last executing test programs: 5m17.830564717s ago: executing program 3 (id=1719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) read(r1, &(0x7f0000001a00)=""/4096, 0x1000) (async) read(r1, &(0x7f0000001a00)=""/4096, 0x1000) 5m16.960830002s ago: executing program 3 (id=1729): socketpair(0x42154e160f9863dd, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x1, 0x3, 0x2, 0x3, 0x5, 0x3ff, 0x3b0, 0x8001, 0x0}, &(0x7f0000000140)=0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2580, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSIG(r4, 0x40045436, 0x1c) r5 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000580)={0x0, 0x5f, 0x4, 0xf9, 0x0, 0x7, 0x8, 0x8001, 0x26d, 0x3, 0x310}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x30, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000540)=[r3, r4, r1, r1], 0x4, 0x0, 0x2}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000), 0x4) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000a40)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) fcntl$setlease(r10, 0x400, 0x0) ioctl$I2C_PEC(r9, 0x708, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000840)={0x1, 0x0, @pic={0x1c, 0xb, 0xa, 0xa3, 0x6, 0x5, 0x22, 0x0, 0x29, 0x9, 0x3, 0x8, 0xa1, 0x0, 0x1, 0x7f}}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0xffff, 0x4, 0x7fff, 0x8, 0xfff7, 0x2, 0x0, {r11, @in6={{0xa, 0x4e20, 0xc5e, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x5, 0x10000, 0xfffffffc, 0xe, 0x5}}, &(0x7f0000000340)=0xb0) r12 = syz_open_dev$dri(&(0x7f0000000500), 0x99e000000, 0x6000) ioctl$LOOP_SET_FD(r10, 0x4c00, r12) r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r13, 0x541c, &(0x7f0000000440)) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)="dc1b8c56d4c9a15c57ee48773b7e1534889824ee85a26c43aafaac461abab7fe1dce1e1841f7f5b4f4d98dd5d37898d27d11a0982f7d76edb29419f9ebedc80cfc105b8f4279c4ca1ee8e8006d13dd71613b9044ed345ec3b6eb4adbf17326afb2b62c40b56d7cbc36e626bd03da0db765bd7f640cf6673d54f851092c0d37efd9752690") 5m16.808608078s ago: executing program 3 (id=1731): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4621, 0x81, @mcast1, 0x2}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x28}}, 0x20000084) 5m16.748655161s ago: executing program 3 (id=1733): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x40, 0xac5, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', 0xc0, 0x8000, 0xc3, 0x621}}) 5m16.742275874s ago: executing program 3 (id=1734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x2}, {{0x1, 0x1}, {0x2, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async, rerun: 32) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) setfsuid(r6) (async) r7 = fsmount(r4, 0x0, 0x80) (async, rerun: 32) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) (rerun: 32) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x5c, r8, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200448c0}, 0x40005) (async) r9 = openat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) (async) close_range(r9, r7, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 5m16.470551074s ago: executing program 3 (id=1736): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000180)="bc5df7f31c795abebc6d0667c63ef492cff91983b1982371d2d8e0692f94", 0x1e, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x5, 0x4, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast2, @loopback, {[@ra={0x94, 0x4}, @generic={0x0, 0xc, "97c6dd25547f9649e743"}, @ssrr={0x89, 0x13, 0x27, [@private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@newneigh={0x78, 0x1c, 0x800, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x0, r5, 0x1, 0x58, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NDA_CACHEINFO={0x14, 0x3, {0x83d, 0x3, 0x2, 0x100}}, @NDA_PROBES={0x8, 0x4, 0x7}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8001}, @NDA_SRC_VNI={0x8, 0xb, 0x9}, @NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NDA_NH_ID={0x8, 0xd, 0x9}, @NDA_PROBES={0x8, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c041}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m16.417479516s ago: executing program 32 (id=1736): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000180)="bc5df7f31c795abebc6d0667c63ef492cff91983b1982371d2d8e0692f94", 0x1e, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x5, 0x4, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast2, @loopback, {[@ra={0x94, 0x4}, @generic={0x0, 0xc, "97c6dd25547f9649e743"}, @ssrr={0x89, 0x13, 0x27, [@private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@newneigh={0x78, 0x1c, 0x800, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x0, r5, 0x1, 0x58, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NDA_CACHEINFO={0x14, 0x3, {0x83d, 0x3, 0x2, 0x100}}, @NDA_PROBES={0x8, 0x4, 0x7}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8001}, @NDA_SRC_VNI={0x8, 0xb, 0x9}, @NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NDA_NH_ID={0x8, 0xd, 0x9}, @NDA_PROBES={0x8, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c041}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m15.578984948s ago: executing program 2 (id=3199): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x8e, 0x9, 0xb, 0x0, 0x3, 0x3, 0x3, 0x5, 0x5, 0x0, 0x12, 0x1, 0x0, 0x2, 0x1, 0x3, 0x1, 0xd, 0xa0, '\x00', 0x8, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_clone(0xb9332000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='stack\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x8d7d) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000000)=0xfffffff8, 0x4) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m14.668801588s ago: executing program 2 (id=3211): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0xffff, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x3, 0xffec}}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_SEL={0x14, 0x5, {0x12, 0x3, 0x3, 0xff, 0x9, 0x5, 0x0, 0x6}}]}}]}, 0x54}}, 0x0) 3m14.52929902s ago: executing program 2 (id=3212): r0 = socket$igmp(0x2, 0x3, 0x2) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r1, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000440)=0x9, 