? rcu_is_watching+0x12/0xc0 [ 191.716991][T11071] ? __pfx_kthread+0x10/0x10 [ 191.717002][T11071] ret_from_fork+0x5d7/0x6f0 [ 191.717012][T11071] ? __pfx_kthread+0x10/0x10 [ 191.717023][T11071] ret_from_fork_asm+0x1a/0x30 [ 191.717040][T11071] [ 191.717044][T11071] [ 191.786040][T11071] Allocated by task 11679: [ 191.787443][T11071] kasan_save_stack+0x33/0x60 [ 191.788925][T11071] kasan_save_track+0x14/0x30 [ 191.790582][T11071] __kasan_kmalloc+0xaa/0xb0 [ 191.792081][T11071] __kmalloc_noprof+0x223/0x510 [ 191.793694][T11071] udp_tunnel_nic_netdevice_event+0x1383/0x1fa0 [ 191.795721][T11071] notifier_call_chain+0xbc/0x410 [ 191.797388][T11071] call_netdevice_notifiers_info+0xbe/0x140 [ 191.799641][T11071] register_netdevice+0x182e/0x2270 [ 191.801459][T11071] nsim_create+0xdd5/0x1260 [ 191.802997][T11071] __nsim_dev_port_add+0x435/0x7d0 [ 191.804672][T11071] nsim_dev_reload_up+0x5b8/0x860 [ 191.806326][T11071] devlink_reload+0x322/0x7c0 [ 191.807922][T11071] devlink_nl_reload_doit+0xe31/0x1410 [ 191.809795][T11071] genl_family_rcv_msg_doit+0x206/0x2f0 [ 191.811877][T11071] genl_rcv_msg+0x55c/0x800 [ 191.813753][T11071] netlink_rcv_skb+0x155/0x420 [ 191.815570][T11071] genl_rcv+0x28/0x40 [ 191.817035][T11071] netlink_unicast+0x5aa/0x870 [ 191.818869][T11071] netlink_sendmsg+0x8d1/0xdd0 [ 191.820533][T11071] ____sys_sendmsg+0xa98/0xc70 [ 191.822082][T11071] ___sys_sendmsg+0x134/0x1d0 [ 191.823638][T11071] __sys_sendmsg+0x16d/0x220 [ 191.825150][T11071] do_syscall_64+0xcd/0x4c0 [ 191.826615][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.828542][T11071] [ 191.829392][T11071] Freed by task 11679: [ 191.830946][T11071] kasan_save_stack+0x33/0x60 [ 191.832651][T11071] kasan_save_track+0x14/0x30 [ 191.834539][T11071] kasan_save_free_info+0x3b/0x60 [ 191.836152][T11071] __kasan_slab_free+0x60/0x70 [ 191.837722][T11071] kfree+0x2b4/0x4d0 [ 191.838974][T11071] udp_tunnel_nic_netdevice_event+0xd2a/0x1fa0 [ 191.840981][T11071] notifier_call_chain+0xbc/0x410 [ 191.842595][T11071] call_netdevice_notifiers_info+0xbe/0x140 [ 191.844469][T11071] unregister_netdevice_many_notify+0xf76/0x24c0 [ 191.846498][T11071] unregister_netdevice_queue+0x305/0x3f0 [ 191.848322][T11071] nsim_destroy+0x198/0x800 [ 191.849824][T11071] __nsim_dev_port_del+0x189/0x240 [ 191.851472][T11071] nsim_dev_reload_destroy+0x10a/0x4d0 [ 191.853137][T11071] nsim_dev_reload_down+0x6e/0xd0 [ 191.854745][T11071] devlink_reload+0x1a1/0x7c0 [ 191.856222][T11071] devlink_nl_reload_doit+0xe31/0x1410 [ 191.858024][T11071] genl_family_rcv_msg_doit+0x206/0x2f0 [ 191.859953][T11071] genl_rcv_msg+0x55c/0x800 [ 191.861387][T11071] netlink_rcv_skb+0x155/0x420 [ 191.862957][T11071] genl_rcv+0x28/0x40 [ 191.864281][T11071] netlink_unicast+0x5aa/0x870 [ 191.865851][T11071] netlink_sendmsg+0x8d1/0xdd0 [ 191.867360][T11071] ____sys_sendmsg+0xa98/0xc70 [ 191.868856][T11071] ___sys_sendmsg+0x134/0x1d0 [ 191.870393][T11071] __sys_sendmsg+0x16d/0x220 [ 191.871855][T11071] do_syscall_64+0xcd/0x4c0 [ 191.873298][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.875179][T11071] [ 191.875949][T11071] Last potentially related work creation: [ 191.877732][T11071] kasan_save_stack+0x33/0x60 [ 191.879220][T11071] kasan_record_aux_stack+0xa7/0xc0 [ 191.880809][T11071] insert_work+0x36/0x230 [ 191.882236][T11071] __queue_work+0x3f8/0x1160 [ 191.883703][T11071] queue_work_on+0x1a4/0x1f0 [ 191.885162][T11071] __udp_tunnel_nic_add_port+0x6f8/0xde0 [ 191.886974][T11071] udp_tunnel_push_rx_port+0x1af/0x230 [ 191.888748][T11071] geneve_offload_rx_ports+0xbf/0x1c0 [ 191.890693][T11071] geneve_netdevice_event+0x77/0xb0 [ 191.892501][T11071] notifier_call_chain+0xbc/0x410 [ 191.894159][T11071] call_netdevice_notifiers_info+0xbe/0x140 [ 191.896026][T11071] call_netdevice_notifiers+0x7c/0xb0 [ 191.897723][T11071] udp_tunnel_nic_netdevice_event+0x12fd/0x1fa0 [ 191.899706][T11071] notifier_call_chain+0xbc/0x410 [ 191.901226][T11071] call_netdevice_notifiers_info+0xbe/0x140 [ 191.903066][T11071] register_netdevice+0x182e/0x2270 [ 191.904702][T11071] nsim_create+0xdd5/0x1260 [ 191.906130][T11071] __nsim_dev_port_add+0x435/0x7d0 [ 191.907745][T11071] nsim_dev_reload_up+0x5b8/0x860 [ 191.909399][T11071] devlink_reload+0x322/0x7c0 [ 191.910925][T11071] devlink_nl_reload_doit+0xe31/0x1410 [ 191.912711][T11071] genl_family_rcv_msg_doit+0x206/0x2f0 [ 191.914494][T11071] genl_rcv_msg+0x55c/0x800 [ 191.915942][T11071] netlink_rcv_skb+0x155/0x420 [ 191.917466][T11071] genl_rcv+0x28/0x40 [ 191.918765][T11071] netlink_unicast+0x5aa/0x870 [ 191.920258][T11071] netlink_sendmsg+0x8d1/0xdd0 [ 191.921790][T11071] ____sys_sendmsg+0xa98/0xc70 [ 191.923311][T11071] ___sys_sendmsg+0x134/0x1d0 [ 191.924851][T11071] __sys_sendmsg+0x16d/0x220 [ 191.926347][T11071] do_syscall_64+0xcd/0x4c0 [ 191.927947][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.930001][T11071] [ 191.930856][T11071] Second to last potentially related work creation: [ 191.933094][T11071] kasan_save_stack+0x33/0x60 [ 191.934555][T11071] kasan_record_aux_stack+0xa7/0xc0 [ 191.936091][T11071] insert_work+0x36/0x230 [ 191.937447][T11071] __queue_work+0x97e/0x1160 [ 191.938909][T11071] queue_work_on+0x1a4/0x1f0 [ 191.940419][T11071] __udp_tunnel_nic_add_port+0x6f8/0xde0 [ 191.942274][T11071] udp_tunnel_push_rx_port+0x1af/0x230 [ 191.944109][T11071] vxlan_offload_rx_ports+0xd5/0x270 [ 191.945976][T11071] vxlan_netdevice_event+0x2de/0x370 [ 191.947918][T11071] notifier_call_chain+0xbc/0x410 [ 191.949784][T11071] call_netdevice_notifiers_info+0xbe/0x140 [ 191.951695][T11071] call_netdevice_notifiers+0x7c/0xb0 [ 191.953386][T11071] udp_tunnel_nic_netdevice_event+0x12fd/0x1fa0 [ 191.955336][T11071] notifier_call_chain+0xbc/0x410 [ 191.956114][T11685] io-wq is not configured for unbound workers [ 191.956943][T11071] call_netdevice_notifiers_info+0xbe/0x140 [ 191.960763][T11071] register_netdevice+0x182e/0x2270 [ 191.962402][T11071] nsim_create+0xdd5/0x1260 [ 191.963809][T11071] __nsim_dev_port_add+0x435/0x7d0 [ 191.965399][T11071] nsim_dev_reload_up+0x5b8/0x860 [ 191.967030][T11071] devlink_reload+0x322/0x7c0 [ 191.968691][T11071] devlink_nl_reload_doit+0xe31/0x1410 [ 191.970626][T11071] genl_family_rcv_msg_doit+0x206/0x2f0 [ 191.972652][T11071] genl_rcv_msg+0x55c/0x800 [ 191.974118][T11071] netlink_rcv_skb+0x155/0x420 [ 191.975602][T11071] genl_rcv+0x28/0x40 [ 191.976884][T11071] netlink_unicast+0x5aa/0x870 [ 191.978401][T11071] netlink_sendmsg+0x8d1/0xdd0 [ 191.979942][T11071] ____sys_sendmsg+0xa98/0xc70 [ 191.981477][T11071] ___sys_sendmsg+0x134/0x1d0 [ 191.982963][T11071] __sys_sendmsg+0x16d/0x220 [ 191.984355][T11071] do_syscall_64+0xcd/0x4c0 [ 191.985761][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.987582][T11071] [ 191.988323][T11071] The buggy address belongs to the object at ffff88810aad1800 [ 191.988323][T11071] which belongs to the cache kmalloc-256 of size 256 [ 191.992739][T11071] The buggy address is located 176 bytes inside of [ 191.992739][T11071] freed 256-byte region [ffff88810aad1800, ffff88810aad1900) [ 191.997457][T11071] [ 