last executing test programs: 1m7.751318446s ago: executing program 1 (id=409): lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '\x13\'\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES32=r0], 0x74}}, 0x0) 1m7.690476995s ago: executing program 1 (id=410): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) recvmmsg(r8, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6582}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}, 0x4100}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x54, r2, 0x1, 0x70bd2e, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1m7.423233719s ago: executing program 1 (id=412): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x7ff, @vifc_lcl_addr=@local, @broadcast}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x401, 0x8000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000100)=""/245) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0xfffffffffffffd55, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="f0ff27bd7000000000008900000008000500000000000000ceb9aa24c99e21023b358714a660c89476d5096850b4", @ANYRES32=r3, @ANYBLOB="18001d801400008006000500b000000005000c0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000084) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 1m7.422603283s ago: executing program 1 (id=413): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sendmsg$FOU_CMD_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r3, 0x321, 0x70bd2f, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x4008080) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xdc\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x72, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e140000", 0x27}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r6, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xe, 0x3b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) 1m7.36120356s ago: executing program 1 (id=415): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000020007000fbdbdf250a000040000000070600000008000d001000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001600)="3eed50d0125719a810", 0x9}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x800, &(0x7f000005ffe4)={0xa, 0x4e21, 0x0, @remote, 0x7}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r1, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x7, 0x12, 0x1b, 0x9, "4b8b3ea40100dfed0b48e5094d1a00dd5a1f25cecfe0f4fcdf997dd52115fac256cf0000000000000400000000000000000000000000000000edff00", "eaabbd496e090000e3000000060025de30ad375f240500", [0x1000000000000911, 0xe]}) (async) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xced6b2bc496a26e6, 0x0) (async) msgsnd(r2, &(0x7f00000010c0)={0x2}, 0x8, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000880)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x4) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)="27033000bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57757889329065584abc5c24f06a9aacb41b94bfa8791938ca3f957c4e1cc4103c44d2df92ed94c0811439b445170c9444f1d5cf152d88ec04922505d5ee0412b2d7b2b0f732fc50438cb5f8225d82a50000000000000000", 0x94}, {&(0x7f0000000200)="8bfda0fae4fcd4a9de55ad3b1c2d1fdee363ddc06dfda6f2edea373945", 0x1d}, {&(0x7f0000000240)="5e82ef7627234e55062c4c902b6fddb40d2a73b0394dc7f1eedb60de68c183e13eff48d039321926dacb4db2728458d7947bf7dbf748f38c3c4573303d8e742bd9d60dc9ab48e0561c3f5f17bc661582113d687bc8cb8dc28ecd3963b80f16af4bc1cf1c38d08332c86308b3f75aeb1148", 0x71}, {&(0x7f00000002c0)="6e53a24a72ed7c399a6d988520a67c260c93b7f99fd0c890646db95b326077f3cc59744b885bffbfb776ff7e8a0cc9934ed8b017f286080756c3a32b05cb39c4e3391ea559e10279c094afdc10176e4e13a513c5650b8915a29e5fa6acda018ff4c2d7eba173aaeeced07b02bad4bfd3a4b628d14f73d47cfc1e3a0003e1f0b1f235042213032073decdc41fb0e2c1bf17abd87e9a15bb74f24f7d3c811e4768ce72a07a4e55d48a2b6d655dc8d5f13461f27341a2c571865d1c", 0xba}, {&(0x7f00000018c0)="9cbc1848544cd47fa22c7540dca04ed25097dbb6452a32ebc46bcd95329f3740b816fa4140b22b817d4df5f3029d727dc51fbb3fbfcd3c1144d25c20a6d02efa86b06fc1f3ad8376b08ee4dca0a61ac31bf1113f8736bbe6c2b68b255f2669cbaf6343c42e1dd36da28f432751dc1e5e2947618c3eac5092a90d6f1cb9ea47ca159d532fbc74aee74b47ded01d5f62f950724e74f2a09bcfe2c41a8de8df4e5163e7789ed3ba214b233e702d655ac3bb7351cf16ebdb9c461b3adc5abb18bb1ffbdea96654035e83479b5ffdaf42a83c7f765b49f23f6c1c94ced8f21372185a44959980446ad0af268b4f322c9545b42e786eba6c2b6109fe7fd32fd5adb180f09d58f7f9a3235d39b17f0b402fd62ce67b11c6837079f35d86905200499ef5c53d8213ef8b01075d23edbc0c5ac38595be4347d26c2208358a7868a43ceb3a6fb4fa1c1d278ebff283d2a5f1df034720617bbc746632db4d4509dcb898ef0d505837846fc4c52f119c8c99ee0a6f4a21cba2a3dceb83e8efb3cdaba219a7ab21b8159af0f6bb6641f5cf3f38f2bacafcdd005ce3b3cf99f893cca7908bb30443c25fcbad8c0e3354026b96b4f573054b03b8402f3827dba6559fe72032b33706fcadcfd6a2519bc4a646a6ed0af16b37ee64b16eaac601af4d6698c1927bc7e2d9585ec2b3d31cf9a5e5474026172c20aaa02396e6092f55d26650c220571c9fd0eb19a93afbdc0bb95393027963d9513f111f73f6c15d5e3d926fbc3365da4efa7e313a613e3e120e68521218f576735f523e87e1da7f43de413425dbcc6300e41417d2fed98866fe5f699c062e5f7b127a6ba27b43b4415cc81c7f481c9f0439a9cf0948e5d508c385e67c076a3fa52b0f7daea1b0899adf32bf38254b27601c0de355076c0036e4a7d04915976ccaddf8d4672c07ff399e16750f67ec417a6c9ff40a66297f28dd706d4eab4fcff65501e7026973d0e9e027cabc1dc023698ec8e65e02a5c96be97cf0c33f91dd7f6788ec7b2635fba934c2009135d406088b1d21261c9112488e1d84f8248bcb3a314d4afe5e83b6e11332ce278e777b13984873ddb8322c6ec5ffcbaa85dbcb6e6fe6d7f445811717e8130fabbe995fb7faa6652fd17909f9bd3b42b1656fe451aa437171a67ed20ceb007bc42b73390c0de096a85891010a93106dc96a8ffbdc6f9f81423307d707392d35174e861ffdd309740ec5d87d65c167094c5675021b1500449e363a5c9d2de27d032d40833b435b9915862f1bfc2f7d273eff08afa90dac879c3e1afcabe1e6a464df4f770fa28baf4c4b0c344f0621c5f915fbf5ecfa820b43075513af0da2f629145a3d4177c531b929053eb89f272ed971abc798856c767a16d52b67e1ef0b32a4d1e1eb947d38951f096aeab295940179e3378d77f17873fbf34bffd1e409e700d4f5b68aa61535ae0fab29cf8e99fdfbd70c91d7b84ca9e6c39a94c37ecbd978ab0593d8820dad20fd5ebde1c71c3ebc7a46e145bd5d8f01199c29d04d1cac1410f6d329566056fcd52d2d52bda908062545c37878f13240a2dc5793e3ac31777db287e6d370e3d28e21872ecbc78948bc3e0f13915acd2faf7b27d75e0eff7c6bd02337bbf830243cb130c3fc9a473a8e7fc14e51c4eb289f2592708fcf66c5e1e32eececeebbc119e660acc6fabc36de28ff76a0eb19e9523b93ca189c319c913faa2e574b28c35071b2b3464cc6325c3f124a3a4b1836306f7e5eca37ab87125c5133649e36b33b2153c8fefcee87ab3ee222792409de34a0d7b5908d6968a6eb36c61507ee8362df8c7a3d83fdf266fe75de68178283595e7a20249081ff644bdd7bb8e017660483befd5146b2387a50cfffc2fefd71608f3b3c495008bae2af418a79805e2036eda3325b6a3dd331a2091cb774e44f2161f967840af40664a8fba48baac05acf19576a2b2c1f0f2fafdef5acd33c8e5869ecf59db19f7d8e3d5627fba46978ee48dadfd205742f4ee5d91cf4f63ae28aac95826d400cb8e00d51cd395140af53125f9e7e6f660e1d72e4387ffc5c852ba8e13c1b657bff69e50007b0cd203037d85a909e211040626abd0fefbf547419c574cec9467907b598826ee350d247512d9ffb860936b336bb69feba00dc50afe602396d62dc3effbbe06dd2c670161283a7f97b8aa3645e93e5b9d2590f449612ec2f706697572fa8753a10224087c112fea24efe012dc7fdd049f232f6ec926c65ad0984ea841966e54c37571e07dc4a41d1d14acaecf170263203ec7b516b36be873b436b12c8e72daf31ec22f4fb4b3087018106cc13f680b4f0354e91149183f463dcd63605a4cb14c38860035af43aec154bb412dc6e19c3708214858ba58315171928fc7f198526220e307d4bf3100fb8fe522c754731fea485c9bf6c92e28baba5424ab0e6e3c0a558b8a963cfeaa6b3d6ac04a4ae373d79f891617dfdcfac5fb0b99e9d9e7b1186a1790820e390254a8971681081088677e6d432ce78716de49e2ecbecce179765a856ec76c1f6360f92c9332998ba66ff318158ebafc251a54ebf95ad2634a408c13c05fa1d60b649c5337b3799f49741f2af85285871f73f70c8d9fa851489183034e828e5320ee53464a9f80b95c2fc895e71403652a8b400d25f3ab370d728363c3af26fde31f8b1fb0b3836d2103dc695c6b4707c53766b551882806a18f0723895079c9507b2612e1de83d1f1be4c24a5f00cc54c9285194051a9651c805fbfc94e3abdc70b84974923a524a272f3fc5a4619b1571081f835d217cacdaf948117480c661fce316d16f6abf15929f9b058ce6f2275493a8745ea3223d7594a0f436cbf6eb18863f83be13cded60eaa2967043026e3dbaccf6b174c96116d7442025737dcc84cc821d9d31fbec897b9e285249fced9e184bae2eaf28029f6706e24f791be69bac36ece1a6ed889e6218b1fb5a6f36252a178e7af53e4f8c1ab0d5005770aa9f973bf7d110adbccff316eb35c5799419111ea1c686360b51a3695b24e15748d64fae7c5c039f1204bce209964a3606f11e272262a38f657b8578d7b7073b328e5118ba5319af4868e83a646b8cf42e016d606bb2086c57860130faa27d08a89f0bf923dfcf0688c1ef38ffe9103517122e4084b8fe4c1b3254df71b1c7569660a190210463ee90a25aad38460503bbc5d9ba4cd71435d4d91aff9e5f8121de3c9f48bb50cdbce6adf8a8267fdc4e0c0331ae3b03d898f30f6e1a20e1635312263b0df96cf9a6c7069ba1048db75609772a0fcccd8414bc92e234488c2233a3a075c54f53dde7657c98f868604c48c7464c65d58a7f21fe0e40db20d2dfeb9481ae9b7f9ffbfec4c673eee2a478c9dd8e3dc506e3a027452278490362f7bbb0a4acda52cb5f419d0a8224c246d3a4a8ee240f43298237431bc5f9e703b4aaec4fb651a359fb9727a76e35fd0010793372ff1af2b4d92d3960981d228d51be031436d10963be9d2f53105fa23ad8d0b15da0dd595d9340deb0f82c73f158ef6610c32a4cbdefd05d59f9eaa6252243a90ccbf7a8a485ce068015934240e29a0b6e2708d735143451b89b655f9f2cd6eb068e344dd6e71e85eca9f43d092bb8bfc54da641755623c0234f34bf817c78c41b46bf6b1ae9a580c14ead1684541952ed8dfc7f368c9aa75b2de7c02e7e49873749ea23f3761a5cfa1d8c2e335738604e85cf24e8576c82e9b1d64b63d54d284f4ea54df4695d149c0b94145622454eaa115b6337df8db0c1c0a19c4c5ee55ac8ef5a0802f362e0041065743b62ba3f542411f0e9160bd6a53477f44273eacf176645cb99974a24415743355470ba18caadf6ec026296fd2c778452e706e6d71433d898909ac9eed3bd6b84839220a6000b1c3a5cfca6449a9301c3bd275fe08437e68def4d544be2d1d0a2ad6154d1fb25864bc254cd37eeba7affce35119c79ce92bbdfa26cba52e99507dca7d575f600b1141ddc6fdf7524a8dd4d3e43cbee05d15e40c271551402c0e586d713d966ac68c3cf087948db6f87f31b8810df2ca7dad3936c6073c15bcc4742505c86277f043af1af5cc854a2430c0b8263a792fdc0d2fc804b7cf004d2b7aeb7e774645d4712469b3163b03d0f21cbac2bbc78b9dd28e74b9b1f93f5082dbe800285cf8e3faee6e959de79fd78c5c0842a018cbaf99b700b151a16805449d42d076b7eb2e6e5c6985b10982f3ae8ae1e4e495690b3d98c2aa7b876767be649a3b78a84ee85a3f7d138d371f880b258283a0fcb104f45bd943fc10a937a05776714ae97d6db3f898774fcb918cfd0b22695c6d015183a25f08d2ecf0bdd07508d3825d24ad8f6797dd2c0cab28bd0dfac583216d45a0fa75dbb20d7a19799363da4538f19528f4d101fcb4fffa8e508c9811fa55e550c499e0efa5d6fb1c7d6b6947e06347e0fe8c7bd180e27ba6b73183b63155bcddb220f34487149df4c38c3422889383f36281f406ecb24c35334277b03ba23c862fceb1bf2b15d549476e5ff194a753814b581f2f64d7ab637ab080739cfbab13224004653fb062cab1cf9e578865bdee2f3dc8dffccecccb81e215557b92400db4e24acf71c2c43910af36cf85ab1f3eab81adb68791712c8452efd7f7adef7889659b23de3d76cbb1413688f34dc00395cc86ae5f58288bd7862372b15dda174d6d3acb653fd4d24416d3f5f74c6011b9cbbeebaa6535dc40e36654c58abe26991436ca57e36360e620053593e330fb60b4da255b3d96455c1951e298b75a641dca25c029d1fa156475d9b7c452ba9176117d5fdb5d76e80fde8520d4d99f05eb255820f02a32e9613488e3264c76feab891efa96d19262d8b7b8e302e5b977ff9", 0xd7e}], 0x5}, 0x0) shutdown(r0, 0x1) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0xa, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff04, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x80000005, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x6, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x7fffffff, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x9578, 0x9, 0xfffffffc, 0x3, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x5, 0x6, 0x7fff, 0x6, 0x400, 0x10000401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8021, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x3, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0xc2, 0x86, 0x6551, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x6, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x9, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80e2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x10000, 0x93b, 0x2000006, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1c, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_delrule={0x4c, 0x21, 0x100, 0x70bd25, 0x25dfdbfe, {0xa, 0x30, 0x80, 0xe, 0x0, 0x0, 0x0, 0x6, 0x6}, [@FRA_SRC={0x14, 0x2, @mcast1}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x5}, @FRA_SRC={0x14, 0x2, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) (async) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'veth1_macvtap\x00', {0x2, 0x0, @initdev}}) 1m7.073286705s ago: executing program 1 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket(0x1, 0x1, 0x0) (rerun: 64) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x11, r1, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="a3704f41871a198cb4ec8f8529baf6dadc26eeaa5520c73d5daa6f8aef24327eb38f2123e9a18919bc26503c1e365ef19aedcc5daa108eb4a51682fce4963853146433b92e2afa1e9fb4b7e00bbc8375cea6610b2acbe87004404927d0db1672ce7cce0ac36e46b1434f8edc5752f89337", @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03"], 0x40}}, 0x0) (rerun: 32) 1m7.028291112s ago: executing program 32 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket(0x1, 0x1, 0x0) (rerun: 64) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x11, r1, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="a3704f41871a198cb4ec8f8529baf6dadc26eeaa5520c73d5daa6f8aef24327eb38f2123e9a18919bc26503c1e365ef19aedcc5daa108eb4a51682fce4963853146433b92e2afa1e9fb4b7e00bbc8375cea6610b2acbe87004404927d0db1672ce7cce0ac36e46b1434f8edc5752f89337", @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03"], 0x40}}, 0x0) (rerun: 32) 37.220550568s ago: executing program 4 (id=427): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r2, 0x25, 0x2, @val=@tcx}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="80400100000001000c002b80080003000600ef00"], 0x2c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setreuid(0xee00, 0xee00) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0xd93ac4a307455ff6, r0, 0x6efb8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030008000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) 30.558661954s ago: executing program 4 (id=427): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r2, 0x25, 0x2, @val=@tcx}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="80400100000001000c002b80080003000600ef00"], 0x2c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setreuid(0xee00, 0xee00) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0xd93ac4a307455ff6, r0, 0x6efb8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030008000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) 23.541519408s ago: executing program 4 (id=427): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r2, 0x25, 0x2, @val=@tcx}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="80400100000001000c002b80080003000600ef00"], 0x2c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setreuid(0xee00, 0xee00) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0xd93ac4a307455ff6, r0, 0x6efb8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030008000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) 17.401333195s ago: executing program 4 (id=427): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r2, 0x25, 0x2, @val=@tcx}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="80400100000001000c002b80080003000600ef00"], 0x2c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setreuid(0xee00, 0xee00) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0xd93ac4a307455ff6, r0, 0x6efb8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030008000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) 10.468776405s ago: executing program 4 (id=427): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r2, 0x25, 0x2, @val=@tcx}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="80400100000001000c002b80080003000600ef00"], 0x2c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setreuid(0xee00, 0xee00) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0xd93ac4a307455ff6, r0, 0x6efb8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030008000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) 3.512877502s ago: executing program 4 (id=427): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r2, 0x25, 0x2, @val=@tcx}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="80400100000001000c002b80080003000600ef00"], 0x2c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setreuid(0xee00, 0xee00) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0xd93ac4a307455ff6, r0, 0x6efb8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030008000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) 1.698902132s ago: executing program 2 (id=1129): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @ptr, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}]}, {0x0, [0x30, 0x0, 0x2e, 0x0]}}, &(0x7f0000000200)=""/194, 0x4e, 0xc2, 0x1, 0x8, 0x10000}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x8, 0xfff3}, {0xc, 0x7}, {0x1, 0xffe0}}, [{0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x3ff}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040010) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x80, 0x80000001, 0x4, 0x4000, 0x1, 0x5, '\x00', r0, r1, 0x0, 0x2, 0x2, 0x1}, 0x50) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) ioctl$DVD_WRITE_STRUCT(r2, 0x5390, &(0x7f00000003c0)=@bca={0x3, 0xbc, "26b6290905fcc69f36045b4c0c2e538c1cdbf3284d7a0837c8b688aa7cbbd0cefbb620651a13d19f4e98a0e1220553b725aa3d1f6f895f33af04948eaa6de98bd67702433c0ad9d136afea53cc5aa91d46a15cdc2f0ddbb1dcbd18a5b4ed551c2b09f131c97f07460cc7b386b6d51e50ab38a1bb3ee0c0eddb3a2b22b0ba6be4e3a9d4a2552ac5370cb50765276d8a8cea182a5839e900ff41c2c9ca28f2dd28948b401611bbcdb2ca65df3bc4fdb6b2269a178eb314153d443e6cf0"}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x4) socket$kcm(0x29, 0xd, 0x0) 1.602688368s ago: executing program 2 (id=1131): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4c000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001fc0)={"06eaca8b0522aca1027db95aa5b44d7c", 0x0, 0x0, {0x8, 0xe}, {0x6fbb, 0x1}, 0x8, [0x5, 0x3, 0x401, 0x0, 0x1, 0x5da, 0x7, 0x5, 0x1, 0xffff, 0xc00000000, 0xdb, 0xd, 0x8, 0x6, 0x26a7a340]}) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) syz_io_uring_setup(0x598e, &(0x7f0000000040)={0x0, 0xfbfffff3, 0x800, 0x0, 0x80003dd}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000140)) close_range(r0, r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 1.502865007s ago: executing program 2 (id=1134): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x2, 0x4, 0x200, 0xff, 0x38c6de2d4adf4b5e, 0x0, 0xf7}, &(0x7f0000000000)=0x9c) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltclass={0x74, 0x29, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {0x6, 0x4}, {0xb, 0x5}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0xfb, 0xb}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_taprio={0xb}]}, 