0x4) 3m14.469408594s ago: executing program 2 (id=3213): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0200003300010029bd7000ffdbdb2502000000140001"], 0x21c}, 0x1, 0x0, 0x0, 0x34801}, 0x4000000) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) (async) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x10, 0x803, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x8}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x2, 0xfffffffffffffffe, 0x2010, 0x4, 0x6, 0xffdffffffffffff7, 0x621, 0x7]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x8}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x2, 0xfffffffffffffffe, 0x2010, 0x4, 0x6, 0xffdffffffffffff7, 0x621, 0x7]}) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180)) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r6, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x78}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 3m14.387831677s ago: executing program 2 (id=3214): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 32) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f00000001c0)=""/225, 0xe1, 0x0, &(0x7f00000002c0)=""/91, 0x5b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000b00eeffffffffffffff00000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94) 3m14.107207918s ago: executing program 2 (id=3215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async, rerun: 64) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'geneve1\x00'}) 3m14.035389088s ago: executing program 33 (id=3215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async, rerun: 64) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'geneve1\x00'}) 14.697617743s ago: executing program 4 (id=4263): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000000)={0x6000, 0x1000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b", @ANYBLOB="aaa6923ea903c70c2e7657f33edc858234adabbb4f637825b4b0f3e98fea41c7d6a7366257556367cea6ed38396de07b6ae5027b9d70df762c635233a4d43b42f345499d8b6cdacc10f123844006ba1f6833502249ea0dace79f4672b9301fc18d2a6e5c5f8a9f7eb611da97c91e650c21020376c24dc0d1b8b3aab67fc491092ae1", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x47, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f0000000040)={0xd4, 0x0, 0x3}) 14.582605313s ago: executing program 4 (id=4265): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x21}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x5}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_open_dev$dri(&(0x7f0000000040), 0xa715, 0x40840) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.439048065s ago: executing program 4 (id=4269): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto(r0, &(0x7f0000000000)="78a2e54f3e835e400c59076240e8d0146654bdb90ed2311be3b2dae7ec1d9f18c73a7dd4550895fd432db80595ec4e5b71ec6a7e7141af86182a0967b3b5e5dc4006d06bd56074f23bd2f7358f16e9615ec041d75580f3eb2e2d86b8e0131531654f6e55a4594503f729726f8233af828e5cd3f013fce1da6e7fdb", 0x7b, 0x20000000, &(0x7f0000000100)=@isdn={0x22, 0x9, 0x7f, 0x7f, 0x4}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x31, &(0x7f00000000c0)=0x8, 0x4) 14.314944314s ago: executing program 4 (id=4272): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) socket$inet(0x2, 0x5, 0x40) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="1496a1832a0809ee9e5c9aafdbcc1107b5861f34de7d049a5be869fdba7e3dd289d369a89851a06ac5b98739967b7654d8ed965710c18b58f71d0edbae51a422822dc0162f428db7472fce3feb9f793192506f6a88b3fd7c0b3121e4485331489e7beaaaee45209468ccaa510bd3ec1bb88a8f8eef632ab5a36c09dd1f216994a0ec69ab300c6ebf956668da179604316031fc9e7f04c9de934127bf781775ec58d99e7f0efcb5e583f7397c3c2b157f97cef7fdbdb75e7e3a8171a3e77c0859a42a70925e73ac82de00bf4c8511be57ed79f99b6b7a0af77e518538076975ebe4eb8b3958118a4d652757935d1aea69b0", 0xf1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file1\x00', 0x424) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0xe, 0x0, 0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080029bd7000fb53e89cf782d08fdb2f6ecd4be1b8e2b90300", @ANYRES32=r7, @ANYBLOB="0a001a00ffffffffffff00000a00060008021100000000000a001a00ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x40050}, 0x40) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f00000000c0)=0x80, 0x0) 14.077285268s ago: executing program 4 (id=4274): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x480102, 0x45, 0x35}, 0x18) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000280)={0x0, 0x38000000, {0xffffffffffffffff}, {0xee01}, 0xba, 0x4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fstat(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@ipv6_delroute={0xa4, 0x19, 0x2, 0x70bd2a, 0x25dfdafe, {0xa, 0x0, 0x0, 0xe, 0xff, 0x4, 0x0, 0x9, 0x400}, [@RTA_METRICS={0x19, 0x8, 0x0, 0x1, "da807eef19dadbf84abe55a58e8b193f816b9000c4"}, @RTA_UID={0x8, 0x19, r4}, @RTA_PREF={0x5, 0x14, 0x3}, @RTA_METRICS={0x28, 0x8, 0x0, 0x1, "1add8c637fb4637989a1d467b68e1b2cf5c540b01b78652af183fc3ef06dcb46735ca4d4"}, @RTA_EXPIRES={0x8, 0x17, 0x2}, @RTA_UID={0x8, 0x19, r6}, @RTA_EXPIRES={0x8, 0x17, 0x1000}, @RTA_MULTIPATH={0xc, 0x9, {0xcbf, 0x7, 0x5}}, @RTA_MARK={0x8, 0x10, 0x24}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@delchain={0x2c, 0x65, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff1, 0xe}, {}, {0x7, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000081) 13.13473751s ago: executing program 4 (id=4283): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000040)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r1, r2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) 12.771538128s ago: executing program 34 (id=4283): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000040)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r1, r2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) 3.215470929s ago: executing program 1 (id=4343): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001fbffffffffffffff000000000a580000005f070e56eca3292000000000020000032c000480280001800b0001006c6f6f6b757000001800028008000240000000030900010073797a31000000000900ef7111007a30000000000900020073797a3200000000140000001100010000000000000000000700000aa6a40983a40bee9fa9802dec5bf35a798123da265e23443e45c112f6319f19c0f37cad269cc57f7362408003cffea722c194aca35d"], 