191.998235][T11071] The buggy address belongs to the physical page: [ 192.000253][T11071] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10aad0 [ 192.003024][T11071] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 192.005650][T11071] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 192.008015][T11071] page_type: f5(slab) [ 192.009324][T11071] raw: 057ff00000000040 ffff88801b842b40 dead000000000122 0000000000000000 [ 192.012111][T11071] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 192.014984][T11071] head: 057ff00000000040 ffff88801b842b40 dead000000000122 0000000000000000 [ 192.017922][T11071] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 192.020696][T11071] head: 057ff00000000001 ffffea00042ab401 00000000ffffffff 00000000ffffffff [ 192.023402][T11071] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 192.026088][T11071] page dumped because: kasan: bad access detected [ 192.028110][T11071] page_owner tracks the page as allocated [ 192.029928][T11071] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 11066, tgid 11066 (kworker/u32:13), ts 191552099852, free_ts 166961422686 [ 192.036481][T11071] post_alloc_hook+0x1c0/0x230 [ 192.038668][T11071] get_page_from_freelist+0x132b/0x38e0 [ 192.040863][T11071] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 192.043182][T11071] new_slab+0x94/0x330 [ 192.044494][T11071] ___slab_alloc+0xcf2/0x1740 [ 192.046013][T11071] __slab_alloc.constprop.0+0x56/0xb0 [ 192.047717][T11071] __kmalloc_node_noprof+0x2ed/0x500 [ 192.049335][T11071] alloc_slab_obj_exts+0x41/0xa0 [ 192.051354][T11071] new_slab+0x27d/0x330 [ 192.052921][T11071] ___slab_alloc+0xcf2/0x1740 [ 192.054551][T11071] __slab_alloc.constprop.0+0x56/0xb0 [ 192.056748][T11071] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 192.059072][T11071] alloc_inode+0x64/0x240 [ 192.060742][T11071] new_inode+0x22/0x1c0 [ 192.062112][T11071] __debugfs_create_file+0x11c/0x6b0 [ 192.063909][T11071] debugfs_create_file_short+0x41/0x60 [ 192.065787][T11071] page last free pid 10487 tgid 10487 stack trace: [ 192.067995][T11071] __free_frozen_pages+0x7d5/0x10f0 [ 192.069902][T11071] kvm_mmu_free_memory_cache+0x189/0x2d0 [ 192.071962][T11071] kvm_mmu_destroy+0x64/0x150 [ 192.073571][T11071] kvm_arch_vcpu_destroy+0x2d0/0x440 [ 192.075260][T11071] kvm_destroy_vcpus+0x24e/0x3c0 [ 192.076804][T11071] kvm_arch_destroy_vm+0x87/0x2f0 [ 192.078368][T11071] kvm_put_kvm+0x4f2/0xb40 [ 192.079818][T11071] kvm_vm_release+0x3c/0x50 [ 192.081319][T11071] __fput+0x402/0xb70 [ 192.082748][T11071] task_work_run+0x14d/0x240 [ 192.084358][T11071] exit_to_user_mode_loop+0xeb/0x110 [ 192.086471][T11071] do_syscall_64+0x3f6/0x4c0 [ 192.088301][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.090372][T11071] [ 192.091146][T11071] Memory state around the buggy address: [ 192.092935][T11071] ffff88810aad1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.095482][T11071] ffff88810aad1800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.098005][T11071] >ffff88810aad1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.100572][T11071] ^ [ 192.102362][T11071] ffff88810aad1900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.105134][T11071] ffff88810aad1980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.107982][T11071] ================================================================== [ 192.111050][T11071] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.113357][T11071] CPU: 1 UID: 0 PID: 11071 Comm: kworker/u32:18 Not tainted syzkaller #0 PREEMPT(full) [ 