0x74}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r17, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x3c}}, 0x0) 1.250000584s ago: executing program 0 (id=1139): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x28}}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100911b3d370c00048005000300800000000800020003"], 0x30}, 0x1, 0x0, 0x0, 0x847}, 0xc000) kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268", 0xcb, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.249810324s ago: executing program 3 (id=1140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.142340286s ago: executing program 3 (id=1141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000000c0)) ioprio_set$pid(0x2, 0x0, 0x6000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) sendfile(r2, r2, 0x0, 0x68) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x80) 1.14184984s ago: executing program 2 (id=1142): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x7ffffff1, 0x0, 0x0, 0x3}, 0x10) (async) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="670000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)='-1', 0x2}], 0x1, 0x4, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000d) (async, rerun: 32) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xd000}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x41, 0x0, 0xfffffffffffffe54) (async) sendto$inet(r3, &(0x7f00000000c0)="e5d140683d522be282c87b65bf11a98394eabb2caf9c55ada5436b2fe1c482f7a33ac2a4aff9d84ed67aa86c13e3d8fe1fec0b5a5d500cf440bf565a154921cfed791d9deb79fc3b7744878aedcaf7d30b6060b3e0d38ddda3281288804b5d80fdf1c99e64f68a02e2a0d689f5f6a409a4b033ef63289ba9817678d09c3753b4407fc1357143ec30120a62c1d44b5aac8a3f7d142d535dd0565c4ce86a4f04efdc67e1e391e855c3b3eba07097", 0xad, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10) 1.141541597s ago: executing program 2 (id=1143): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x40806, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x8080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x3fb}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.14114546s ago: executing program 3 (id=1144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) read$dsp(r3, &(0x7f0000000040)=""/185, 0xb9) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0xfffffffffffffd77, 0x1000000000000, 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f0000080041007278650014003300776732"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 993.064116ms ago: executing program 3 (id=1145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x50, r2, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "591d3137a587"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]]}, 0x50}}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="192aa0", 0x3, 0xfffffffffffffffc) keyctl$get_security(0x11, r4, &(0x7f0000000180)=""/64, 0x40) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)="af8a38b0870c8d598e06adef58708f59dc5ac5", 0x13}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x5, 0x8}, {0x0, 0x0, 0x5, 0x5}}}}, 0x15) exit(0x6) lseek(r7, 0x20000000000402, 0x1) 992.742249ms ago: executing program 0 (id=1146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000180)='#', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x20000735, 0x0, 0x0) 992.001216ms ago: executing program 0 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r1, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="cb"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x700, {0xcd78, 0x7, 0x0, 0x3}}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0x101, 0xffff, 0xd6, 0x91}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x4, 0x5, 0xbe, 0x100}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x20004040) 923.007665ms ago: executing program 0 (id=1148): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xb6feefeea90bff12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000100)=0x8000) r2 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x9c8, 0x4) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) (async) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1, 0x0, 0x33}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) pause() io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 841.82679ms ago: executing program 2 (id=1149): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x400000, 0x0, 0xc87, 0x0, 0x0}, 0x1, &(0x7f00000003c0)=[{0x2, 0x401, &(0x7f0000000300)='-@\x00', 0x0, 0x0, 0x2a}]}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000100)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x2) r4 = io_uring_setup(0x534, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 122.750644ms ago: executing program 3 (id=1150): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x4042, 0x3e, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa}, 0x50) 53.621583ms ago: executing program 0 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="020108dd012918000e3580009f0001140000002f0600ac1414b0e0000003808a8972bdc933091ce132d73006"], 0xdd12}], 0x1, 0x0, 0x0, 0x20040090}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}}}]}, 0x5c}}, 0x0) 1.229864ms ago: executing program 3 (id=1152): socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) close(r2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x844) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 0s ago: executing program 0 (id=1153): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)={r1, 0x1, 0x4}) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x1, &(0x7f0000000180)=@raw=[@exit], 0x0, 0x4, 0xc1, &(0x7f0000000580)=""/193, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x1, 0xf, 0x3, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r0, r0, r0, r0, r0, r0, r3, r0], &(0x7f0000000780), 0x10, 0x97c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x58}}, 0x40080) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): : Adding interface: batadv_slave_0 [ 89.011240][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.022459][ T7332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.030882][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.033937][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.044353][ T7332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.087014][ T7332] hsr_slave_0: entered promiscuous mode [ 89.094573][ T7332] hsr_slave_1: entered promiscuous mode [ 89.102963][ T7332] debugfs: 'hsr0' already exists in 'hsr' [ 89.110226][ T7332] Cannot create hsr debugfs directory [ 89.321723][ T7411] ipvlan2: entered allmulticast mode [ 89.323527][ T7411] batadv_slave_1: entered allmulticast mode [ 89.327437][ T7411] batman_adv: batadv0: Adding interface: ipvlan2 [ 89.329822][ T7411] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.338154][ T7411] batman_adv: batadv0: Interface activated: ipvlan2 [ 89.344443][ T7412] ipvlan3: entered allmulticast mode [ 89.349238][ T7412] batman_adv: batadv0: Adding interface: ipvlan3 [ 89.351285][ T7412] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.358913][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 89.362497][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.365704][ T7412] batman_adv: batadv0: Interface activated: ipvlan3 [ 89.387610][ T5750] Bluetooth: hci2: command tx timeout [ 89.403300][ T7415] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 89.406133][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 89.409900][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 89.414491][ T7416] vhci_hcd: connection closed [ 89.417403][ T78] vhci_hcd vhci_hcd.2: stop threads [ 89.422896][ T78] vhci_hcd vhci_hcd.2: release socket [ 89.424686][ T78] vhci_hcd vhci_hcd.2: disconnect device [ 89.443897][ T7332] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 89.456445][ T7332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.462340][ T7332] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 89.469440][ T7332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.472970][ T7332] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 89.479546][ T7332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.483080][ T7332] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 89.490697][ T7332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.496914][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 89.496924][ T40] audit: type=1400 audit(1780741768.994:581): avc: denied { write } for pid=7419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.538457][ T7395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.546236][ T7395] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.567265][ T40] audit: type=1400 audit(1780741769.064:582): avc: denied { write } for pid=7428 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.569301][ T7395] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.581229][ T7395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.583251][ T7395] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.589807][ T7395] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.593935][ T7395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.596447][ T7395] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.604195][ T7395] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.608340][ T7395] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.610362][ T7395] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.621231][ T7395] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.666912][ T7332] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.688328][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.691354][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.710179][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.712452][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.761610][ T40] audit: type=1400 audit(1780741769.264:583): avc: denied { bind } for pid=7440 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.775776][ T5750] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 89.856819][ T7445] Failed to initialize the IGMP autojoin socket (err -2) [ 89.947651][ T58] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.964109][ T7452] program syz.2.448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.004954][ T7456] binder: BINDER_SET_CONTEXT_MGR already set [ 90.007289][ T7456] binder: 7454:7456 ioctl 4018620d 200000000100 returned -16 [ 90.010000][ T7456] binder: BINDER_SET_CONTEXT_MGR already set [ 90.013291][ T7456] binder: 7454:7456 ioctl 4018620d 200000000100 returned -16 [ 90.016826][ T7456] binder: BINDER_SET_CONTEXT_MGR already set [ 90.020413][ T7456] binder: 7454:7456 ioctl 4018620d 200000000100 returned -16 [ 90.021452][ T7457] binder: 7454:7457 ioctl c0306201 2000000004c0 returned -22 [ 90.107633][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 90.115441][ T58] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 90.118977][ T58] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.123688][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.130870][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.144151][ T58] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 90.144417][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.150457][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.155154][ T58] usb 5-1: Product: syz [ 90.156862][ T58] usb 5-1: Manufacturer: syz [ 90.158773][ T58] usb 5-1: SerialNumber: syz [ 90.164177][ T58] usb 5-1: config 0 descriptor?? [ 90.166778][ T7437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.170152][ T58] hub 5-1:0.0: bad descriptor, ignoring hub [ 90.172617][ T58] hub 5-1:0.0: probe with driver hub failed with error -5 [ 90.182369][ T58] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11 [ 90.190552][ T40] audit: type=1400 audit(1780741769.694:584): avc: denied { read } for pid=5133 comm="acpid" name="mouse2" dev="devtmpfs" ino=2959 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.200197][ T40] audit: type=1400 audit(1780741769.694:585): avc: denied { open } for pid=5133 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2959 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.208977][ T40] audit: type=1400 audit(1780741769.694:586): avc: denied { ioctl } for pid=5133 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2959 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.332972][ T40] audit: type=1400 audit(1780741769.834:587): avc: denied { map } for pid=7475 comm="syz.2.452" path="socket:[17236]" dev="sockfs" ino=17236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 90.373259][ T40] audit: type=1400 audit(1780741769.874:588): avc: denied { read } for pid=7436 comm="syz.0.443" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.383461][ T40] audit: type=1400 audit(1780741769.874:589): avc: denied { open } for pid=7436 comm="syz.0.443" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.409800][ T7332] veth0_vlan: entered promiscuous mode [ 90.418707][ T7332] veth1_vlan: entered promiscuous mode [ 90.441546][ T40] audit: type=1400 audit(1780741769.944:590): avc: denied { execute } for pid=7486 comm="syz.2.453" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 90.456535][ T7487] SELinux: policydb magic number 0x600 does not match expected magic number 0xf97cff8c [ 90.462630][ T7487] SELinux: failed to load policy [ 90.477639][ T7332] veth0_macvtap: entered promiscuous mode [ 90.479150][ T58] usb 5-1: USB disconnect, device number 6 [ 90.479465][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 90.490056][ T7489] __nla_validate_parse: 3 callbacks suppressed [ 90.490071][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 90.495912][ T7332] veth1_macvtap: entered promiscuous mode [ 90.569481][ T7491] overlayfs: failed to resolve '/1@¼I|š}¡þO”Øæ¥ÏôËÖ>×0 ÝtÖ¹QU{“åQ°à(#$ÕhÚÜ)ÂÉà¨[ƒ×yÍ;‘œsºGéŸÄ+QEÃÔø [ 90.569481][ T7491] Føé­" ^õB#HÿA[!1â²®õú¹öx¼^ð-aUÖ&NUáv­á5©q…Ò&f®u?õ[ñJ': -2 [ 90.577321][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.584137][ T7491] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 90.596660][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.608742][ T7332] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 90.617388][ T7332] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 90.625350][ T7332] wireguard: wg0: Could not create IPv4 socket [ 90.631240][ T7332] wireguard: wg1: Could not create IPv4 socket [ 90.637402][ T7332] wireguard: wg2: Could not create IPv4 socket [ 90.933715][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.461'. [ 91.043573][ T7519] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 91.250103][ T7534] syzkaller0: entered promiscuous mode [ 91.251982][ T7534] syzkaller0: entered allmulticast mode [ 91.575063][ T7569] bond1: entered promiscuous mode [ 91.576988][ T7569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.593813][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 91.627756][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.627913][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.880650][ T7597] binder: 7596:7597 ioctl c0306201 200000000080 returned -14 [ 91.883881][ T7597] binder: 7596:7597 ioctl c0306201 2000000003c0 returned -14 [ 91.890295][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 91.965582][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 92.002024][ T7613] tipc: Started in network mode [ 92.004167][ T7613] tipc: Node identity 4, cluster identity 4711 [ 92.006509][ T7613] tipc: Node number set to 4 [ 92.043790][ T7617] qnx4: no qnx4 filesystem (no root dir). [ 92.337586][ T6014] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.409598][ T7658] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 92.489766][ T6014] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 92.493054][ T6014] usb 5-1: config 128 has no interface number 0 [ 92.495081][ T6014] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 92.500236][ T6014] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 92.504707][ T6014] usb 5-1: config 128 interface 148 has no altsetting 0 [ 92.510754][ T6014] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 92.513665][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.516762][ T6014] usb 5-1: Product: syz [ 92.518288][ T6014] usb 5-1: Manufacturer: syz [ 92.519844][ T6014] usb 5-1: SerialNumber: syz [ 92.736755][ T7686] SELinux: syz.3.496 (7686) wrote to user. This is no longer supported. [ 92.736927][ T6014] usb 5-1: USB disconnect, device number 7 [ 92.868506][ T7698] netlink: 'syz.2.499': attribute type 4 has an invalid length. [ 93.032153][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.040932][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.046754][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.051089][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.056240][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.216351][ T7709] Failed to initialize the IGMP autojoin socket (err -2) [ 93.237710][ T6014] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.388989][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 93.394782][ T6014] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 93.403249][ T6014] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.412174][ T6014] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.417917][ T6014] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 93.421957][ T6014] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.425932][ T6014] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.429809][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.638226][ T6014] usb 5-1: usb_control_msg returned -32 [ 93.640131][ T6014] usbtmc 5-1:16.0: can't read capabilities [ 93.658205][ T1489] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 93.672148][ T6014] usb 5-1: USB disconnect, device number 8 [ 93.675128][ T7766] o2cb: This node has not been configured. [ 93.678540][ T7766] o2cb: Cluster check failed. Fix errors before retrying. [ 93.680930][ T7766] (syz.0.505,7766,3):user_dlm_register:674 ERROR: status = -22 [ 93.685162][ T7766] (syz.0.505,7766,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 93.708544][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.708555][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.733977][ T7770] input: syz0 as /devices/virtual/input/input12 [ 93.823855][ T1489] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.826784][ T1489] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.831033][ T1489] usb 7-1: Product: syz [ 93.832529][ T1489] usb 7-1: Manufacturer: syz [ 93.834144][ T1489] usb 7-1: SerialNumber: syz [ 93.838819][ T1489] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 93.861811][ T6319] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.097979][ T1489] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 94.272839][ T1489] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.275717][ T1489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.278581][ T1489] usb 5-1: Product: syz [ 94.279966][ T1489] usb 5-1: Manufacturer: syz [ 94.281491][ T1489] usb 5-1: SerialNumber: syz [ 94.288416][ T1489] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.303601][ T5884] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.512179][ T1489] usb 5-1: USB disconnect, device number 9 [ 94.520680][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 94.520691][ T40] audit: type=1400 audit(2000000001.119:639): avc: denied { write } for pid=7806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.564947][ T40] audit: type=1400 audit(2000000001.159:640): avc: denied { write } for pid=7809 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.668448][ T40] audit: type=1400 audit(2000000001.269:641): avc: denied { write } for pid=7812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.719372][ T40] audit: type=1400 audit(2000000001.319:642): avc: denied { write } for pid=7815 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.731084][ T7709] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 94.739172][ T7709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.742205][ T7709] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 94.749767][ T7709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.752569][ T7709] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 94.756451][ T7709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.760576][ T7709] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 94.764365][ T7709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.835146][ T40] audit: type=1400 audit(2000000001.429:643): avc: denied { write } for pid=7818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.884980][ T40] audit: type=1400 audit(2000000001.479:644): avc: denied { write } for pid=7825 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.907674][ T5747] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 94.907947][ T5750] Bluetooth: hci2: command 0x1003 tx timeout [ 94.907954][ T6319] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 94.914032][ T6319] ath9k_htc: Failed to initialize the device [ 94.970694][ T6319] usb 7-1: ath9k_htc: USB layer deinitialized [ 95.019443][ T40] audit: type=1400 audit(2000000001.609:645): avc: denied { write } for pid=7835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.063900][ T40] audit: type=1400 audit(2000000001.659:646): avc: denied { write } for pid=7845 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.079157][ T40] audit: type=1400 audit(2000000001.669:647): avc: denied { setopt } for pid=7847 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.087185][ T40] audit: type=1400 audit(2000000001.669:648): avc: denied { read } for pid=7847 comm="syz.3.512" path="socket:[20228]" dev="sockfs" ino=20228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.150155][ T5747] Bluetooth: hci4: command tx timeout [ 95.186877][ T7709] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 95.194791][ T7709] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 95.204093][ T7709] wireguard: wg0: Could not create IPv4 socket [ 95.207291][ T7709] wireguard: wg1: Could not create IPv4 socket [ 95.210426][ T7709] wireguard: wg2: Could not create IPv4 socket [ 95.389409][ T5884] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 95.392513][ T5884] ath9k_htc: Failed to initialize the device [ 95.399518][ T1489] usb 5-1: ath9k_htc: USB layer deinitialized [ 95.458501][ T7876] Failed to initialize the IGMP autojoin socket (err -2) [ 95.505007][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 95.510629][ T7884] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 95.515050][ T7884] /dev/nullb0: Can't open blockdev [ 95.627156][ T7894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.630514][ T7894] IPv6: NLM_F_CREATE should be set when creating new route [ 95.632765][ T7894] IPv6: NLM_F_CREATE should be set when creating new route [ 95.635009][ T7894] IPv6: NLM_F_CREATE should be set when creating new route [ 95.787697][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.797798][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.442386][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.523'. [ 96.445167][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.523'. [ 96.505866][ T5884] usb 7-1: USB disconnect, device number 12 [ 96.674977][ T7954] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 96.715388][ T7959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.529'. [ 96.916816][ T7982] kAFS: unparsable volume name [ 97.270801][ T8009] Failed to initialize the IGMP autojoin socket (err -2) [ 97.401564][ T8015] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 97.449834][ T8029] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 97.639404][ T5747] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 97.641112][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 97.782163][ T8075] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.552'. [ 97.786127][ T8075] netlink: Unknown conntrack attr (0) [ 97.912494][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 97.983692][ T8095] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1iÒûm÷]7ä(äaŠàó H˜] ³¹¿ÃÇ [ 98.351793][ T8125] netlink: 104 bytes leftover after parsing attributes in process `syz.3.561'. [ 98.354759][ T8124] netlink: 104 bytes leftover after parsing attributes in process `syz.3.561'. [ 98.427816][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 98.434851][ T8057] ceph: No mds server is up or the cluster is laggy [ 98.515659][ T5747] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 98.725239][ T8155] Failed to initialize the IGMP autojoin socket (err -2) [ 98.779919][ T5747] Bluetooth: hci3: unexpected subevent 0x01 length: 101 > 18 [ 98.805385][ T8155] can: request_module (can-proto-4) failed. [ 99.286498][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.572'. [ 99.323995][ T8187] syzkaller0: entered promiscuous mode [ 99.325742][ T8187] syzkaller0: entered allmulticast mode [ 99.487713][ T8199] syz.3.574 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.529735][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.540250][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.546492][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.549611][ T8209] netlink: 'syz.3.575': attribute type 83 has an invalid length. [ 99.554647][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.562007][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.625144][ T8216] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 99.630471][ T8216] netlink: 228 bytes leftover after parsing attributes in process `syz.3.576'. [ 99.656990][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 99.657006][ T40] audit: type=1400 audit(2000000006.249:711): avc: denied { write } for pid=8215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.706479][ T8222] fuse: Bad value for 'fd' [ 99.732876][ T40] audit: type=1400 audit(2000000006.329:712): avc: denied { write } for pid=8229 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.749115][ T8210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.755773][ T8210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.760257][ T8210] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.769359][ T8210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.775929][ T8210] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.788520][ T8205] Failed to initialize the IGMP autojoin socket (err -2) [ 99.796896][ T8210] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.804319][ T8244] bridge1: entered promiscuous mode [ 99.806055][ T8244] bridge1: entered allmulticast mode [ 99.843264][ T8249] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 99.856426][ T40] audit: type=1400 audit(2000000006.449:713): avc: denied { write } for pid=8246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.919894][ T40] audit: type=1400 audit(2000000006.519:714): avc: denied { write } for pid=8258 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.038822][ T40] audit: type=1400 audit(2000000006.639:715): avc: denied { write } for pid=8263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.094948][ T40] audit: type=1400 audit(2000000006.689:716): avc: denied { write } for pid=8266 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.153235][ C3] vcan0: j1939_tp_rxtimer: 0xffff888056478c00: rx timeout, send abort [ 100.235680][ T40] audit: type=1400 audit(2000000006.829:717): avc: denied { write } for pid=8269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.288638][ T40] audit: type=1400 audit(2000000006.889:718): avc: denied { write } for pid=8272 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.395743][ T40] audit: type=1400 audit(2000000006.989:719): avc: denied { write } for pid=8275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.450775][ T8205] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 100.456356][ T8205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.458555][ T40] audit: type=1400 audit(2000000007.049:720): avc: denied { write } for pid=8278 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.460479][ T8205] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 100.474828][ T8205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.480044][ T8205] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 100.486118][ T8205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.489071][ T8205] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 100.497268][ T8205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.653374][ C3] vcan0: j1939_tp_rxtimer: 0xffff888056478000: rx timeout, send abort [ 100.656857][ C3] vcan0: j1939_tp_rxtimer: 0xffff888056478c00: abort rx timeout. Force session deactivation [ 100.936712][ T8205] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 100.946806][ T8205] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 100.955307][ T8205] wireguard: wg0: Could not create IPv4 socket [ 100.959771][ T8205] wireguard: wg1: Could not create IPv4 socket [ 100.963658][ T8205] wireguard: wg2: Could not create IPv4 socket [ 101.156815][ C3] vcan0: j1939_tp_rxtimer: 0xffff888056478000: abort rx timeout. Force session deactivation [ 101.262581][ T8322] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 101.687408][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 101.707611][ T5747] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.735600][ T8355] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 101.787745][ T5747] Bluetooth: hci2: command 0x041b tx timeout [ 101.788719][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.867670][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.869136][ T8219] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 101.956513][ T62] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 102.149933][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 102.426772][ T8439] comedi comedi3: no devices specified [ 102.681763][ T8468] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.602'. [ 102.690704][ T8468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.602'. [ 102.757245][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 102.788256][ T8480] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 102.802897][ T8480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.825449][ T8480] veth9: entered promiscuous mode [ 102.830758][ T8480] bond2: (slave veth9): Enslaving as an active interface with a down link [ 102.843947][ T8480] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 102.943131][ T8499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.610'. [ 102.945956][ T8499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.610'. [ 103.024743][ T8508] netlink: 596 bytes leftover after parsing attributes in process `syz.3.612'. [ 103.074900][ T8515] cgroup: none used incorrectly [ 103.079397][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.615'. [ 103.120508][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 103.121434][ T8525] Unknown options in mask b7f2 [ 103.146644][ T8524] bond3: entered promiscuous mode [ 103.148510][ T8524] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.168687][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.3.616 [ 103.177674][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.3.616 [ 103.181810][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.3.616 [ 103.190648][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.3.616 [ 103.195257][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.3.616 [ 103.200174][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.3.616 [ 103.204687][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.3.616 [ 103.211023][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.3.616 [ 103.215876][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.3.616 [ 103.382590][ T8554] syz.2.625 (8554) used greatest stack depth: 16920 bytes left [ 103.788774][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.250388][ T8655] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 104.261288][ T8655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 104.282756][ T8651] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 104.287229][ T8651] bond4: entered promiscuous mode [ 104.351145][ T8669] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 104.351145][ T8669] program syz.2.645 not setting count and/or reply_len properly [ 104.435981][ T8679] loop8: detected capacity change from 0 to 7 [ 104.443325][ C2] blk_print_req_error: 5 callbacks suppressed [ 104.443340][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.448798][ C2] buffer_io_error: 5 callbacks suppressed [ 104.448811][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.454121][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.457101][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.459810][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.462655][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.465256][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.468802][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.472062][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.474852][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.477911][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.480850][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.483535][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.486432][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.489084][ T8679] ldm_validate_partition_table(): Disk read failed. [ 104.494239][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.497175][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.500650][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.503771][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.506290][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.509401][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 104.512297][ T8679] Dev loop8: unable to read RDB block 0 [ 104.514656][ T8679] loop8: unable to read partition table [ 104.516615][ T8679] loop8: partition table beyond EOD, truncated [ 104.519103][ T8679] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 104.688370][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 104.688383][ T40] audit: type=1400 audit(2000000011.289:870): avc: denied { prog_load } for pid=8701 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.696221][ T40] audit: type=1400 audit(2000000011.289:871): avc: denied { bpf } for pid=8701 comm="syz.3.653" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.702783][ T40] audit: type=1400 audit(2000000011.289:872): avc: denied { perfmon } for pid=8701 comm="syz.3.653" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.710007][ T40] audit: type=1400 audit(2000000011.289:873): avc: denied { prog_run } for pid=8701 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.715832][ T40] audit: type=1400 audit(2000000011.309:874): avc: denied { module_request } for pid=8701 comm="syz.3.653" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 104.741491][ T40] audit: type=1400 audit(2000000011.339:875): avc: denied { sys_module } for pid=8701 comm="syz.3.653" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.758879][ T40] audit: type=1400 audit(2000000011.359:876): avc: denied { read } for pid=8713 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.768235][ T40] audit: type=1400 audit(2000000011.359:877): avc: denied { read open } for pid=8713 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.777659][ T40] audit: type=1400 audit(2000000011.359:878): avc: denied { getattr } for pid=8713 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.793097][ T40] audit: type=1400 audit(2000000011.389:879): avc: denied { write } for pid=8711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.206423][ T8731] syzkaller0: entered promiscuous mode [ 105.209187][ T8731] syzkaller0: entered allmulticast mode [ 105.529238][ T8749] FAULT_INJECTION: forcing a failure. [ 105.529238][ T8749] name failslab, interval 1, probability 0, space 0, times 1 [ 105.534722][ T8749] CPU: 2 UID: 0 PID: 8749 Comm: syz.3.657 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.534740][ T8749] Tainted: [L]=SOFTLOCKUP [ 105.534744][ T8749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.534751][ T8749] Call Trace: [ 105.534755][ T8749] [ 105.534759][ T8749] dump_stack_lvl+0x100/0x190 [ 105.534789][ T8749] should_fail_ex.cold+0x5/0xa [ 105.534806][ T8749] should_failslab+0xc2/0x120 [ 105.534819][ T8749] __kvmalloc_node_noprof+0xfa/0xa00 [ 105.534837][ T8749] ? seq_read_iter+0x819/0x1270 [ 105.534854][ T8749] seq_read_iter+0x819/0x1270 [ 105.534873][ T8749] seq_read+0x33b/0x4c0 [ 105.534886][ T8749] ? __pfx_seq_read+0x10/0x10 [ 105.534902][ T8749] ? avc_policy_seqno+0x9/0x20 [ 105.534919][ T8749] ? selinux_file_permission+0x8f/0x6d0 [ 105.534939][ T8749] ? rw_verify_area+0xce/0x6d0 [ 105.534950][ T8749] ? __pfx_seq_read+0x10/0x10 [ 105.534963][ T8749] vfs_read+0x1e4/0xb30 [ 105.534976][ T8749] ? __pfx_vfs_read+0x10/0x10 [ 105.534987][ T8749] ? find_held_lock+0x2b/0x80 [ 105.534996][ T8749] ? __fget_files+0x215/0x3d0 [ 105.535010][ T8749] ? __fget_files+0x215/0x3d0 [ 105.535026][ T8749] ? __fget_files+0x21f/0x3d0 [ 105.535043][ T8749] __x64_sys_pread64+0x1eb/0x250 [ 105.535057][ T8749] ? __pfx___x64_sys_pread64+0x10/0x10 [ 105.535071][ T8749] ? rcu_is_watching+0x12/0xc0 [ 105.535090][ T8749] do_syscall_64+0x115/0x870 [ 105.535112][ T8749] ? clear_bhb_loop+0x40/0x90 [ 105.535126][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.535137][ T8749] RIP: 0033:0x7f8a7719ce59 [ 105.535148][ T8749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.535159][ T8749] RSP: 002b:00007f8a78047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 105.535170][ T8749] RAX: ffffffffffffffda RBX: 00007f8a77415fa0 RCX: 00007f8a7719ce59 [ 105.535176][ T8749] RDX: 0000000000000013 RSI: 0000200000000340 RDI: 0000000000000005 [ 105.535183][ T8749] RBP: 00007f8a78047090 R08: 0000000000000000 R09: 0000000000000000 [ 105.535189][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.535195][ T8749] R13: 00007f8a77416038 R14: 00007f8a77415fa0 R15: 00007fff415dec68 [ 105.535209][ T8749] [ 105.623757][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.631166][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.636487][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.640801][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.645819][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.826903][ T8750] Failed to initialize the IGMP autojoin socket (err -2) [ 105.867843][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.025859][ T8799] tmpfs: Bad value for 'mpol' [ 106.336249][ T8826] netlink: 'syz.3.671': attribute type 30 has an invalid length. [ 106.430235][ T8826] netlink: 'syz.3.671': attribute type 30 has an invalid length. [ 106.479849][ T8750] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 106.486887][ T8750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.489885][ T8750] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 106.495854][ T8750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.499355][ T8750] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 106.504285][ T8750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.507306][ T8750] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 106.516693][ T8750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.541481][ T8838] FAULT_INJECTION: forcing a failure. [ 106.541481][ T8838] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.546643][ T8838] CPU: 0 UID: 0 PID: 8838 Comm: syz.3.