0x80}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) unshare(0x6a040000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0xd8, 0x4, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2c74ae8a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b73915d}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_USERDATA={0x72, 0xc, "84c5a715758fd544d92d5e5af5bee1dc3684870d12111405b0cc0847f26de92ccc6402f0c30ffdf5236aad4d69385817c5c9e1e98aea4fc14dae8240ffbf49c67b0b4b56ac3b106d517d86ec6a273dd88dbd47c195a2c156f3cd090be4bb08e922fc258e7550ef4eec04cd39f6cf"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000001}, 0x40d0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="88010000070a010200000000000000000a00000208000a40000000014d0007402fbee58801665844abb925f3f9ba6ba52303865ddddd0ef4f232395840aeaebae072dd9b464572dac03a04891d26f2a28cdcb0ca2c4b0ebacf8964bc1288c448107dc9fb1d4d7029fd0000000900020073797a3100000000c000074074c5a6aaf4b88952bb7abea02b56af6a9651dfac3a22c1a4b436c531648b8f16d0fe5790fdd2e5cc21ac8080290b20c9fdec1a1c51c9438d01446a90a23ff81b97d1f093779cb97fce51880690f1ae401ec3a6f3e58ecac3dc68524693eb2784b0f94415f7352bec45c73c1afdbb45db50a0be21e1048a03845587ef8a627dee31bccd187716bec7838c25d7d240ca2993d3dce70d8958a68c5befb3772c0acd4231291ed1577623fbadb44cd5be14000580080001400000006c080001400000002f08000940000000020c0003400000000000000004270007404aac2f2cec308f67f07c2b47e4574e2d89129e58885d8ecd7af07261bedfec3db12018007c525646001837196eb475b6730013f8b5a0806a29f3217a976ec06f8dd86530cffe9d2399b651f9cf3c4cf09d8a83d4957d78b287d281ed305dba2f14ac12021d5749b62db37e6f39a1c6b50f63afdec794254c4e08e83ec7"], 0x188}, 0x1, 0x0, 0x0, 0xc082}, 0x4000010) 2.448744318s ago: executing program 1 (id=4355): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) getpeername$unix(r0, 0x0, &(0x7f0000000400)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xd0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x2, 0x40001043, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYRESOCT=r2], &(0x7f00000003c0)='syzkaller\x00', 0xdbaa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) 2.250348687s ago: executing program 6 (id=4357): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000003c40)=ANY=[@ANYBLOB="0a0000000000000007aa62a714dd4003b7c3d5e04fd29e1959c80adfae509dae39d6d9f8e6c1d6662949f43987d5ef4ee505822636da50eef9ba87f7948232ed56cb59708aa73d09a922c4596ea2c690de626675c981968258d437a322638ae09e86e02340d6c2c1ed74390213a0e9e34f4dbc758ebfd516c8d664282cc94e1193"], 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) recvmsg$kcm(r3, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f00000038c0)=""/112, 0x70}, {&(0x7f0000003940)=""/181, 0xb5}, {&(0x7f0000003a00)=""/119, 0x77}], 0x3, &(0x7f0000003ac0)=""/227, 0xe3}, 0x10001) r4 = socket(0xa, 0x3, 0x200000ff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x1ff, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x9, 0xe0, @loopback, 0x9}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000002c0)="5665702f5e5648f3dab42167388ebf5ed679d647b515d24e4890314545f81e011fdeed7d3695847f", 0x28}], 0x1}, 0x80090) gettid() ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000003800)={0x2, 'gre0\x00', {0x2}, 0x3ff}) r5 = open$dir(&(0x7f0000003780)='./bus\x00', 0x228b02, 0x12) faccessat2(r5, &(0x7f00000037c0)='./file0\x00', 0x80, 0x100) recvmsg$can_bcm(r4, &(0x7f0000003740)={&(0x7f0000003d00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000003600)=[{&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/84, 0x54}, {&(0x7f0000002540)=""/143, 0x8f}, {&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000003c00)=""/11, 0xb}, {&(0x7f0000003d80)=""/4103, 0x1007}], 0xa, &(0x7f00000036c0)=""/116, 0x74}, 0x40000020) chdir(&(0x7f00000003c0)='./bus\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000003840)={0xd3c, 0x5d8, 0xa, 0x2, 0x30b, 0x3, 0xfffffffb, 0x8}, &(0x7f0000003880)=0x20) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000040)=0x4000000) 2.093220276s ago: executing program 5 (id=4359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r4, &(0x7f0000000440)=[{0x2, 0x2, 0x9, 0x3, @time={0x3, 0x9}, {0x5, 0x2}, {0xe8, 0x33}, @time=@tick=0x2}, {0xff, 0x3, 0x7, 0xec, @time={0x5, 0x3c55}, {0x7, 0x2}, {0x1, 0x4}, @control={0x4, 0x401, 0x100}}], 0x38) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x0) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000003200), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001800010000000089596e60b0181040de6318fc00000000001d011b6a9864637d4f64280000150004000400006006000000acd0c4c8999fd7e506000000"], 0x2c}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003240)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xf19}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.995588698s ago: executing program 5 (id=4360): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000002680)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0x100, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000100)) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket(0x2, 0x3, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@newchain={0x44, 0x64, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff2}, {0x4, 0xc}, {0x10, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xffffde7d}, @TCA_RATE={0x6, 0x5, {0x6, 0x3e}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0x9, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x8000, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7}}, [0xc, 0x9, 0x3, 0x9, 0x9, 0xffffffff7fffffff, 0xfffffffffffff000, 0x5, 0x80000000, 0x7, 0x8001, 0x5, 0xb4, 0x7, 0xffffffffffffffff]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000240)={r9, 0x64}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006110540000000000060000006f1d00009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYRESDEC=r7], 0x10b8}, 0xff00) 1.995111868s ago: executing program 6 (id=4361): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="2d30ebc57653c2cdad0b29306a58886c5fc6f9d744e6d95e56564af0c5579b6e4191b2c74a868a86813fe1450202fe610d9e747798c7f807b9c325aae1122eeb7549d94cd10317a85747b6edba6c0ed80c447a7f6ccdfad48fb565a89006fb95fae19434c4242b0a91e00afce86c257a0c486bb5edc89e56bda3aa057b511462013a23d84041e1d348dfd6bf7bb6", @ANYBLOB="0100000000902ebfdec2f35b3c0008005800000000000e0005006e038b6d657673696d0000000f00feff6e657464657673696d3000002b3431f706c0f9572035e86c8c49c6916e1456f4df71dbf343dac256e792cd0ebd54969d86cf04787ad498fe2ef4d70093e85aa81f8d9ba845de0a4bafbea26b84f10f5512c4f5f90a632fddd118890cdf82a21828fa30e08dd990ff1990aa38eeb26199e0374d9416025f2fa19274838d727552231b02821bfea90cac58b165ea44c2e1f7f996a8d13199e9a686af34f672afafd85bf17fdfb1c1ddf9d9ced4cc15033da9f9c05f6aa3c58ed17883cf6296ee2dd513e829f6165494be3071164f7ba1"], 0x3c}}, 0x8001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000240)={[0x7ff]}, 0x8) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x2c020400) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x7) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x19, 0xfffffffffffffffd, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062b1a400000000000200000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) pselect6(0x40, &(0x7f0000000180)={0xd, 0xfffffffffffffc00, 0x8001, 0xe, 0x56566e3, 0x6, 0x20, 0x6c}, &(0x7f00000001c0)={0x14, 0x6f66, 0xfffffffffffffff7, 0x1000, 0x4, 0x80000001, 0xb, 0x4}, &(0x7f0000000200)={0x3, 0x6, 0x8000000000000001, 0x7fffffff, 0xd315, 0x140, 0xffffffff, 0x7}, &(0x7f0000000440), &(0x7f00000004c0)={&(0x7f0000000480)={[0x6]}, 0x8}) 1.767350984s ago: executing program 5 (id=4362): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1.650067901s ago: executing program 5 (id=4364): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x44679a2a0cf9596f, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=vi\b\x00io,aname=-']) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 1.634686407s ago: executing program 5 (id=4366): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x0, &(0x7f0000000980)='norecovery') (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x0, &(0x7f0000000980)='norecovery') setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000180)={@l2tp={0x2, 0x0, @private=0xa010102}, {&(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100), 0x8}, 0xa0) 1.468638911s ago: executing program 0 (id=4367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x480}}, './file0\x00'}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00004f7000/0x4000)=nil}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000100)=0x9, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) 1.427768906s ago: executing program 1 (id=4368): r0 = io_uring_setup(0x47b, &(0x7f0000000ac0)={0x0, 0x4655, 0x80, 0x2, 0x4800020}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r3, 0x401) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r5, r6, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.333722943s ago: executing program 0 (id=4369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0xa95c, 0x80, 0x0, 0x34f}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x8010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0xfffffe2d, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x0, 0x11d, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x0, 0x6, 0x1}]}, {}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x21}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0x0, 0x3, 0x1}]}]}]}, 0x1c}}, 0x8040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0xa95c, 0x80, 0x0, 0x34f}, &(0x7f0000000280), &(0x7f00000005c0)) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x8010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0xfffffe2d, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x0, 0x11d, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x0, 0x6, 0x1}]}, {}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x21}]}, {0x0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x0, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0x0, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0x0, 0x3, 0x1}]}]}]}, 0x1c}}, 0x8040) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) (async) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) 1.226140818s ago: executing program 5 (id=4370): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x100000}], r1}, 0x18, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x251, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xa, 0x60, 0xf, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x1, 0x77}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3}}}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) lgetxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffffffffe84) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x800455d1, 0xfffffffffffffffd) 1.225218511s ago: executing program 1 (id=4371): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000380)='overlay\x00', 0x1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)={0x4c, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048004}, 0x24000048) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='N,\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c000500000000000000000008002f000000000005002e00010000000a0001007770616e3000000005002b0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) (async) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0) close(r11) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 1.148221318s ago: executing program 0 (id=4372): syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xffffffffffffff48, 0xf989, "bb653c93cf1b5dd85ce7fcfa766bb601"}]}}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r0, &(0x7f0000000180)=[{&(0x7f0000000480)="580000001500bfd427323b472547a45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffff1900e7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8050) 888.813376ms ago: executing program 1 (id=4373): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket(0x28, 0x2, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$sock(r2, &(0x7f0000006740)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x2, r3, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x78}}], 