192.116410][T11071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.119874][T11071] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 192.122412][T11071] Call Trace: [ 192.123610][T11071] [ 192.124676][T11071] dump_stack_lvl+0x3d/0x1f0 [ 192.126293][T11071] vpanic+0x6e8/0x7a0 [ 192.127707][T11071] ? __pfx_vpanic+0x10/0x10 [ 192.129219][T11071] ? __pfx_vprintk_emit+0x10/0x10 [ 192.130856][T11071] ? __mutex_lock+0xc70/0x1060 [ 192.132374][T11071] panic+0xca/0xd0 [ 192.133579][T11071] ? __pfx_panic+0x10/0x10 [ 192.135009][T11071] ? __mutex_lock+0xc70/0x1060 [ 192.136529][T11071] ? preempt_schedule_common+0x44/0xc0 [ 192.138254][T11071] ? preempt_schedule_thunk+0x16/0x30 [ 192.140135][T11071] ? check_panic_on_warn+0x1f/0xb0 [ 192.141998][T11071] check_panic_on_warn+0xab/0xb0 [ 192.143773][T11071] end_report+0x107/0x170 [ 192.145288][T11071] kasan_report+0xee/0x110 [ 192.146698][T11071] ? __mutex_lock+0xc70/0x1060 [ 192.148235][T11071] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 192.150374][T11071] __mutex_lock+0xc70/0x1060 [ 192.152039][T11071] ? udp_tunnel_nic_device_sync_work+0x27/0xa10 [ 192.154149][T11071] ? register_lock_class+0x41/0x4c0 [ 192.155942][T11071] ? __pfx___mutex_lock+0x10/0x10 [ 192.157772][T11071] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.159879][T11071] ? debug_object_deactivate+0x1ec/0x3a0 [ 192.161918][T11071] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 192.163903][T11071] ? rtnl_lock+0x9/0x20 [ 192.165259][T11071] udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 192.167179][T11071] ? rcu_is_watching+0x12/0xc0 [ 192.168724][T11071] process_one_work+0x9cf/0x1b70 [ 192.170380][T11071] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 192.172589][T11071] ? __pfx_process_one_work+0x10/0x10 [ 192.174493][T11071] ? assign_work+0x1a0/0x250 [ 192.176176][T11071] worker_thread+0x6c8/0xf10 [ 192.177810][T11071] ? __pfx_worker_thread+0x10/0x10 [ 192.179600][T11071] kthread+0x3c5/0x780 [ 192.180902][T11071] ? __pfx_kthread+0x10/0x10 [ 192.182373][T11071] ? rcu_is_watching+0x12/0xc0 [ 192.183892][T11071] ? __pfx_kthread+0x10/0x10 [ 192.185381][T11071] ret_from_fork+0x5d7/0x6f0 [ 192.186860][T11071] ? __pfx_kthread+0x10/0x10 [ 192.188418][T11071] ret_from_fork_asm+0x1a/0x30 [ 192.190260][T11071] [ 192.192424][T11071] Kernel Offset: disabled [ 192.194041][T11071] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:54:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643ab5 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90006ebf4d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b112060 R15=ffffffff85643a50 RIP=ffffffff85643adf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31c23ffc CR3=000000005fcdb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd86aa2030 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd86aa7666 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd86aa7666 00007ffd86aa766c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8572e20e RDX=ffff888024f3a440 RSI=0000000000000001 RDI=0000000000000004 RBP=ffff88802afcb5c8 RSP=ffffc90003e0e940 R8 =0000000000000004 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=1ffff920007c1d31 R14=ffff888022a55400 R15=0000000000000000 RIP=ffffffff8572e4f3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4194392300 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fac0e4f7d60 CR3=000000002c04d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=305eea9062910646 c7e927eacb71b23c 305eea9062910646 c7e927eacb71b23c 305eea9062910646 c7e927eacb71b23c 