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.546662][ T8838] Tainted: [L]=SOFTLOCKUP [ 106.546666][ T8838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.546673][ T8838] Call Trace: [ 106.546677][ T8838] [ 106.546682][ T8838] dump_stack_lvl+0x100/0x190 [ 106.546699][ T8838] should_fail_ex.cold+0x5/0xa [ 106.546715][ T8838] _copy_to_user+0x32/0xd0 [ 106.546731][ T8838] simple_read_from_buffer+0xcb/0x170 [ 106.546746][ T8838] proc_fail_nth_read+0x1af/0x230 [ 106.546759][ T8838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.546772][ T8838] ? rw_verify_area+0xce/0x6d0 [ 106.546782][ T8838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.546794][ T8838] vfs_read+0x1e4/0xb30 [ 106.546808][ T8838] ? __pfx_vfs_read+0x10/0x10 [ 106.546819][ T8838] ? __fget_files+0x215/0x3d0 [ 106.546836][ T8838] ? __fget_files+0x21f/0x3d0 [ 106.546853][ T8838] ksys_read+0x12a/0x250 [ 106.546865][ T8838] ? __pfx_ksys_read+0x10/0x10 [ 106.546878][ T8838] ? rcu_is_watching+0x12/0xc0 [ 106.546897][ T8838] do_syscall_64+0x115/0x870 [ 106.546911][ T8838] ? clear_bhb_loop+0x40/0x90 [ 106.546925][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.546936][ T8838] RIP: 0033:0x7f8a7715d68e [ 106.546945][ T8838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.546956][ T8838] RSP: 002b:00007f8a78046fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.546967][ T8838] RAX: ffffffffffffffda RBX: 00007f8a780476c0 RCX: 00007f8a7715d68e [ 106.546974][ T8838] RDX: 000000000000000f RSI: 00007f8a780470a0 RDI: 0000000000000006 [ 106.546980][ T8838] RBP: 00007f8a78047090 R08: 0000000000000000 R09: 0000000000000000 [ 106.546986][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.546992][ T8838] R13: 00007f8a77416038 R14: 00007f8a77415fa0 R15: 00007fff415dec68 [ 106.547006][ T8838] [ 106.652592][ T8846] openvswitch: netlink: EtherType 50a is less than min 600 [ 106.693264][ T8854] __nla_validate_parse: 12 callbacks suppressed [ 106.693280][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 106.979026][ T8750] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 106.999132][ T8750] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 107.009027][ T8750] wireguard: wg0: Could not create IPv4 socket [ 107.014784][ T8750] wireguard: wg1: Could not create IPv4 socket [ 107.019388][ T8750] wireguard: wg2: Could not create IPv4 socket [ 107.317802][ T5815] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 107.479600][ T5815] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 107.482553][ T5815] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 107.486186][ T5815] usb 8-1: config 0 interface 0 has no altsetting 0 [ 107.493531][ T5815] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.496974][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 107.499943][ T5815] usb 8-1: Product: syz [ 107.501498][ T5815] usb 8-1: Manufacturer: syz [ 107.503186][ T5815] usb 8-1: SerialNumber: syz [ 107.508795][ T5815] usb 8-1: config 0 descriptor?? [ 107.512711][ T5815] hub 8-1:0.0: bad descriptor, ignoring hub [ 107.515014][ T5815] hub 8-1:0.0: probe with driver hub failed with error -5 [ 107.522074][ T5815] usb 8-1: selecting invalid altsetting 0 [ 107.687066][ T8922] erspan1: entered allmulticast mode [ 107.739079][ T8925] netlink: 'syz.2.681': attribute type 21 has an invalid length. [ 107.741820][ T8925] netlink: 156 bytes leftover after parsing attributes in process `syz.2.681'. [ 107.746753][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 108.343369][ T8953] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 108.461569][ T8960] bad cache= option: none 156 [ 108.461569][ T8960] nr_mlock 0 [ 108.461569][ T8960] nr_zspages 0 [ 108.461569][ T8960] nr_free_cma 0 [ 108.461569][ T8960] numa_hit 770420 [ 108.461569][ T8960] numa_miss 47444 [ 108.461569][ T8960] numa_foreign 47444 [ 108.461569][ T8960] numa_interleave 7881 [ 108.461569][ T8960] numa_local 765928 [ 108.461569][ T8960] numa_other 51936 [ 108.461569][ T8960] nr_inactive_anon 27291 [ 108.461569][ T8960] nr_active_anon 36540 [ 108.461569][ T8960] nr_inactive_file 46336 [ 108.461569][ T8960] nr_active_file 8913 [ 108.461569][ T8960] nr_unevictable 1769 [ 108.461569][ T8960] nr_slab_reclaimable 9422 [ 108.461569][ T8960] nr_slab_unreclaimable 73454 [ 108.461569][ T8960] nr_isolated_anon 0 [ 108.461569][ T8960] nr_isolated_file 0 [ 108.461569][ T8960] workingset_nodes 109 [ 108.461569][ T8960] workingset_refault_anon 1223 [ 108.461569][ T8960] workingset_refault_file 303 [ 108.461569][ T8960] workingset_activate_anon 1222 [ 108.461569][ T8960] workingset_activate_file 303 [ 108.461569][ T8960] workingset_restore_anon 0 [ 108.461569][ T8960] workingset_restore_file 0 [ 108.461569][ T8960] workingset_nodereclaim 0 [ 108.461569][ T8960] nr_anon_pages 13847 [ 108.461569][ T8960] nr_mapped 24995 [ 108.461569][ T8960] nr_file_pages 107000 [ 108.461569][ T8960] nr_dirty 156 [ 108.461569][ T8960] nr_writeback 0 [ 108.461569][ T8960] nr_shmem 51754 [ 108.461569][ T8960] nr_shmem_hugepages 0 [ 108.461569][ T8960] nr_shmem_pmdmapped 0 [ 108.461569][ T8960] nr_file_hugepages 0 [ 108.461569][ T8960] nr_file_pmdmapped 0 [ 108.461569][ T8960] nr_anon_transparent_hugepages 0 [ 108.461569][ T8960] nr_vmscan_write 4767 [ 108.461569][ T8960] nr_vmscan_immediate_reclaim 1 [ 108.461569][ T8960] nr_dirtied 2882 [ 108.461569][ T8960] nr_written 2215 [ 108.461569][ T8960] nr_throttled_written 0 [ 108.461569][ T8960] nr_kernel_misc_reclaimable 0 [ 108.461569][ T8960] nr_foll_pin_acquired 5537 [ 108.461569][ T8960] nr_foll_pin_released 5537 [ 108.461979][ T8960] CIFS: VFS: bad cache= option: none 156 [ 108.461979][ T8960] nr_mlock 0 [ 108.461979][ T8960] nr_zspages 0 [ 108.461979][ T8960] nr_free_cma 0 [ 108.461979][ T8960] numa_hit 770420 [ 108.461979][ T8960] numa_miss 47444 [ 108.461979][ T8960] numa_foreign 47444 [ 108.461979][ T8960] numa_interleave 7881 [ 108.461979][ T8960] numa_local 765928 [ 108.461979][ T8960] numa_other 51936 [ 108.461979][ T8960] nr_inactive_anon 27291 [ 108.461979][ T8960] nr_active_anon 36540 [ 108.461979][ T8960] nr_inactive_file 46336 [ 108.461979][ T8960] nr_active_file 8913 [ 108.461979][ T8960] nr_unevictable 1769 [ 108.461979][ T8960] nr_slab_reclaimable 9422 [ 108.461979][ T8960] nr_slab_unreclaimable 73454 [ 108.461979][ T8960] nr_isolated_anon 0 [ 108.461979][ T8960] nr_isolated_file 0 [ 108.461979][ T8960] workingset_nodes 109 [ 108.461979][ T8960] workingset_refault_anon 1223 [ 108.461979][ T8960] workingset_refault_file 303 [ 108.461979][ T8960] workingset_activate_anon 1222 [ 108.461979][ T8960] workingset_activate_file 303 [ 108.461979][ T8960] workingset_restore_anon 0 [ 108.461979][ T8960] workingset_restore_file 0 [ 108.461979][ T8960] workingset_nodereclaim 0 [ 108.461979][ T8960] nr_anon_pages 13847 [ 108.461979][ T8960] nr_mapped 24995 [ 108.461979][ T8960] nr_file_pages 107000 [ 108.461979][ T8960] nr_dirty 156 [ 108.461979][ T8960] nr_writeback 0 [ 108.461979][ T8960] nr_shmem 51754 [ 108.461979][ T8960] nr_shmem_hugepages 0 [ 108.461979][ T8960] nr_shmem_pmdmapped 0 [ 108.461979][ T8960] nr_file_hugepages 0 [ 108.461979][ T8960] nr_file_pmdmapped 0 [ 108.461979][ T8960] nr_anon_transparent_hugepages 0 [ 108.461979][ T8960] nr_vmscan_write 4767 [ 108.461979][ T8960] nr_vmscan_immediate_reclaim 1 [ 108.461979][ T8960] nr_dirtied 2882 [ 108.461979][ T8960] nr_written 2215 [ 108.461979][ T8960] nr_throttled_written 0 [ 108.461979][ T8960] nr_kernel_misc_reclaimable 0 [ 108.461979][ T8960] nr_foll_pin_acquired 5537 [ 108.527332][ T8960] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.633359][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.685'. [ 108.764978][ T62] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 109.000266][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.689'. [ 109.018748][ T8991] bond4: entered promiscuous mode [ 109.021114][ T8991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.340002][ T9050] netlink: 'syz.2.691': attribute type 15 has an invalid length. [ 109.343528][ T9050] netlink: 'syz.2.691': attribute type 7 has an invalid length. [ 109.347039][ T9050] netlink: 52 bytes leftover after parsing attributes in process `syz.2.691'. [ 109.651781][ T9078] 0: reclassify loop, rule prio 0, protocol 700 [ 109.778118][ T40] kauditd_printk_skb: 322 callbacks suppressed [ 109.778133][ T40] audit: type=1400 audit(2000000016.379:1202): avc: denied { prog_load } for pid=9079 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.789849][ T40] audit: type=1400 audit(2000000016.379:1203): avc: denied { perfmon } for pid=9079 comm="syz.2.698" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.799358][ T40] audit: type=1400 audit(2000000016.389:1204): avc: denied { prog_run } for pid=9079 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.827376][ T40] audit: type=1400 audit(2000000016.419:1205): avc: denied { create } for pid=9081 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.918980][ T40] audit: type=1400 audit(2000000016.519:1206): avc: denied { read } for pid=9086 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.928568][ T40] audit: type=1400 audit(2000000016.529:1207): avc: denied { read open } for pid=9086 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.940839][ T40] audit: type=1400 audit(2000000016.529:1208): avc: denied { getattr } for pid=9086 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.950565][ T40] audit: type=1400 audit(2000000016.549:1209): avc: denied { ioctl } for pid=9081 comm="syz.2.699" path="socket:[26756]" dev="sockfs" ino=26756 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.964368][ T40] audit: type=1400 audit(2000000016.559:1210): avc: denied { write } for pid=9085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.972705][ T40] audit: type=1400 audit(2000000016.559:1211): avc: denied { add_name } for pid=9085 comm="dhcpcd-run-hook" name="resolv.conf.veth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.071543][ T9095] Dev loop9: unable to read RDB block 8 [ 110.074155][ T9095] loop9: unable to read partition table [ 110.076364][ T9095] loop_reread_partitions: partition scan of loop9 (ážXHuù£¨ÃÒJíˆý[¼d‚ÒwÍ|i4F‡Â-—ºä½ÚÚ£rwǘ3›êåùU™ÈžŒžJ½„?"e) failed (rc=-5) [ 110.120526][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 110.159942][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 110.164865][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.703'. [ 110.201719][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 110.434113][ T9130] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 110.444161][ T60] Bluetooth: hci2: Frame reassembly failed (-84) [ 111.304478][ T5884] usb 8-1: USB disconnect, device number 5 [ 111.741075][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.748481][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.753711][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.759540][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.763114][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.920053][ T9163] autofs: Bad value for 'fd' [ 111.921673][ T9163] autofs: Bad value for 'fd' [ 111.923266][ T9163] autofs: Bad value for 'fd' [ 111.925218][ T9163] autofs: Bad value for 'fd' [ 111.926745][ T9163] autofs: Bad value for 'fd' [ 111.928600][ T9163] autofs: Bad value for 'fd' [ 111.930162][ T9163] autofs: Bad value for 'fd' [ 111.932067][ T9163] autofs: Bad value for 'fd' [ 111.933741][ T9163] autofs: Bad value for 'fd' [ 111.935345][ T9163] autofs: Bad value for 'fd' [ 111.936955][ T9163] autofs: Bad value for 'fd' [ 111.938835][ T9163] autofs: Bad value for 'fd' [ 111.940426][ T9163] autofs: Bad value for 'fd' [ 111.942014][ T9163] autofs: Bad value for 'fd' [ 111.943708][ T9163] autofs: Bad value for 'fd' [ 111.945275][ T9163] autofs: Bad value for 'fd' [ 111.946841][ T9163] autofs: Bad value for 'fd' [ 111.949845][ T9163] autofs: Bad value for 'fd' [ 111.951534][ T9163] autofs: Bad value for 'fd' [ 111.953258][ T9163] autofs: Bad value for 'fd' [ 111.953582][ T9143] Failed to initialize the IGMP autojoin socket (err -2) [ 111.954860][ T9163] autofs: Bad value for 'fd' [ 111.958772][ T9163] autofs: Bad value for 'fd' [ 111.960473][ T9163] autofs: Bad value for 'fd' [ 111.962924][ T9163] autofs: Bad value for 'fd' [ 111.964513][ T9163] autofs: Bad value for 'fd' [ 111.966128][ T9163] autofs: Bad value for 'fd' [ 111.967729][ T9163] autofs: Bad value for 'fd' [ 111.969326][ T9163] autofs: Bad value for 'fd' [ 111.970985][ T9163] autofs: Bad value for 'fd' [ 111.973794][ T9163] autofs: Bad value for 'fd' [ 112.508288][ T62] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 112.631545][ T9143] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 112.636872][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.640060][ T9143] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 112.649575][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.655098][ T9143] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 112.666043][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.669498][ T9143] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 112.678793][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.784455][ T9220] misc userio: No port type given on /dev/userio [ 112.818318][ T9217] vlan3: entered allmulticast mode [ 112.820176][ T9217] bond0: entered allmulticast mode [ 112.831324][ T9217] tmpfs: Unknown parameter 'indo64' [ 112.841665][ T1489] hid (null): unknown global tag 0xd [ 112.851110][ T1489] hid (null): unknown global tag 0xd [ 112.853449][ T1489] hid (null): report_id 0 is invalid [ 112.855684][ T1489] hid (null): unknown global tag 0xc [ 112.912856][ T1489] hid-generic 0007:000E:FFFF.0004: unknown main item tag 0x3 [ 112.921356][ T1489] hid-generic 0007:000E:FFFF.0004: unknown global tag 0xd [ 112.925204][ T1489] hid-generic 0007:000E:FFFF.0004: item 0 1 1 13 parsing failed [ 112.938161][ T1489] hid-generic 0007:000E:FFFF.0004: probe with driver hid-generic failed with error -22 [ 112.992294][ T9244] __nla_validate_parse: 1 callbacks suppressed [ 112.992310][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 113.093308][ T9252] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.304607][ T9143] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 113.320784][ T9143] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 113.328437][ T9143] wireguard: wg0: Could not create IPv4 socket [ 113.333189][ T9143] wireguard: wg1: Could not create IPv4 socket [ 113.338081][ T9143] wireguard: wg2: Could not create IPv4 socket [ 113.345201][ T9262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9262 comm=syz.3.726 [ 113.478867][ T5884] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 113.544594][ T9269] mmap: syz.3.728 (9269) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.552623][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.728'. [ 113.555415][ T9269] netlink: 'syz.3.728': attribute type 14 has an invalid length. [ 113.558258][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.728'. [ 113.561131][ T9269] netlink: 'syz.3.728': attribute type 14 has an invalid length. [ 113.639201][ T5884] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.643183][ T5884] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.648658][ T5884] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.651638][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.868513][ T5884] usb 5-1: usb_control_msg returned -32 [ 113.873596][ T5884] usbtmc 5-1:16.0: can't read capabilities [ 114.050826][ T9291] rdma_op ffff88802f3b91f0 conn xmit_rdma 0000000000000000 [ 114.253826][ T62] Bluetooth: hci0: unexpected event for opcode 0xa5d5 [ 114.286221][ T9301] Bluetooth: MGMT ver 1.23 [ 114.602687][ T60] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.610201][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.811856][ T40] kauditd_printk_skb: 272 callbacks suppressed [ 114.811873][ T40] audit: type=1400 audit(2000000021.409:1484): avc: denied { write } for pid=9304 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.446262][ T40] audit: type=1400 audit(2000000022.039:1485): avc: denied { read write } for pid=5736 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.475741][ T40] audit: type=1400 audit(2000000022.039:1486): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.486569][ T40] audit: type=1400 audit(2000000022.039:1487): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.501763][ T40] audit: type=1400 audit(2000000022.069:1488): avc: denied { mounton } for pid=9318 comm="syz.3.742" path="/249/file0" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.513530][ T40] audit: type=1400 audit(2000000022.069:1489): avc: denied { mount } for pid=9318 comm="syz.3.742" name="/" dev="9p" ino=73687237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 115.524064][ T40] audit: type=1400 audit(2000000022.089:1490): avc: denied { write } for pid=9318 comm="syz.3.742" name="/" dev="9p" ino=73687237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.542063][ T40] audit: type=1400 audit(2000000022.089:1491): avc: denied { remove_name } for pid=9318 comm="syz.3.742" name="file2" dev="9p" ino=73687249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.552434][ T40] audit: type=1400 audit(2000000022.089:1492): avc: denied { rmdir } for pid=9318 comm="syz.3.742" name="file2" dev="9p" ino=73687249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.571658][ T40] audit: type=1400 audit(2000000022.099:1493): avc: denied { create } for pid=9318 comm="syz.3.