0x1, 0x4000804) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x25, 0x11, 0x0, 0x1, [@generic="2fe5af660e49035a45f4bfb9f42cf4a03da9dc13dd24291214b225a0c4824cdc01"]}]}, 0x3c}], 0x1}, 0x0) 787.339903ms ago: executing program 1 (id=4374): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_settime(0x0, &(0x7f0000009ac0)) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="8ddc"]) 786.991159ms ago: executing program 6 (id=4375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1a, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) r7 = memfd_create(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="10c00000000000001800128008000100677470000c00028008000200", @ANYBLOB='\b\x00'], 0x40}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r8], 0x50}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0xfffff28b) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xfffffffffffffdc6) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES32=r12], 0xb8}}, 0x2) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f00000000c0)={0x3, 0xffffffff, 0xe, 0x99af, 0x4, 0x9}) 180.440029ms ago: executing program 0 (id=4379): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r1 = socket(0x29, 0x80000, 0x2) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) alarm(0x709abc910000) alarm(0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='./control\x00', 0x4cf541bdb6967f55) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, 0x0) r6 = socket$isdn(0x22, 0x2, 0x25) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x2090, 0x4) rmdir(&(0x7f0000000280)='./control\x00') sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="06", @ANYRES64=r5, @ANYRES16=r3, @ANYRES64=0x77359400, @ANYRES64=r2, @ANYBLOB="000000000100000000000000000000001d0367556190ec73cff7448d926b38cb79cbf2d5a0f16e0f2242e62d4d5ca394c9cfb929e6df96097b7b4ec07ed50a57631881b5b54e44a21b30358ca9b1a847ca75fb1d9b2ab016e8d18b773e692d6eb495d98f4bf29e1b310c8801aa43529f5dcab24599435c47d9cdb4cc58fa7c1ace26767cbec1c205023a030dd72eca1a2876fd7481694eaf9a9e7d5de2c89b8ead5c97400ca69628ae822bced3b5e71e4c83e751950b1f034c0dd73fd249ac49396083df3bd9783062729c"], 0x48}, 0x1, 0x0, 0x0, 0x6d98ec4b2e138ace}, 0x8011) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r8, 0x4010641a, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[0xfff, 0xfffffffa, 0x4, 0x2, 0x100]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="be9d34c5aa00000000000079100800000000607ba0b36200"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r7}, 0x94) 46.775607ms ago: executing program 0 (id=4380): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000017b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0 (id=4381): mkdir(&(0x7f0000000080)='./file1\x00', 0xb) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='timerslack_ns\x00') pread64(r1, &(0x7f0000000280)=""/111, 0x6f, 0x9) write$UHID_CREATE2(r1, &(0x7f0000000580)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1000, 0x5, 0x2, 0x0, 0x1ff, 0x451, "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"}}, 0x1118) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc4c85512, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2000, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000400)={'trans=virtio,', {[{@noextend}], [{@fowner_lt={'fowner<', 0xee01}}, {@obj_user={'obj_user', 0x3d, '\xe3\xc5I$\xddQ`\xd9Qf\xdf\x04!#\x94\xcc|\x18\xb7\xa6\xc0\xe4\xf9+\x82\xbf\xee\xe4\x91\xbf*Ji\x11;\x15\xad\xef\xf5\x91\x93\x8dw\x06\xdc\x89\x8f\x03\\\x03\xafh\x14(<3\xaa\xdaG\xe8\x90\x15\"\x05\x9c#t\xe1?\xff\x9cE\xf0\xb2\xe1y\x8d\xdb\xa8]0\x80\xf9\xa2 h\xc3B]G}>7\x9f7\x9f [ 361.911469][T18016] dump_stack_lvl+0x16c/0x1f0 [ 361.911495][T18016] should_fail_ex+0x512/0x640 [ 361.911519][T18016] _copy_to_user+0x32/0xd0 [ 361.911543][T18016] simple_read_from_buffer+0xcb/0x170 [ 361.911564][T18016] proc_fail_nth_read+0x197/0x240 [ 361.911587][T18016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.911610][T18016] ? rw_verify_area+0xcf/0x6c0 [ 361.911637][T18016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.911657][T18016] vfs_read+0x1e1/0xcf0 [ 361.911677][T18016] ? __pfx___mutex_lock+0x10/0x10 [ 361.911698][T18016] ? __pfx_vfs_read+0x10/0x10 [ 361.911723][T18016] ? __fget_files+0x20e/0x3c0 [ 361.911760][T18016] ksys_read+0x12a/0x250 [ 361.911778][T18016] ? __pfx_ksys_read+0x10/0x10 [ 361.911802][T18016] do_syscall_64+0xcd/0x4c0 [ 361.911824][T18016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.911841][T18016] RIP: 0033:0x7fac27d8d5fc [ 361.911854][T18016] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 361.911870][T18016] RSP: 002b:00007fac28c84030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.911885][T18016] RAX: ffffffffffffffda RBX: 00007fac27fc6090 RCX: 00007fac27d8d5fc [ 361.911895][T18016] RDX: 000000000000000f RSI: 00007fac28c840a0 RDI: 0000000000000006 [ 361.911904][T18016] RBP: 00007fac28c84090 R08: 0000000000000000 R09: 0000000000000000 [ 361.911913][T18016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.911922][T18016] R13: 00007fac27fc6128 R14: 00007fac27fc6090 R15: 00007ffc0050e778 [ 361.911944][T18016] [ 362.326791][T18036] loop2: detected capacity change from 0 to 7 [ 362.333131][T18034] tipc: Enabling of bearer rejected, failed to enable media [ 362.359139][T18036] Dev loop2: unable to read RDB block 7 [ 362.363767][T18036] loop2: unable to read partition table [ 362.367088][T18036] loop2: partition table beyond EOD, truncated [ 362.374651][T18036] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 362.541641][T18043] tipc: Enabled bearer , priority 22 [ 362.547350][T18040] netlink: 'syz.5.3551': attribute type 4 has an invalid length. [ 362.689715][T18053] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3553'. [ 362.797977][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'. [ 362.840210][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'. [ 362.868967][T18058] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 362.930371][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.003066][T18069] pimreg: entered allmulticast mode [ 363.114221][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.183850][T18072] netlink: 'syz.0.3560': attribute type 10 has an invalid length. [ 363.254285][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.390226][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.430223][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.502291][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.552979][T18087] ceph: No source [ 363.634414][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.750293][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.771154][T18099] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 363.790007][T18098] block nbd5: Attempted send on invalid socket [ 363.806549][T18098] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 363.825864][T18098] EXT4-fs (nbd5): unable to read superblock [ 364.169592][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3573'. [ 364.244815][T18115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3574'. [ 364.277156][ T10] libceph: connect (1)[c::]:6789 error -101 [ 364.280323][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 364.286572][T18122] lo speed is unknown, defaulting to 1000 [ 364.297383][T18122] lo speed is unknown, defaulting to 1000 [ 364.300614][T18122] lo speed is unknown, defaulting to 1000 [ 364.307656][T18117] ceph: No mds server is up or the cluster is laggy [ 364.335321][T18122] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 364.393489][T18122] lo speed is unknown, defaulting to 1000 [ 364.398972][T18122] lo speed is unknown, defaulting to 1000 [ 364.429224][T18122] lo speed is unknown, defaulting to 1000 [ 364.451172][T18122] lo speed is unknown, defaulting to 1000 [ 364.458618][T18122] lo speed is unknown, defaulting to 1000 [ 364.464578][T18122] lo speed is unknown, defaulting to 1000 [ 364.482199][T18122] lo speed is unknown, defaulting to 1000 [ 364.566634][T18129] random: crng reseeded on system resumption [ 364.649737][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 364.658924][T18131] bridge_slave_1: left allmulticast mode [ 364.661610][T18131] bridge_slave_1: left promiscuous mode [ 364.665030][T18131] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.677216][T18131] bridge_slave_0: left allmulticast mode [ 364.692325][T18131] bridge_slave_0: left promiscuous mode [ 364.698685][T18131] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.153540][T18133] netlink: 'syz.5.3579': attribute type 30 has an invalid length. [ 365.330815][T18137] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3580'. [ 365.446254][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.930224][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.961555][T18168] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 365.972624][T18167] overlayfs: missing 'lowerdir' [ 365.977820][ T40] kauditd_printk_skb: 173 callbacks suppressed [ 365.977838][ T40] audit: type=1400 audit(2000000434.918:43504): avc: denied { create } for pid=18166 comm="syz.1.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 366.014413][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.056372][ T40] audit: type=1400 audit(2000000435.008:43505): avc: denied { execmem } for pid=18166 comm="syz.1.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 366.094703][ T40] audit: type=1400 audit(2000000435.018:43506): avc: denied { bind } for pid=18169 comm="syz.4.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.102668][T18171] Bluetooth: MGMT ver 1.23 [ 366.108294][ T40] audit: type=1400 audit(2000000435.018:43507): avc: denied { write } for pid=18169 comm="syz.4.3594" path="socket:[87603]" dev="sockfs" ino=87603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.145748][ T40] audit: type=1400 audit(2000000435.098:43508): avc: denied { allowed } for pid=18166 comm="syz.1.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 366.157363][T18171] xfrm0 speed is unknown, defaulting to 1000 [ 366.166503][T18171] lo speed is unknown, defaulting to 1000 [ 366.236811][ T40] audit: type=1400 audit(2000000435.188:43509): avc: denied { create } for pid=18166 comm="syz.1.3593" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.250940][ T40] audit: type=1400 audit(2000000435.188:43510): avc: denied { map } for pid=18166 comm="syz.1.3593" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.267924][ T40] audit: type=1400 audit(2000000435.188:43511): avc: denied { read write } for pid=18166 comm="syz.1.3593" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.399331][ T40] audit: type=1400 audit(2000000435.348:43512): avc: denied { create } for pid=18176 comm="syz.0.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.445132][ T40] audit: type=1400 audit(2000000435.398:43513): avc: denied { setopt } for pid=18176 comm="syz.0.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.450396][T18177] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3595'. [ 366.495716][T18171] lo speed is unknown, defaulting to 1000 [ 366.526048][T18178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18178 comm=syz.0.3595 [ 366.747635][T18188] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3597'. [ 366.752617][T18188] netlink: 'syz.5.3597': attribute type 6 has an invalid length. [ 366.769041][T18188] netlink: 'syz.5.3597': attribute type 5 has an invalid length. [ 366.783133][T18188] netlink: 'syz.5.3597': attribute type 4 has an invalid length. [ 367.634989][T18208] ufs: You didn't specify the type of your ufs filesystem [ 367.634989][T18208] [ 367.634989][T18208] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 367.634989][T18208] [ 367.634989][T18208] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 367.651469][T18208] ufs: ufstype=old is supported read-only [ 367.657699][T18208] block nbd4: Attempted send on invalid socket [ 367.662566][T18208] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.858385][T18218] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.885905][T18218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.888986][T18218] IPv6: NLM_F_CREATE