305eea9062910646 c7e927eacb71b23c ZMM18=f2d43c5e397f0c07 9c4ae5dace90f8f0 f2d43c5e397f0c07 9c4ae5dace90f8f0 f2d43c5e397f0c07 9c4ae5dace90f8f0 f2d43c5e397f0c07 9c4ae5dace90f8f0 ZMM19=d20a000000000000 0000000000000005 d20a000000000000 0000000000000004 d20a000000000000 0000000000000003 d20a000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000004080606061e 9a00100005b88208 0001000004080606 011e9a0002000700 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0400040800068004 01c71000080449f4 006d766b2f766564 2f01ffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffed0806800302 9008000410000410 0006027186000800 0610002010000600 ZMM24=5fc08cf45fc08cf4 5fc08cf45fc08cf4 5fc08cf45fc08cf4 5fc08cf45fc08cf4 5fc08cf45fc08cf4 5fc08cf45fc08cf4 5fc08cf45fc08cf4 5fc08cf45fc08cf4 ZMM25=3cbca2403cbca240 3cbca2403cbca240 3cbca2403cbca240 3cbca2403cbca240 3cbca2403cbca240 3cbca2403cbca240 3cbca2403cbca240 3cbca2403cbca240 ZMM26=f03bc471f03bc471 f03bc471f03bc471 f03bc471f03bc471 f03bc471f03bc471 f03bc471f03bc471 f03bc471f03bc471 f03bc471f03bc471 f03bc471f03bc471 ZMM27=95deb28595deb285 95deb28595deb285 95deb28595deb285 95deb28595deb285 95deb28595deb285 95deb28595deb285 95deb28595deb285 95deb28595deb285 ZMM28=000001300000012f 0000012e0000012d 0000012c0000012b 0000012a00000129 0000012800000127 0000012600000125 0000012400000123 0000012200000121 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8408000084080000 8408000084080000 8408000084080000 8408000084080000 8408000084080000 8408000084080000 8408000084080000 8408000084080000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8e5c1220 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e5c1220 RBP=0000000000000002 RSP=ffffc9000ce5f320 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8197c72b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001380 CR3=0000000039216000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3f3353a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3f3353a6 00007ffd3f3353ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3aa612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3aa612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3aa612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3aa612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3aa612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3aa612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3aa7974a8 00007fe3aa7974a0 00007fe3aa797498 00007fe3aa797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3ab2fd100 00007fe3aa797460 00007fe3aa790004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3aa7974b8 00007fe3aa7974b0 00007fe3aa7974a8 00007fe3aa7974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff97681c78 RBX=00000000000002aa RCX=00000000000002ad RDX=0000000000000144 RSI=00000000000002ad RDI=ffffffff9776fb98 RBP=0000000000000030 RSP=ffffc900031df1a0 R8 =ffffffff95ddbad8 R9 =0000000000000004 R10=ffffc900031df340 R11=0000000000000000 R12=ffffffff81974c90 R13=ffffc900031df240 R14=ffffffff819757a0 R15=ffffffff9776fb98 RIP=ffffffff81976d4a RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555566fa5500 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c38753f CR3=0000000050461000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd86aa2030 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd86aa7666 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd86aa7666 00007ffd86aa766c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa54a812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000