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.631449][ T9323] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.745'. [ 115.634364][ T9323] openvswitch: netlink: Missing key (keys=40, expected=80) [ 115.962234][ T9341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=9341 comm=syz.2.749 [ 115.972068][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 115.976020][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 116.175794][ T9346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.232197][ T1489] usb 5-1: USB disconnect, device number 10 [ 116.557003][ T9367] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 116.567703][ T9367] netlink: 760 bytes leftover after parsing attributes in process `syz.0.757'. [ 116.571173][ T9367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.757'. [ 116.633003][ T9375] netlink: 'syz.0.759': attribute type 12 has an invalid length. [ 116.636740][ T9375] netlink: 'syz.0.759': attribute type 29 has an invalid length. [ 116.640588][ T9375] netlink: 148 bytes leftover after parsing attributes in process `syz.0.759'. [ 116.644440][ T9375] netlink: 'syz.0.759': attribute type 3 has an invalid length. [ 116.648130][ T9375] netlink: 'syz.0.759': attribute type 2 has an invalid length. [ 116.651492][ T9375] netlink: 35 bytes leftover after parsing attributes in process `syz.0.759'. [ 116.656037][ T9375] netlink: 'syz.0.759': attribute type 12 has an invalid length. [ 116.660450][ T9375] netlink: 'syz.0.759': attribute type 29 has an invalid length. [ 116.667298][ T9375] netlink: 'syz.0.759': attribute type 3 has an invalid length. [ 116.867453][ T9392] 8021q: adding VLAN 0 to HW filter on device bond5 [ 116.883877][ T9392] bond5: (slave gretap1): making interface the new active one [ 116.887164][ T9392] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 116.896946][ T9392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9392 comm=syz.3.763 [ 116.967669][ T9405] qrtr: Invalid version 0 [ 116.994078][ T9407] kvm: kvm [9406]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x800000001000000 [ 117.021638][ T9407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.625522][ T9419] tmpfs: Unknown parameter '/dev/sg#' [ 117.706693][ T9425] Failed to initialize the IGMP autojoin socket (err -2) [ 117.713018][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.720389][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.724540][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.729412][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.732957][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.739257][ T9434] overlayfs: failed to resolve './file0': -2 [ 117.775256][ T9440] bridge3: entered promiscuous mode [ 117.776905][ T9440] bridge3: entered allmulticast mode [ 117.787416][ T9440] bridge4: entered promiscuous mode [ 117.794189][ T9440] bridge4: entered allmulticast mode [ 117.833967][ T9440] bridge5: entered promiscuous mode [ 117.839801][ T9440] bridge5: entered allmulticast mode [ 117.849374][ T9440] bridge6: entered promiscuous mode [ 117.851163][ T9440] bridge6: entered allmulticast mode [ 117.862351][ T9440] bridge7: entered promiscuous mode [ 117.864230][ T9440] bridge7: entered allmulticast mode [ 117.871167][ T9440] bridge8: entered promiscuous mode [ 117.872908][ T9440] bridge8: entered allmulticast mode [ 117.878792][ T9440] bridge9: entered promiscuous mode [ 117.881227][ T9440] bridge9: entered allmulticast mode [ 117.894015][ T9440] bridge10: entered promiscuous mode [ 117.896501][ T9440] bridge10: entered allmulticast mode [ 117.918827][ T9440] bridge11: entered promiscuous mode [ 117.923213][ T9440] bridge11: entered allmulticast mode [ 117.941540][ T9440] bridge12: entered promiscuous mode [ 117.950271][ T9440] bridge12: entered allmulticast mode [ 117.974018][ T9440] bridge13: entered promiscuous mode [ 117.978980][ T9440] bridge13: entered allmulticast mode [ 117.986830][ T9440] bridge14: entered promiscuous mode [ 117.989569][ T9440] bridge14: entered allmulticast mode [ 118.003253][ T9440] bridge15: entered promiscuous mode [ 118.007309][ T9440] bridge15: entered allmulticast mode [ 118.012338][ T9440] __nla_validate_parse: 15 callbacks suppressed [ 118.012351][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.034787][ T9440] bridge16: entered promiscuous mode [ 118.045209][ T9440] bridge16: entered allmulticast mode [ 118.047195][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.056254][ T9440] bridge17: entered promiscuous mode [ 118.058260][ T9440] bridge17: entered allmulticast mode [ 118.060045][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.066199][ T9440] bridge18: entered promiscuous mode [ 118.070020][ T9440] bridge18: entered allmulticast mode [ 118.071918][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.073348][ T9426] Failed to initialize the IGMP autojoin socket (err -2) [ 118.078597][ T9440] bridge19: entered promiscuous mode [ 118.080329][ T9440] bridge19: entered allmulticast mode [ 118.082141][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.089233][ T9440] bridge20: entered promiscuous mode [ 118.090997][ T9440] bridge20: entered allmulticast mode [ 118.092961][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.102810][ T9440] bridge21: entered promiscuous mode [ 118.104809][ T9440] bridge21: entered allmulticast mode [ 118.106893][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.133101][ T9440] bridge22: entered promiscuous mode [ 118.135159][ T9440] bridge22: entered allmulticast mode [ 118.141941][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.150563][ T9440] bridge23: entered promiscuous mode [ 118.152401][ T9440] bridge23: entered allmulticast mode [ 118.154292][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.180130][ T9440] bridge24: entered promiscuous mode [ 118.182208][ T9440] bridge24: entered allmulticast mode [ 118.184150][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 118.218110][ T9440] bridge25: entered promiscuous mode [ 118.222896][ T9440] bridge25: entered allmulticast mode [ 118.230295][ T9440] bridge26: entered promiscuous mode [ 118.232180][ T9440] bridge26: entered allmulticast mode [ 118.238328][ T9440] bridge27: entered promiscuous mode [ 118.241072][ T9440] bridge27: entered allmulticast mode [ 118.248484][ T9440] bridge28: entered promiscuous mode [ 118.250206][ T9440] bridge28: entered allmulticast mode [ 118.286658][ T9440] bridge29: entered promiscuous mode [ 118.291604][ T9440] bridge29: entered allmulticast mode [ 118.300785][ T9440] bridge30: entered promiscuous mode [ 118.302498][ T9440] bridge30: entered allmulticast mode [ 118.311044][ T9440] bridge31: entered promiscuous mode [ 118.312788][ T9440] bridge31: entered allmulticast mode [ 118.319275][ T9440] bridge32: entered promiscuous mode [ 118.323374][ T9440] bridge32: entered allmulticast mode [ 118.332240][ T9440] bridge33: entered promiscuous mode [ 118.334022][ T9440] bridge33: entered allmulticast mode [ 118.342081][ T9440] bridge34: entered promiscuous mode [ 118.343857][ T9440] bridge34: entered allmulticast mode [ 118.349721][ T9440] bridge35: entered promiscuous mode [ 118.351495][ T9440] bridge35: entered allmulticast mode [ 118.687638][ T4350] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 118.837794][ T4350] usb 8-1: Using ep0 maxpacket: 8 [ 118.844272][ T4350] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 118.850510][ T4350] usb 8-1: config 179 has no interface number 0 [ 118.855299][ T4350] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 118.857795][ T6319] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 118.860040][ T4350] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 118.865614][ T4350] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.869511][ T4350] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 118.873877][ T4350] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 118.878574][ T4350] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 118.881793][ T4350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.895335][ T9479] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.011914][ T6319] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 119.020931][ T6319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.031862][ T6319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.042013][ T6319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.068345][ T6319] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.074319][ T6319] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.079123][ T6319] usb 5-1: Manufacturer: syz [ 119.084940][ T6319] usb 5-1: config 0 descriptor?? [ 119.144248][ T4350] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input14 [ 119.171232][ T9426] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 119.187995][ T9426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.191148][ T9426] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 119.206609][ T9426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.218901][ T9426] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 119.231222][ T9426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.242427][ T9426] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 119.251253][ T9426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.323429][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.326440][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.395106][ T5884] usb 8-1: USB disconnect, device number 6 [ 119.395224][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 119.400125][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 119.498076][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.501052][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.506585][ T6319] usbhid 5-1:0.0: can't add hid device: -71 [ 119.510694][ T6319] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 119.527923][ T6319] usb 5-1: USB disconnect, device number 11 [ 119.708432][ T4350] e1000 0000:00:06.0 eth0: Reset adapter [ 119.787811][ T62] Bluetooth: hci2: command tx timeout [ 119.843260][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 119.843271][ T40] audit: type=1400 audit(2000000026.439:1645): avc: denied { create } for pid=9515 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.855112][ T40] audit: type=1400 audit(2000000026.439:1646): avc: denied { write } for pid=9515 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.862500][ T9426] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 119.862707][ T40] audit: type=1400 audit(2000000026.439:1647): avc: denied { create } for pid=9515 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.868167][ T4350] e1000 0000:00:06.0 eth0: Reset adapter [ 119.882292][ T9426] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 119.983609][ T9426] wireguard: wg0: Could not create IPv4 socket [ 120.000426][ T9518] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 120.003739][ T9518] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 120.016860][ T9518] batman_adv: batadv0: Removing interface: ipvlan2 [ 120.032004][ T9518] batman_adv: batadv0: Removing interface: ipvlan3 [ 120.033060][ T40] audit: type=1400 audit(2000000026.629:1648): avc: denied { create } for pid=9519 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.045872][ T40] audit: type=1400 audit(2000000026.639:1649): avc: denied { setopt } for pid=9519 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.052993][ T40] audit: type=1400 audit(2000000026.639:1650): avc: denied { append } for pid=9521 comm="syz.0.795" name="system" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.084963][ T40] audit: type=1400 audit(2000000026.679:1651): avc: denied { bind } for pid=9519 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.087373][ T9426] wireguard: wg1: Could not create IPv4 socket [ 120.093490][ T40] audit: type=1400 audit(2000000026.689:1652): avc: denied { mounton } for pid=9519 comm="syz.3.794" path="/265/file0" dev="tmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 120.107976][ T40] audit: type=1400 audit(2000000026.699:1653): avc: denied { mount } for pid=9519 comm="syz.3.794" name="/" dev="9p" ino=73687237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 120.109466][ T9426] wireguard: wg2: Could not create IPv4 socket [ 120.119219][ T40] audit: type=1400 audit(2000000026.719:1654): avc: denied { write } for pid=9519 comm="syz.3.794" name="file0" dev="9p" ino=73687299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.028606][ T4350] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 122.403843][ T9543] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 122.513165][ T9553] syzkaller0: entered promiscuous mode [ 122.514927][ T9553] syzkaller0: entered allmulticast mode [ 122.690601][ T9565] validate_nla: 2 callbacks suppressed [ 122.690613][ T9565] netlink: 'syz.3.807': attribute type 2 has an invalid length. [ 122.702136][ T9565] !: entered promiscuous mode [ 122.704113][ T9565] netlink: 'syz.3.807': attribute type 2 has an invalid length. [ 122.706467][ T9565] !: left promiscuous mode [ 123.504320][ T9600] __nla_validate_parse: 15 callbacks suppressed [ 123.504332][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.818'. [ 123.510299][ T9600] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.386233][ T9607] netlink: 68 bytes leftover after parsing attributes in process `syz.0.819'. [ 124.493845][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.502148][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.506819][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.510258][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.516198][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.570650][ T9617] 0x000000000001-0x000000020001 : "" [ 124.577755][ T9617] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffff [ 124.609443][ T9617] ftl_cs: FTL header corrupt! [ 124.792274][ T9615] Failed to initialize the IGMP autojoin socket (err -2) [ 124.859476][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 124.859488][ T40] audit: type=1400 audit(2000000031.459:1750): avc: denied { read } for pid=9639 comm="syz.2.825" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.919757][ T40] audit: type=1400 audit(2000000031.519:1751): avc: denied { create } for pid=9645 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.926725][ T40] audit: type=1400 audit(2000000031.519:1752): avc: denied { bind } for pid=9645 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.939334][ T40] audit: type=1400 audit(2000000031.519:1753): avc: denied { setopt } for pid=9645 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.950382][ T40] audit: type=1400 audit(2000000031.529:1754): avc: denied { accept } for pid=9645 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.963343][ T40] audit: type=1400 audit(2000000031.529:1755): avc: denied { watch } for pid=9639 comm="syz.2.825" path="/244/bus" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.977370][ T40] audit: type=1400 audit(2000000031.529:1756): avc: denied { watch_sb watch_reads } for pid=9639 comm="syz.2.825" path="/244/bus" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.987627][ T40] audit: type=1400 audit(2000000031.529:1757): avc: denied { write } for pid=9645 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.994659][ T40] audit: type=1400 audit(2000000031.539:1758): avc: denied { read } for pid=9645 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.000816][ T40] audit: type=1400 audit(2000000031.549:1759): avc: denied { read write } for pid=9639 comm="syz.2.825" name="v4l-subdev4" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.260131][ T9651] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 125.272575][ T9651] overlayfs: failed to set xattr on upper [ 125.274367][ T9651] overlayfs: ...falling back to redirect_dir=nofollow. [ 125.280488][ T9651] overlayfs: ...falling back to metacopy=off. [ 125.284853][ T9651] overlayfs: ...falling back to index=off. [ 125.286733][ T9651] overlayfs: ...falling back to uuid=null. [ 125.333590][ T9652] SELinux: syz.3.827 (9652) wrote to checkreqprot. This is no longer supported. [ 125.484775][ T9654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 125.794412][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=9667 comm=syz.2.833 [ 125.801855][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9667 comm=syz.2.833 [ 125.807039][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=9667 comm=syz.2.833 [ 125.814427][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9667 comm=syz.2.833 [ 125.823615][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9667 comm=syz.2.833 [ 125.828226][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=9667 comm=syz.2.833 [ 125.832147][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9667 comm=syz.2.833 [ 125.881741][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 125.884650][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 125.917483][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 125.920987][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 125.924697][ T9684] tipc: Enabling of bearer rejected, failed to enable media [ 126.015088][ T9688] bond6: option primary: mode dependency failed, not supported in mode broadcast(3) [ 126.025012][ T9688] bond6 (unregistering): Released all slaves [ 126.118554][ T9696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.840'. [ 126.129627][ T9696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.840'. [ 126.227816][ T9700] netlink: 'syz.0.840': attribute type 13 has an invalid length. [ 126.230899][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 126.343546][ T9695] kvm: kvm [9692]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 126.346774][ T9695] kvm: kvm [9692]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 126.476916][ T9695] kvm_intel: kvm [9692]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 126.491805][ T9695] kvm: kvm [9692]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 126.494743][ T9695] kvm: kvm [9692]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 126.542879][ T9615] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 126.554336][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.559765][ T9615] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 126.569755][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.572550][ T9615] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 126.578609][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.584838][ T9615] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 126.589294][ T5747] Bluetooth: hci2: command tx timeout [ 126.590808][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.706976][ T9716] input: syz1 as /devices/virtual/input/input16 [ 126.709065][ T9715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.845'. [ 126.763336][ T9720] /dev/sg0: Can't lookup blockdev [ 126.765719][ T9720] tmpfs: Unknown parameter '' [ 126.884335][ T9740] cgroup2: Unknown parameter 'memory_hugetlb_accountinz' [ 126.909713][ T5884] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.050596][ T9615] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 127.066102][ T9615] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 127.073820][ T5884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.078899][ T9615] wireguard: wg0: Could not create IPv4 socket [ 127.084344][ T5884] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 127.085423][ T9615] wireguard: wg1: Could not create IPv4 socket [ 127.094548][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.094733][ T9615] wireguard: wg2: Could not create IPv4 socket [ 127.097480][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.102490][ T5884] usb 5-1: Product: syz [ 127.103796][ T5884] usb 5-1: Manufacturer: syz [ 127.105108][ T5884] usb 5-1: SerialNumber: syz [ 127.114736][ T5884] cdc_mbim 5-1:1.0: skipping garbage [ 127.194067][ T9760] block device autoloading is deprecated and will be removed. [ 127.313795][ T9710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.323344][ T9767] netlink: 'syz.3.855': attribute type 7 has an invalid length. [ 127.327477][ T9767] netlink: 'syz.3.855': attribute type 13 has an invalid length. [ 127.330686][ T9767] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9767 comm=syz.3.855 [ 127.464294][ T9777] Failed to initialize the IGMP autojoin socket (err -2) [ 127.789720][ T9784] block nbd2: NBD_DISCONNECT [ 127.833848][ T9787] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 127.836549][ T9787] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 127.841332][ T9787] cramfs: wrong magic [ 127.918204][ T9710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.922431][ T5884] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 127.931221][ T5884] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 127.939717][ T5884] wwan wwan0: port wwan0mbim0 attached [ 127.952238][ T5884] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 4e:d0:ff:5d:41:65 [ 127.995107][ T9791] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 128.006959][ T9791] CIFS mount error: No usable UNC path provided in device string! [ 128.006959][ T9791] [ 128.012319][ T9791] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 128.123364][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.125621][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.128210][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.131024][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.133897][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.136028][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.138188][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.140317][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.142528][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.145040][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.147450][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.149757][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.152000][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.154127][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.156399][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.158832][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.161494][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.164255][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.167133][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 128.169795][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 128.434239][ T9802] binder: 9801:9802 ioctl c0306201 200000000080 returned -14 [ 128.698817][ T9815] binder: 9801:9815 ioctl 330f 8000000000000001 returned -22 [ 128.706982][ T9815] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.721543][ T9802] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 129.052441][ T9844] __nla_validate_parse: 5 callbacks suppressed [ 129.052458][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 129.086682][ T9844] hfs: unable to load iocharset "io#harset" [ 129.248081][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.883'. [ 129.292184][ T9852] netlink: 27 bytes leftover after parsing attributes in process `syz.2.886'. [ 129.336667][ T9856] SELinux: policydb version 2093453060 does not match my version range 15-35 [ 129.344769][ T9856] SELinux: failed to load policy [ 129.497725][ T5815] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 129.557235][ T9863] netlink: 'syz.2.889': attribute type 11 has an invalid length. [ 129.560346][ T9863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.889'. [ 129.631516][ T9871] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present [ 129.652079][ T9710] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 129.672196][ T5829] usb 5-1: USB disconnect, device number 12 [ 129.683333][ T5829] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 129.808157][ T9881] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.812133][ T9881] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 129.815030][ T9881] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.819363][ T9881] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 129.869920][ T5829] wwan wwan0: port wwan0mbim0 disconnected [ 129.910312][ T40] kauditd_printk_skb: 277 callbacks suppressed [ 129.910326][ T40] audit: type=1400 audit(2000000036.509:2037): avc: denied { block_suspend } for pid=9882 comm="syz.0.895" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.485266][ T40] audit: type=1400 audit(2000000037.079:2038): avc: denied { read } for pid=9885 comm="syz.0.896" name="event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 130.497613][ T40] audit: type=1400 audit(2000000037.079:2039): avc: denied { open } for pid=9885 comm="syz.0.896" path="/dev/input/event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 130.504769][ T40] audit: type=1400 audit(2000000037.089:2040): avc: denied { ioctl } for pid=9885 comm="syz.0.896" path="/dev/input/event0" dev="devtmpfs" ino=942 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 130.542379][ T40] audit: type=1400 audit(2000000037.139:2041): avc: denied { create } for pid=9888 comm="syz.0.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.554127][ T40] audit: type=1400 audit(2000000037.139:2042): avc: denied { create } for pid=9888 comm="syz.0.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.562696][ T40] audit: type=1400 audit(2000000037.149:2043): avc: denied { create } for pid=9889 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 130.573489][ T40] audit: type=1400 audit(2000000037.149:2044): avc: denied { setopt } for pid=9889 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 130.596872][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.901'. [ 130.600276][ T40] audit: type=1400 audit(2000000037.199:2045): avc: denied { create } for pid=9893 comm="syz.3.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.615288][ T40] audit: type=1400 audit(2000000037.199:2046): avc: denied { setopt } for pid=9893 comm="syz.3.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.541507][ T9914] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 131.546735][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.905'. [ 131.600759][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.610049][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.616847][ T9918] erspan0: entered promiscuous mode [ 131.618551][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.622092][ T9911] tun0: tun_chr_ioctl cmd 1074025675 [ 131.625206][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.626880][ T9911] tun0: persist enabled [ 131.629193][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.638592][ T9911] tun0: tun_chr_ioctl cmd 1074025675 [ 131.640373][ T9911] tun0: persist enabled [ 131.666562][ T9925] 9pnet_fd: p9_fd_create_tcp (9925): problem creating socket [ 131.799245][ T9936] program syz.2.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.887117][ T9916] Failed to initialize the IGMP autojoin socket (err -2) [ 132.169806][ T9963] overlayfs: failed to resolve './file1': -2 [ 132.295893][ T9967] overlayfs: maximum fs stacking depth exceeded [ 132.299796][ T9967] overlayfs: maximum fs stacking depth exceeded [ 132.684785][ T9916] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 132.693619][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.697355][ T9916] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 132.718766][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.722580][ T9916] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 132.731515][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.737973][ T9916] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 132.750339][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.236739][ T9916] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 133.248323][ T4350] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 133.252671][ T9916] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 133.261516][ T9916] wireguard: wg0: Could not create IPv4 socket [ 133.266206][ T9916] wireguard: wg1: Could not create IPv4 socket [ 133.271231][ T9916] wireguard: wg2: Could not create IPv4 socket [ 133.349510][ T5747] Bluetooth: hci3: unexpected event for opcode 0x202f [ 133.412960][ T4350] usb 7-1: Using ep0 maxpacket: 8 [ 133.416207][ T4350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.421023][ T4350] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.423869][ T4350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.428342][ T4350] usb 7-1: config 0 descriptor?? [ 133.587929][ T5884] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 133.645222][ T4350] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 133.748871][ T5884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.752758][ T5884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.756232][ T5884] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 133.761435][ T5884] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 133.765168][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.772066][ T9998] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 133.778520][ T5884] hub 8-1:1.0: bad descriptor, ignoring hub [ 133.785729][ T5884] hub 8-1:1.0: probe with driver hub failed with error -5 [ 133.791752][ T5884] cdc_wdm 8-1:1.0: skipping garbage [ 133.795811][ T5884] cdc_wdm 8-1:1.0: skipping garbage [ 133.810843][ T5884] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 133.813543][ T5884] cdc_wdm 8-1:1.0: Unknown control protocol [ 133.856526][T10027] Failed to initialize the IGMP autojoin socket (err -2) [ 134.060013][ T1489] usb 7-1: USB disconnect, device number 13 [ 134.289789][ T5884] usb 8-1: USB disconnect, device number 7 [ 134.855560][T10041] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 134.900808][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.938'. [ 134.903793][T10046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.938'. [ 134.911097][T10046] netlink: 112 bytes leftover after parsing attributes in process `syz.3.938'. [ 134.953982][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 134.953998][ T40] audit: type=1400 audit(2000000041.549:2174): avc: denied { bpf } for pid=10047 comm="syz.3.939" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.965747][ T40] audit: type=1400 audit(2000000041.559:2175): avc: denied { perfmon } for pid=10047 comm="syz.3.939" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.000147][ T40] audit: type=1400 audit(2000000041.599:2176): avc: denied { create } for pid=10051 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.006994][ T40] audit: type=1400 audit(2000000041.599:2177): avc: denied { bind } for pid=10051 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.013043][ T40] audit: type=1400 audit(2000000041.599:2178): avc: denied { setopt } for pid=10051 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.019220][ T40] audit: type=1400 audit(2000000041.599:2179): avc: denied { accept } for pid=10051 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.031887][ T40] audit: type=1400 audit(2000000041.599:2180): avc: denied { read } for pid=10051 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.035256][T10055] netlink: 68 bytes leftover after parsing attributes in process `syz.3.941'. [ 135.043225][T10055] program syz.3.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.043355][ T40] audit: type=1400 audit(2000000041.599:2181): avc: denied { write } for pid=10051 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.051944][ T40] audit: type=1400 audit(2000000041.629:2182): avc: denied { create } for pid=10054 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.058626][ T40] audit: type=1400 audit(2000000041.629:2183): avc: denied { write } for pid=10054 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.577009][T10080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.949'. [ 135.630922][T10088] overlay: filesystem on ./file0 not supported as upperdir [ 135.635100][T10088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10088 comm=syz.0.951 [ 135.687676][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 135.715183][T10088] tmpfs: User quota block hardlimit too large. [ 135.734701][T10088] bond2: entered promiscuous mode [ 135.736796][T10088] bond2: entered allmulticast mode [ 136.167618][ T845] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 136.167960][ T487] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x26 [ 136.174580][T10112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.317639][ T845] usb 8-1: Using ep0 maxpacket: 16 [ 136.320915][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.324551][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.328392][ T845] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.332478][ T845] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.335310][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.339915][ T845] usb 8-1: config 0 descriptor?? [ 136.346629][T10125] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 136.350420][T10125] netlink: 272 bytes leftover after parsing attributes in process `syz.0.963'. [ 136.408670][T10127] binder: 10126:10127 ioctl 5422 0 returned -22 [ 136.459496][T10129] nbd: couldn't find a device at index -2146435068 [ 136.733232][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 136.816974][ T845] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 136.821420][ T845] microsoft 0003:045E:07DA.0005: report_id 1499479632 is invalid [ 136.824576][ T845] microsoft 0003:045E:07DA.0005: item 0 4 1 8 parsing failed [ 136.828489][ T845] microsoft 0003:045E:07DA.0005: parse failed [ 136.831131][ T845] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 137.031447][ T845] usb 8-1: USB disconnect, device number 8 [ 137.743542][T10142] loop5: detected capacity change from 0 to 7 [ 137.753018][T10142] Dev loop5: unable to read RDB block 7 [ 137.756924][T10142] loop5: AHDI p1 p2 p4 [ 137.758573][T10142] loop5: partition table partially beyond EOD, truncated [ 137.761152][T10142] loop5: p1 size 262144 extends beyond EOD, truncated [ 137.788883][ T5743] Bluetooth: hci2: command 0x1003 tx timeout [ 137.788918][ T5747] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 137.794640][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.805339][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.812632][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.818118][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.826060][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.876397][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.902979][T10147] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 137.909411][T10147] netlink: 96 bytes leftover after parsing attributes in process `syz.2.970'. [ 137.913379][T10147] netlink: 658 bytes leftover after parsing attributes in process `syz.2.970'. [ 138.067054][T10169] netlink: 'syz.2.975': attribute type 39 has an invalid length. [ 138.157067][T10143] Failed to initialize the IGMP autojoin socket (err -2) [ 138.342230][T10184] team0 (unregistering): Port device team_slave_0 removed [ 138.351401][T10184] team0 (unregistering): Port device team_slave_1 removed [ 138.471182][T10195] fuse: Unknown parameter '·#©0x000000000000000800000000000000000000005000000000000000000000000000000000000000000000000000000000000000' [ 139.095311][T10143] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 139.106992][T10143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.115141][T10143] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 139.126227][T10143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.131496][T10143] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 139.139046][T10143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.143079][T10143] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 139.155515][T10143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.546250][T10232] bond3 (unregistering): Released all slaves [ 139.621009][T10143] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 139.629002][T10143] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 139.636762][T10143] wireguard: wg0: Could not create IPv4 socket [ 139.645335][T10143] wireguard: wg1: Could not create IPv4 socket [ 139.649246][T10143] wireguard: wg2: Could not create IPv4 socket [ 139.973333][ T40] kauditd_printk_skb: 167 callbacks suppressed [ 139.973346][ T40] audit: type=1400 audit(2000000046.569:2351): avc: denied { ioctl } for pid=10251 comm="syz.0.992" path="socket:[33720]" dev="sockfs" ino=33720 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.036703][ T40] audit: type=1400 audit(2000000046.629:2352): avc: denied { map } for pid=10251 comm="syz.0.992" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.048488][ T40] audit: type=1400 audit(2000000046.629:2353): avc: denied { read write } for pid=10251 comm="syz.0.992" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.089024][ T40] audit: type=1400 audit(2000000046.689:2354): avc: denied { read } for pid=10251 comm="syz.0.992" dev="nsfs" ino=4026533309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 140.097915][T10255] netlink: 'syz.0.992': attribute type 10 has an invalid length. [ 140.100858][T10255] __nla_validate_parse: 5 callbacks suppressed [ 140.100868][T10255] netlink: 224 bytes leftover after parsing attributes in process `syz.0.992'. [ 140.106894][ T40] audit: type=1400 audit(2000000046.689:2355): avc: denied { open } for pid=10251 comm="syz.0.992" path="net:[4026533309]" dev="nsfs" ino=4026533309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 140.136569][ T40] audit: type=1400 audit(2000000046.729:2356): avc: denied { map } for pid=10256 comm="syz.3.993" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.147731][ T40] audit: type=1400 audit(2000000046.739:2357): avc: denied { mount } for pid=10256 comm="syz.3.993" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.172718][ T40] audit: type=1400 audit(2000000046.769:2358): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.210549][ T40] audit: type=1400 audit(2000000046.809:2359): avc: denied { read } for pid=10258 comm="syz.2.995" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.227274][ T40] audit: type=1400 audit(2000000046.809:2360): avc: denied { read } for pid=10258 comm="syz.2.995" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.238080][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'. [ 140.257266][T10260] binder: 10258:10260 ioctl c0306201 2000000001c0 returned -14 [ 140.284990][T10264] overlayfs: failed to resolve './file0': -2 [ 140.517611][ T4350] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 140.669565][ T4350] usb 7-1: config 0 has no interfaces? [ 140.673791][ T4350] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.679464][ T4350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.696596][ T4350] usb 7-1: config 0 descriptor?? [ 141.135103][T10297] overlayfs: failed to resolve './file0': -2 [ 141.288128][ T4350] usb 7-1: USB disconnect, device number 14 [ 141.318508][T10303] overlayfs: failed to resolve './file0': -2 [ 141.357044][T10306] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1009'. [ 141.360979][T10306] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1009'. [ 141.807988][ T60] Bluetooth: hci2: Frame reassembly failed (-84) [ 141.889498][T10325] netlink: 'syz.3.1014': attribute type 58 has an invalid length. [ 142.065693][T10331] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 142.211830][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 142.226064][T10337] macsec1: entered promiscuous mode [ 142.228461][T10339] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1020'. [ 142.228512][T10337] macsec1: entered allmulticast mode [ 142.309680][T10344] kvm: emulating exchange as write [ 142.784959][T10380] netlink: 'syz.0.1033': attribute type 12 has an invalid length. [ 142.788465][T10380] comedi comedi3: comedi_config --init_data is deprecated [ 142.791844][T10380] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1033'. [ 143.137618][ T1489] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 143.291007][ T1489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.294702][ T1489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.298537][ T1489] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 143.301807][ T1489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.307276][ T1489] usb 5-1: config 0 descriptor?? [ 143.351338][T10395] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 143.364748][T10395] bond6: entered promiscuous mode [ 143.366493][T10395] 8021q: adding VLAN 0 to HW filter on device bond6 [ 143.371282][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 143.374234][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 143.395895][T10396] bond6: (slave bridge2): making interface the new active one [ 143.398542][T10396] bridge2: entered promiscuous mode [ 143.402419][T10396] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 143.419057][T10395] bond6: (slave bridge3): Enslaving as a backup interface with an up link [ 143.580393][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033fce800: rx timeout, send abort [ 143.583087][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033fce800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 143.745413][ T1489] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 143.867611][ T5884] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 143.867665][ T5750] Bluetooth: hci2: command 0x1003 tx timeout [ 143.872932][ T62] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 144.020820][ T5884] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 144.025135][ T5884] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 144.037570][ T5884] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.041336][ T5884] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.044301][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.046977][ T5884] usb 8-1: Product: syz [ 144.048907][ T5884] usb 8-1: Manufacturer: syz [ 144.050485][ T5884] usb 8-1: SerialNumber: syz [ 144.055550][ T5884] usb 8-1: config 0 descriptor?? [ 144.062380][ T5884] hub 8-1:0.0: bad descriptor, ignoring hub [ 144.064576][ T5884] hub 8-1:0.0: probe with driver hub failed with error -5 [ 144.068423][ T5829] usb 5-1: USB disconnect, device number 13 [ 144.068897][ T5884] usb 8-1: selecting invalid altsetting 0 [ 144.920906][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.928335][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.928452][T10421] loop2: detected capacity change from 0 to 7 [ 144.933047][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.937712][T10421] Dev loop2: unable to read RDB block 7 [ 144.939588][T10421] loop2: AHDI p1 p2 p3 [ 144.939607][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.940915][T10421] loop2: partition table partially beyond EOD, truncated [ 144.945856][T10421] loop2: p1 start 1601398130 is beyond EOD, truncated [ 144.948080][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.950311][T10421] loop2: p2 start 1702059890 is beyond EOD, truncated [ 145.044220][ T40] kauditd_printk_skb: 195 callbacks suppressed [ 145.044238][ T40] audit: type=1400 audit(2000000051.639:2556): avc: denied { create } for pid=10435 comm="syz.2.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.101884][ T40] audit: type=1400 audit(2000000051.699:2557): avc: denied { create } for pid=10440 comm="syz.2.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.118388][ T40] audit: type=1400 audit(2000000051.709:2558): avc: denied { bind } for pid=10440 comm="syz.2.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.130392][ T5884] usb 8-1: USB disconnect, device number 9 [ 145.141840][ T40] audit: type=1400 audit(2000000051.709:2559): avc: denied { write } for pid=10440 comm="syz.2.1048" path="socket:[37293]" dev="sockfs" ino=37293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.183497][T10422] Failed to initialize the IGMP autojoin socket (err -2) [ 145.198266][ T40] audit: type=1400 audit(2000000051.799:2560): avc: denied { create } for pid=10453 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.209766][ T40] audit: type=1400 audit(2000000051.809:2561): avc: denied { write } for pid=10453 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.217871][ T40] audit: type=1400 audit(2000000051.809:2562): avc: denied { read } for pid=10453 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.263453][ T40] audit: type=1326 audit(2000000051.859:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10455 comm="syz.2.1052" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f486699ce59 code=0x0 [ 145.274323][ T40] audit: type=1400 audit(2000000051.869:2564): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 145.282097][ T40] audit: type=1400 audit(2000000051.879:2565): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 145.557786][ T5829] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 145.709036][ T5829] usb 7-1: config 0 has no interfaces? [ 145.710872][ T5829] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.717553][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.725419][ T5829] usb 7-1: config 0 descriptor?? [ 145.923487][T10493] loop9: detected capacity change from 0 to 524287871 [ 146.061124][T10422] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 146.067468][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 146.082748][T10422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.088008][T10422] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 146.096254][T10422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.109581][T10422] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 146.119428][T10422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.123393][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 146.130099][T10422] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 146.141432][T10422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.169818][T10504] openvswitch: netlink: Duplicate or invalid key (type 0). [ 146.172774][T10504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.207564][T10504] netlink: 'syz.0.1065': attribute type 3 has an invalid length. [ 146.266287][T10508] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 146.303703][T10517] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 146.308953][T10508] XFS (nbd3): SB validate failed with error -5. [ 146.310192][T10517] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 146.338363][ T62] Bluetooth: hci3: unexpected event for opcode 0x041c [ 146.669960][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 146.725268][T10422] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 146.734776][T10422] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 146.743898][T10422] wireguard: wg0: Could not create IPv4 socket [ 146.749136][T10422] wireguard: wg1: Could not create IPv4 socket [ 146.769920][T10422] wireguard: wg2: Could not create IPv4 socket [ 146.810678][T10550] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1073'. [ 147.337367][T10571] syz_tun: entered promiscuous mode [ 147.340595][T10576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.948370][T10581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10581 comm=syz.3.1083 [ 147.952487][T10581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10581 comm=syz.3.1083 [ 147.960523][T10581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=10581 comm=syz.3.1083 [ 148.091291][T10589] nft_compat: unsupported protocol 0 [ 148.290670][ T58] usb 7-1: USB disconnect, device number 15 [ 148.544644][T10614] afs: Unknown parameter 'dynv/kvm' [ 148.553981][T10614] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 149.082870][ T58] bridge0: entered promiscuous mode [ 149.177375][T10641] netlink: 'syz.3.1100': attribute type 17 has an invalid length. [ 149.268281][T10647] openvswitch: netlink: IP tunnel dst address not specified [ 149.308762][T10649] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1103'. [ 150.350571][ T5747] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 150.355693][ T5747] Bluetooth: hci3: Injecting HCI hardware error event [ 150.361486][ T5743] Bluetooth: hci3: hardware error 0x00 [ 150.437874][ T62] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 150.458829][ T40] kauditd_printk_skb: 170 callbacks suppressed [ 150.458841][ T40] audit: type=1400 audit(2000000057.059:2736): avc: denied { create } for pid=10661 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.476899][ T40] audit: type=1400 audit(2000000057.069:2737): avc: denied { write } for pid=10661 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.529917][ T40] audit: type=1400 audit(2000000057.129:2738): avc: denied { create } for pid=10663 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 150.539945][ T40] audit: type=1400 audit(2000000057.139:2739): avc: denied { map_read map_write } for pid=10663 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 150.580345][ T40] audit: type=1400 audit(2000000057.179:2740): avc: denied { mount } for pid=10669 comm="syz.2.1110" name="/" dev="configfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 150.596770][ T40] audit: type=1400 audit(2000000057.189:2741): avc: denied { read write } for pid=10669 comm="syz.2.1110" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.611582][ T40] audit: type=1400 audit(2000000057.189:2742): avc: denied { open } for pid=10669 comm="syz.2.1110" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.620559][ T40] audit: type=1400 audit(2000000057.189:2743): avc: denied { ioctl } for pid=10669 comm="syz.2.1110" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.630256][ T40] audit: type=1400 audit(2000000057.209:2744): avc: denied { read write } for pid=10672 comm="syz.0.1111" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 150.640841][ T40] audit: type=1400 audit(2000000057.209:2745): avc: denied { open } for pid=10672 comm="syz.0.1111" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 151.227678][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 151.886015][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.893693][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.903507][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.913184][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.916746][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.970945][T10693] comedi comedi3: comedi_config --init_data is deprecated [ 151.974196][T10694] comedi comedi3: comedi_config --init_data is deprecated [ 151.980498][T10693] ksmbd: Unknown IPC event: 1, ignore. [ 151.991411][T10697] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 152.049392][T10704] netlink: 'syz.3.1120': attribute type 1 has an invalid length. [ 152.070296][T10704] 8021q: adding VLAN 0 to HW filter on device bond7 [ 152.110864][T10704] bond7: (slave veth11): Enslaving as an active interface with a down link [ 152.138726][T10708] bond3: Unable to set down delay as MII monitoring is disabled [ 152.147371][T10708] bond3 (unregistering): Released all slaves [ 152.175289][T10713] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1121'. [ 152.205471][T10685] Failed to initialize the IGMP autojoin socket (err -2) [ 152.209418][T10715] /dev/sg0: Can't lookup blockdev [ 152.444115][ T5743] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 152.749476][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'. [ 152.794539][T10763] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1135'. [ 152.827899][T10754] macvlan0: entered promiscuous mode [ 152.864652][T10771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1137'. [ 152.880598][T10771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1137'. [ 153.152078][T10793] binder: 10791:10793 ioctl c0306201 2000000001c0 returned -14 [ 153.156190][T10793] rdma_rxe: Failed to create IPv4 UDP tunnel [ 153.340382][T10685] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 153.354990][T10685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.359629][T10685] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 153.381274][T10685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.386915][T10685] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 153.393349][T10685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.402392][T10685] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 153.415984][T10685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.948127][ T5743] Bluetooth: hci2: command tx timeout [ 154.031830][T10685] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 154.044638][T10685] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 154.055284][T10685] wireguard: wg0: Could not create IPv4 socket [ 154.060546][T10685] wireguard: wg1: Could not create IPv4 socket [ 154.066465][T10685] wireguard: wg2: Could not create IPv4 socket [ 154.217605][T10834] ================================================================== [ 154.220590][T10834] BUG: KASAN: slab-use-after-free in kobject_get+0x136/0x150 [ 154.223739][T10834] Read of size 1 at addr ffff88806195cd1c by task syz.0.1153/10834 [ 154.227278][T10834] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.228767][T10834] CPU: 2 UID: 0 PID: 10834 Comm: syz.0.1153 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.228786][T10834] Tainted: [L]=SOFTLOCKUP [ 154.228791][T10834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.228798][T10834] Call Trace: [ 154.228802][T10834] [ 154.228807][T10834] dump_stack_lvl+0x100/0x190 [ 154.228825][T10834] print_report+0x13d/0x4b0 [ 154.228843][T10834] ? __virt_addr_valid+0x239/0x430 [ 154.228857][T10834] ? kobject_get+0x136/0x150 [ 154.228874][T10834] kasan_report+0xdf/0x1d0 [ 154.228887][T10834] ? kobject_get+0x136/0x150 [ 154.228904][T10834] kobject_get+0x136/0x150 [ 154.228920][T10834] device_add+0x19f/0x1950 [ 154.228948][T10834] ? __pfx_dev_set_name+0x10/0x10 [ 154.228960][T10834] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.228974][T10834] ? __pfx_device_add+0x10/0x10 [ 154.228992][T10834] ? lockdep_init_map_type+0x5c/0x250 [ 154.229007][T10834] ? __init_waitqueue_head+0xca/0x150 [ 154.229027][T10834] netdev_register_kobject+0x1a9/0x3d0 [ 154.229041][T10834] register_netdevice+0x151c/0x24b0 [ 154.229053][T10834] ? __pfx_register_netdevice+0x10/0x10 [ 154.229065][T10834] register_netdev+0x34/0x50 [ 154.229074][T10834] bnep_add_connection+0x723/0xd30 [ 154.229086][T10834] ? __pfx_bnep_add_connection+0x10/0x10 [ 154.229096][T10834] ? __fget_files+0x21f/0x3d0 [ 154.229111][T10834] do_bnep_sock_ioctl.isra.0+0x3ac/0x5b0 [ 154.229123][T10834] ? __pfx_do_bnep_sock_ioctl.isra.0+0x10/0x10 [ 154.229135][T10834] ? find_held_lock+0x2b/0x80 [ 154.229147][T10834] ? futex_wake+0x1ad/0x530 [ 154.229157][T10834] sock_do_ioctl+0x118/0x280 [ 154.229169][T10834] ? __pfx_sock_do_ioctl+0x10/0x10 [ 154.229182][T10834] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 154.229193][T10834] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.229211][T10834] sock_ioctl+0x599/0x6b0 [ 154.229224][T10834] ? __pfx_sock_ioctl+0x10/0x10 [ 154.229236][T10834] ? hook_file_ioctl_common+0x149/0x410 [ 154.229249][T10834] ? selinux_file_ioctl+0x13b/0x290 [ 154.229264][T10834] ? selinux_file_ioctl+0xb6/0x290 [ 154.229280][T10834] ? __pfx_sock_ioctl+0x10/0x10 [ 154.229292][T10834] __x64_sys_ioctl+0x18e/0x210 [ 154.229303][T10834] do_syscall_64+0x115/0x870 [ 154.229316][T10834] ? clear_bhb_loop+0x40/0x90 [ 154.229329][T10834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.229340][T10834] RIP: 0033:0x7f1812d9ce59 [ 154.229349][T10834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.229360][T10834] RSP: 002b:00007f1813bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.229371][T10834] RAX: ffffffffffffffda RBX: 00007f1813015fa0 RCX: 00007f1812d9ce59 [ 154.229378][T10834] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 0000000000000005 [ 154.229384][T10834] RBP: 00007f1812e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 154.229391][T10834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.229397][T10834] R13: 00007f1813016038 R14: 00007f1813015fa0 R15: 00007fff0c06a388 [ 154.229408][T10834] [ 154.229411][T10834] [ 154.328997][T10834] Allocated by task 5750: [ 154.331024][T10834] kasan_save_stack+0x30/0x50 [ 154.333147][T10834] kasan_save_track+0x14/0x30 [ 154.335223][T10834] __kasan_kmalloc+0xaa/0xb0 [ 154.337253][T10834] __hci_conn_add+0x1f4/0x1da0 [ 154.339332][T10834] hci_conn_add_unset+0x76/0x120 [ 154.341458][T10834] hci_conn_request_evt+0xa58/0xbb0 [ 154.343711][T10834] hci_event_packet+0x8e9/0xcd0 [ 154.345767][T10834] hci_rx_work+0x451/0xfc0 [ 154.347755][T10834] process_one_work+0xa0e/0x1980 [ 154.349938][T10834] worker_thread+0x5ef/0xe50 [ 154.351978][T10834] kthread+0x370/0x450 [ 154.353785][T10834] ret_from_fork+0x72b/0xd50 [ 154.355817][T10834] ret_from_fork_asm+0x1a/0x30 [ 154.358119][T10834] [ 154.359247][T10834] Freed by task 10685: [ 154.361044][T10834] kasan_save_stack+0x30/0x50 [ 154.363139][T10834] kasan_save_track+0x14/0x30 [ 154.365165][T10834] kasan_save_free_info+0x3b/0x70 [ 154.367344][T10834] __kasan_slab_free+0x5f/0x80 [ 154.369437][T10834] kfree+0x223/0x6c0 [ 154.371167][T10834] device_release+0xd2/0x270 [ 154.373276][T10834] kobject_put+0x1f7/0x640 [ 154.375455][T10834] device_unregister+0x2f/0xe0 [ 154.377963][T10834] hci_conn_del_sysfs+0xb9/0x1a0 [ 154.380159][T10834] hci_conn_del+0x506/0x1180 [ 154.382164][T10834] hci_conn_hash_flush+0x186/0x280 [ 154.384350][T10834] hci_dev_close_sync+0x5cf/0x13c0 [ 154.386449][T10834] hci_dev_do_close+0x2e/0xb0 [ 154.388312][T10834] hci_unregister_dev+0x227/0x670 [ 154.389888][T10834] vhci_release+0x17d/0x230 [ 154.391311][T10834] __fput+0x3ff/0xb50 [ 154.392736][T10834] task_work_run+0x150/0x240 [ 154.394198][T10834] do_exit+0x951/0x2af0 [ 154.395508][T10834] do_group_exit+0xd5/0x2a0 [ 154.396914][T10834] __x64_sys_exit_group+0x3e/0x50 [ 154.398613][T10834] x64_sys_call+0x102c/0x1530 [ 154.400147][T10834] do_syscall_64+0x115/0x870 [ 154.401739][T10834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.403758][T10834] [ 154.404585][T10834] Last potentially related work creation: [ 154.406565][T10834] kasan_save_stack+0x30/0x50 [ 154.408069][T10834] kasan_record_aux_stack+0xa7/0xc0 [ 154.409673][T10834] insert_work+0x36/0x230 [ 154.411012][T10834] __queue_work+0x9a2/0x1270 [ 154.412490][T10834] __queue_delayed_work+0x357/0x450 [ 154.414104][T10834] queue_delayed_work_on+0x180/0x1e0 [ 154.415789][T10834] l2cap_chan_del+0x649/0x930 [ 154.417347][T10834] l2cap_conn_del+0x395/0x710 [ 154.419011][T10834] l2cap_disconn_cfm+0x9f/0x100 [ 154.420618][T10834] hci_conn_hash_flush+0x10e/0x280 [ 154.422207][T10834] hci_dev_close_sync+0x5cf/0x13c0 [ 154.423861][T10834] hci_dev_do_close+0x2e/0xb0 [ 154.425371][T10834] hci_unregister_dev+0x227/0x670 [ 154.426973][T10834] vhci_release+0x17d/0x230 [ 154.428454][T10834] __fput+0x3ff/0xb50 [ 154.429731][T10834] task_work_run+0x150/0x240 [ 154.431352][T10834] do_exit+0x951/0x2af0 [ 154.432977][T10834] do_group_exit+0xd5/0x2a0 [ 154.434963][T10834] __x64_sys_exit_group+0x3e/0x50 [ 154.437113][T10834] x64_sys_call+0x102c/0x1530 [ 154.438689][T10834] do_syscall_64+0x115/0x870 [ 154.440176][T10834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.441981][T10834] [ 154.442730][T10834] The buggy address belongs to the object at ffff88806195c000 [ 154.442730][T10834] which belongs to the cache kmalloc-8k of size 8192 [ 154.447140][T10834] The buggy address is located 3356 bytes inside of [ 154.447140][T10834] freed 8192-byte region [ffff88806195c000, ffff88806195e000) [ 154.451591][T10834] [ 154.452439][T10834] The buggy address belongs to the physical page: [ 154.454527][T10834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61958 [ 154.457274][T10834] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 154.460323][T10834] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 154.463303][T10834] page_type: f5(slab) [ 154.464726][T10834] raw: 00fff00000000040 ffff88801b843180 dead000000000100 dead000000000122 [ 154.467669][T10834] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 154.470498][T10834] head: 00fff00000000040 ffff88801b843180 dead000000000100 dead000000000122 [ 154.473324][T10834] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 154.476007][T10834] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 154.478667][T10834] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 154.481301][T10834] page dumped because: kasan: bad access detected [ 154.483671][T10834] page_owner tracks the page as allocated [ 154.485858][T10834] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7332, tgid 7332 (syz-executor), ts 89209836633, free_ts 89188109028 [ 154.492475][T10834] post_alloc_hook+0xfd/0x120 [ 154.493932][T10834] get_page_from_freelist+0x11a6/0x3410 [ 154.495690][T10834] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 154.497620][T10834] new_slab+0xa6/0x6c0 [ 154.499105][T10834] refill_objects+0x277/0x420 [ 154.500687][T10834] __pcs_replace_empty_main+0x375/0x650 [ 154.502430][T10834] __kmalloc_cache_noprof+0x493/0x6f0 [ 154.504099][T10834] macvlan_common_newlink+0x476/0x18b0 [ 154.505771][T10834] rtnl_newlink+0x1499/0x2380 [ 154.507307][T10834] rtnetlink_rcv_msg+0x95e/0xe90 [ 154.508829][T10834] netlink_rcv_skb+0x159/0x420 [ 154.510303][T10834] netlink_unicast+0x585/0x850 [ 154.511840][T10834] netlink_sendmsg+0x8b0/0xda0 [ 154.513758][T10834] __sys_sendto+0x468/0x4b0 [ 154.515603][T10834] __x64_sys_sendto+0xe0/0x1c0 [ 154.517435][T10834] do_syscall_64+0x115/0x870 [ 154.518986][T10834] page last free pid 7332 tgid 7332 stack trace: [ 154.521107][T10834] __free_frozen_pages+0x794/0x10a0 [ 154.522776][T10834] qlist_free_all+0x47/0xf0 [ 154.524193][T10834] kasan_quarantine_reduce+0x1a0/0x1f0 [ 154.526049][T10834] __kasan_slab_alloc+0x69/0x90 [ 154.527610][T10834] __kmalloc_cache_noprof+0x243/0x6f0 [ 154.529265][T10834] garp_init_applicant+0x38d/0x4e0 [ 154.530841][T10834] register_vlan_dev+0x197/0x910 [ 154.532384][T10834] vlan_newlink+0x48c/0x750 [ 154.533801][T10834] rtnl_newlink+0x1499/0x2380 [ 154.535309][T10834] rtnetlink_rcv_msg+0x95e/0xe90 [ 154.536935][T10834] netlink_rcv_skb+0x159/0x420 [ 154.538674][T10834] netlink_unicast+0x585/0x850 [ 154.540703][T10834] netlink_sendmsg+0x8b0/0xda0 [ 154.542818][T10834] __sys_sendto+0x468/0x4b0 [ 154.544603][T10834] __x64_sys_sendto+0xe0/0x1c0 [ 154.546080][T10834] do_syscall_64+0x115/0x870 [ 154.547598][T10834] [ 154.548345][T10834] Memory state around the buggy address: [ 154.550044][T10834] ffff88806195cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.552674][T10834] ffff88806195cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.555138][T10834] >ffff88806195cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.557643][T10834] ^ [ 154.559141][T10834] ffff88806195cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.561639][T10834] ffff88806195ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.564224][T10834] ================================================================== [ 154.624015][T10834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.626355][T10834] CPU: 2 UID: 0 PID: 10834 Comm: syz.0.1153 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.630076][T10834] Tainted: [L]=SOFTLOCKUP [ 154.631542][T10834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.634691][T10834] Call Trace: [ 154.635742][T10834] [ 154.636663][T10834] dump_stack_lvl+0x100/0x190 [ 154.638143][T10834] vpanic+0x552/0x970 [ 154.639419][T10834] ? __pfx_vpanic+0x10/0x10 [ 154.640886][T10834] ? mark_held_locks+0x40/0x70 [ 154.642458][T10834] ? kobject_get+0x136/0x150 [ 154.643996][T10834] panic+0xd1/0xe0 [ 154.645176][T10834] ? __pfx_panic+0x10/0x10 [ 154.646585][T10834] ? kobject_get+0x136/0x150 [ 154.648318][T10834] ? preempt_schedule_common+0x42/0xc0 [ 154.650418][T10834] check_panic_on_warn.cold+0x19/0x34 [ 154.652501][T10834] end_report.part.0+0x3a/0x90 [ 154.654253][T10834] kasan_report.cold+0xe/0x18 [ 154.655932][T10834] ? kobject_get+0x136/0x150 [ 154.657707][T10834] kobject_get+0x136/0x150 [ 154.659534][T10834] device_add+0x19f/0x1950 [ 154.661652][T10834] ? __pfx_dev_set_name+0x10/0x10 [ 154.663994][T10834] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.666569][T10834] ? __pfx_device_add+0x10/0x10 [ 154.668651][T10834] ? lockdep_init_map_type+0x5c/0x250 [ 154.670877][T10834] ? __init_waitqueue_head+0xca/0x150 [ 154.673081][T10834] netdev_register_kobject+0x1a9/0x3d0 [ 154.675310][T10834] register_netdevice+0x151c/0x24b0 [ 154.677488][T10834] ? __pfx_register_netdevice+0x10/0x10 [ 154.679811][T10834] register_netdev+0x34/0x50 [ 154.681761][T10834] bnep_add_connection+0x723/0xd30 [ 154.683947][T10834] ? __pfx_bnep_add_connection+0x10/0x10 [ 154.686309][T10834] ? __fget_files+0x21f/0x3d0 [ 154.688288][T10834] do_bnep_sock_ioctl.isra.0+0x3ac/0x5b0 [ 154.690609][T10834] ? __pfx_do_bnep_sock_ioctl.isra.0+0x10/0x10 [ 154.693173][T10834] ? find_held_lock+0x2b/0x80 [ 154.695139][T10834] ? futex_wake+0x1ad/0x530 [ 154.696827][T10834] sock_do_ioctl+0x118/0x280 [ 154.698605][T10834] ? __pfx_sock_do_ioctl+0x10/0x10 [ 154.700700][T10834] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 154.702748][T10834] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.705658][T10834] sock_ioctl+0x599/0x6b0 [ 154.707621][T10834] ? __pfx_sock_ioctl+0x10/0x10 [ 154.709671][T10834] ? hook_file_ioctl_common+0x149/0x410 [ 154.711829][T10834] ? selinux_file_ioctl+0x13b/0x290 [ 154.713645][T10834] ? selinux_file_ioctl+0xb6/0x290 [ 154.715552][T10834] ? __pfx_sock_ioctl+0x10/0x10 [ 154.717588][T10834] __x64_sys_ioctl+0x18e/0x210 [ 154.719540][T10834] do_syscall_64+0x115/0x870 [ 154.721304][T10834] ? clear_bhb_loop+0x40/0x90 [ 154.723333][T10834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.726081][T10834] RIP: 0033:0x7f1812d9ce59 [ 154.727948][T10834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.735556][T10834] RSP: 002b:00007f1813bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.738993][T10834] RAX: ffffffffffffffda RBX: 00007f1813015fa0 RCX: 00007f1812d9ce59 [ 154.742282][T10834] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 0000000000000005 [ 154.745773][T10834] RBP: 00007f1812e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 154.749205][T10834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.752640][T10834] R13: 00007f1813016038 R14: 00007f1813015fa0 R15: 00007fff0c06a388 [ 154.755924][T10834] [ 154.758045][T10834] Kernel Offset: disabled [ 154.759933][T10834] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:26:17 Registers: info registers vcpu 0 CPU#0 RAX=00000000001a1b37 RBX=ffffffff8e4955c0 RCX=ffffffff8b899225 RDX=0000000000000000 RSI=ffffffff8df0fbdb RDI=ffffffff8c1c4680 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d4867b5 R10=ffff88806a433dab R11=0000000000000000 R12=0000000000000000 R13=fffffbfff1c92ab8 R14=0000000000000000 R15=ffffffff90d71950 RIP=ffffffff8b89787f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6387000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8a7724f156 CR3=000000003478e000 CR4=00352ef0 DR0=000000000000002c DR1=ffffffffff7fff00 DR2=0000000080000001 DR3=00000000000003ff DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffd0feff Opmask01=0000000000000000 Opmask02=000000007fffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574f3089f30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574f30742b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33b61f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373260780758483 73732602d6df2459 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d9ab653607916bb 73737376243c4309 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00326963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00326963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697377685f313132 303863616d2f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eee9c520130a65c8 00005571a4498bf2 00000000000001a1 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c44422c43422c42 422c41422c39422c 38422c37422c3242 2c31422c30422c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 412c36412c35412c 34412c33412c3141 2c46392c45392c38 392c36392c45382c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43382c41382c3938 2c38382c37382c36 382c35382c34382c 33382c32382c3138 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e7e5560 RCX=ffffffff91768401 RDX=0000000000000000 RSI=ffffffff8c1c4600 RDI=ffffffff8e1c1928 RBP=ffffffff81b7d1ae RSP=ffffc900062defc0 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000c7d9 R12=ffffc900062df0c8 R13=ffffc900062df078 R14=ffffc900062dfef0 R15=ffffc900062df0ac RIP=ffffffff81e49076 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6487000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0124547e20 CR3=0000000026c7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce7281660 00007ffce7281660 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01239ed823 00007f01239ed823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01239ede80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585a31628 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f7774656e205353 4249207075207465 732064656c696166 203a736563697665 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6966206863757320 6f4e203a32206f6e 7272652820303d65 63697665640a6b72 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a37362073757461 7473206874697720 6465746978652070 6f6f6c0a2979726f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463657269642072 6f20656c69662068 637573206f4e203a 32206f6e72726528 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d6563697665 640a6b726f777465 6e20535342492070 7520746573206465 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c696166203a7365 63697665645f6966 69775f657a696c61 6974696e69203a4c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857e8fe5 RDI=ffffffff9b45cca0 RBP=ffffffff9b45cc60 RSP=ffffc900040d7268 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000031 R14=0000000000000010 R15=ffffffff857e8f80 RIP=ffffffff857e900f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1813bc86c0 ffffffff 00c00000 GS =0000 ffff8880d6587000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c27bdfd CR3=0000000027691000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001800000 Opmask01=0000000000008000 Opmask02=00000000d51103ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5ca533e8 00007fff5ca533e8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5ca538f0 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f176bbc3b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000191 0000726569666974 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056045f2d8060 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66206e6f69746174 6963696c6f532072 6574756f5220676e 6979616c6564203a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373657264646120 4c4c20726f66206e 6f69746174696369 6c6f532072657475 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 414b4056051f5600 0056564057414144 054c4c05574a4305 4b4a4c5144514c46 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30386566203a3673 67616c6672646461 5f6669203a737264 64616e7261656c5f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39773b3a3633211c 1a0f0c060379010e 3701013563538263 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 5bf006292a62d2b1 b63101000100b330 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eaedff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20640a2032392031 3920206465200a65 0a0020625f203634 005f363420203461 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffff888033fd4a80 RCX=ffffc90003c97364 RDX=0000000000000000 RSI=ffffffff895454d4 RDI=ffff888033fd4f44 RBP=ffffc90003c97458 RSP=ffffc90003c97390 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000093114 R12=ffffffff81f2f470 R13=ffffc90003c97410 R14=0000000000000000 R15=ffff888033fd4a80 RIP=ffffffff81ecefe6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f176b9ef780 ffffffff 00c00000 GS =0000 ffff8880d6687000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0793eede9c CR3=000000002a5be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001800000 Opmask01=0000000000008000 Opmask02=00000000d51103ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5ca533e8 00007fff5ca533e8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5ca538f0 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f176bbc3b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000191 0000726569666974 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056045f2d8060 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66206e6f69746174 6963696c6f532072 6574756f5220676e 6979616c6564203a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373657264646120 4c4c20726f66206e 6f69746174696369 6c6f532072657475 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 414b4056051f5600 0056564057414144 054c4c05574a4305 4b4a4c5144514c46 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30386566203a3673 67616c6672646461 5f6669203a737264 64616e7261656c5f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39773b3a3633211c 1a0f0c060379010e 3701013563538263 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 5bf006292a62d2b1 b63101000100b330 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eaedff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20640a2032392031 3920206465200a65 0a0020625f203634 005f363420203461 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000