should be set when creating new route [ 368.321213][T18242] netlink: 'syz.0.3613': attribute type 2 has an invalid length. [ 368.346453][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.451748][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 368.568086][T18260] netlink: 'syz.1.3619': attribute type 11 has an invalid length. [ 368.670976][T18266] fuse: Bad value for 'group_id' [ 368.687910][T18266] fuse: Bad value for 'group_id' [ 368.696000][T18266] overlay: Unknown parameter 'appraise_type' [ 368.707589][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.742278][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.022684][T13528] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 369.027823][T13528] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 369.052644][T18288] netlink: 'syz.0.3627': attribute type 1 has an invalid length. [ 369.062338][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 369.389045][T18301] 9pnet_virtio: no channels available for device syz [ 369.392311][T18300] overlayfs: missing 'workdir' [ 369.570471][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 369.582277][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 369.796864][T18316] geneve2: entered allmulticast mode [ 369.930208][T18326] bridge0: port 3(syz_tun) entered blocking state [ 369.935308][T18326] bridge0: port 3(syz_tun) entered disabled state [ 369.939300][T18326] syz_tun: entered allmulticast mode [ 369.946181][T18326] syz_tun: entered promiscuous mode [ 369.950919][T18326] bridge0: port 3(syz_tun) entered blocking state [ 369.956575][T18326] bridge0: port 3(syz_tun) entered forwarding state [ 369.994421][T18326] netlink: 'syz.5.3640': attribute type 9 has an invalid length. [ 370.352154][ C3] vkms_vblank_simulate: vblank timer overrun [ 370.618182][ C3] vkms_vblank_simulate: vblank timer overrun [ 370.695805][ C0] vcan0: j1939_tp_txtimer: 0xffff88805c8c3000: tx aborted with unknown reason: -2 [ 370.700730][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b4e3000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 370.717901][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c8c3000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 370.722234][ C3] vkms_vblank_simulate: vblank timer overrun [ 370.746810][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3644'. [ 371.066209][ C3] vkms_vblank_simulate: vblank timer overrun [ 371.130150][ C3] vkms_vblank_simulate: vblank timer overrun [ 371.171485][ C3] vkms_vblank_simulate: vblank timer overrun [ 371.176894][ T40] kauditd_printk_skb: 177 callbacks suppressed [ 371.176912][ T40] audit: type=1400 audit(2000000440.128:43691): avc: denied { create } for pid=18362 comm="syz.4.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.182965][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3648'. [ 371.229060][ T40] audit: type=1400 audit(2000000440.128:43692): avc: denied { write } for pid=18362 comm="syz.4.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.241744][ T40] audit: type=1400 audit(2000000440.128:43693): avc: denied { read } for pid=18362 comm="syz.4.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.250325][ C3] vkms_vblank_simulate: vblank timer overrun [ 371.255438][ T40] audit: type=1400 audit(2000000440.138:43694): avc: denied { ioctl } for pid=18362 comm="syz.4.3648" path="socket:[88782]" dev="sockfs" ino=88782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.298163][ C3] vkms_vblank_simulate: vblank timer overrun [ 371.336019][ T40] audit: type=1400 audit(2000000440.288:43695): avc: denied { create } for pid=18368 comm="syz.1.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.382500][ C3] vkms_vblank_simulate: vblank timer overrun [ 371.395588][ T40] audit: type=1400 audit(2000000440.288:43696): avc: denied { getopt } for pid=18368 comm="syz.1.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.411537][T18374] overlayfs: missing 'lowerdir' [ 371.426150][ C3] vkms_vblank_simulate: vblank timer overrun [ 371.426953][ T40] audit: type=1400 audit(2000000440.288:43697): avc: denied { connect } for pid=18368 comm="syz.1.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.426995][ T40] audit: type=1400 audit(2000000440.288:43698): avc: denied { name_connect } for pid=18368 comm="syz.1.3651" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 371.427031][ T40] audit: type=1400 audit(2000000440.288:43699): avc: denied { bind } for pid=18373 comm="syz.4.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 371.427068][ T40] audit: type=1400 audit(2000000440.288:43700): avc: denied { node_bind } for pid=18373 comm="syz.4.3652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 371.520287][ C3] vkms_vblank_simulate: vblank timer overrun [ 371.567382][ C3] vkms_vblank_simulate: vblank timer overrun [ 371.734667][T18393] netlink: 'syz.4.3656': attribute type 1 has an invalid length. [ 371.741833][T18393] netlink: 'syz.4.3656': attribute type 1 has an invalid length. [ 371.753216][T18393] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3656'. [ 371.761237][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3656'. [ 371.794744][T18393] Invalid ELF header magic: != ELF [ 371.897957][T18399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.920766][ T61] lo speed is unknown, defaulting to 1000 [ 372.022442][T18406] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 372.179569][T18416] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3664'. [ 372.202445][T18416] netlink: zone id is out of range [ 372.207882][T18416] netlink: get zone limit has 8 unknown bytes [ 372.335062][T18434] netlink: 'syz.0.3668': attribute type 7 has an invalid length. [ 372.361278][T18434] : entered promiscuous mode [ 372.702104][ C3] vkms_vblank_simulate: vblank timer overrun [ 372.993004][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 373.289606][ T5976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.340400][ T5976] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.350028][ T5976] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.367702][ T5976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.389642][ T5976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.482967][ T53] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 373.531162][ T6014] e1000 0000:00:06.0 eth0: Reset adapter [ 373.592314][ C3] vkms_vblank_simulate: vblank timer overrun [ 373.633489][ C3] vkms_vblank_simulate: vblank timer overrun [ 373.703927][ T53] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 373.708347][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 373.790924][ T53] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 373.796656][ T53] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 373.806415][ T53] usb 10-1: Product: syz [ 373.850501][ T53] usb 10-1: Manufacturer: syz [ 373.854905][ T53] usb 10-1: SerialNumber: syz [ 373.886915][ T53] usb 10-1: config 0 descriptor?? [ 373.925146][ T53] usb 10-1: selecting invalid altsetting 0 [ 374.047518][T18489] xfrm0 speed is unknown, defaulting to 1000 [ 374.171292][T18489] lo speed is unknown, defaulting to 1000 [ 374.171601][T18490] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3686'. [ 374.333196][ T842] usb 10-1: USB disconnect, device number 4 [ 374.482601][ T59] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 374.607676][T18516] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3686'. [ 374.672579][T18489] lo speed is unknown, defaulting to 1000 [ 374.672765][ T59] usb 9-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 374.714347][ C3] vkms_vblank_simulate: vblank timer overrun [ 374.718630][ T59] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 374.738988][ T59] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.818738][T18521] ip6tnl2: entered promiscuous mode [ 374.832704][ T59] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.839382][T18521] ip6tnl2: entered allmulticast mode [ 374.865351][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.879385][ T59] usb 9-1: Product: syz [ 374.882812][ T59] usb 9-1: Manufacturer: syz [ 374.885853][ T59] usb 9-1: SerialNumber: syz [ 375.089537][T18489] chnl_net:caif_netlink_parms(): no params data found [ 375.176122][ T59] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 375.179751][ T59] cdc_ncm 9-1:1.0: bind() failure [ 375.250064][ C3] vkms_vblank_simulate: vblank timer overrun [ 375.310472][ T59] usb 9-1: USB disconnect, device number 16 [ 375.475022][ T5976] Bluetooth: hci2: command tx timeout [ 375.493124][T18489] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.496159][T18489] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.499408][T18489] bridge_slave_0: entered allmulticast mode [ 375.524092][T18489] bridge_slave_0: entered promiscuous mode [ 375.529214][T18489] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.533703][T18489] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.560635][T18489] bridge_slave_1: entered allmulticast mode [ 375.574724][T18489] bridge_slave_1: entered promiscuous mode [ 375.713473][T18489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.729800][T18489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.935476][T18489] team0: Port device team_slave_0 added [ 375.940971][T18489] team0: Port device team_slave_1 added [ 376.061487][T18489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.066160][T18489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.103648][T18489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.108444][ T6014] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 376.155329][T18489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.155346][T18489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.155368][T18489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.429074][T18489] hsr_slave_0: entered promiscuous mode [ 376.461877][T18489] hsr_slave_1: entered promiscuous mode [ 376.470171][T18489] debugfs: 'hsr0' already exists in 'hsr' [ 376.499773][T18489] Cannot create hsr debugfs directory [ 377.493093][ T40] kauditd_printk_skb: 198 callbacks suppressed [ 377.493111][ T40] audit: type=1400 audit(2000000446.448:43899): avc: denied { create } for pid=18489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.514939][T18489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.517881][ T40] audit: type=1400 audit(2000000446.448:43900): avc: denied { write } for pid=18489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.545329][ T40] audit: type=1400 audit(2000000446.448:43901): avc: denied { read } for pid=18489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.554982][ T5976] Bluetooth: hci2: command tx timeout [ 377.572695][ T40] audit: type=1400 audit(2000000446.498:43902): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 377.575543][T18489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.634251][T18489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.645644][T18489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.910842][T18489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.938980][T18489] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.955159][T13538] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.959384][T13538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.983411][T13565] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.993867][T13565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.010173][ T40] audit: type=1400 audit(2000000446.958:43903): avc: denied { egress } for pid=842 comm="kworker/3:2" daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 378.096293][ T40] audit: type=1400 audit(2000000446.958:43904): avc: denied { sendto } for pid=842 comm="kworker/3:2" daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 378.116316][T18489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.202092][ T40] audit: type=1400 audit(2000000447.148:43905): avc: denied { module_request } for pid=18489 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 378.278577][ T40] audit: type=1400 audit(2000000447.218:43906): avc: denied { sys_module } for pid=18489 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 378.372922][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.490297][T18489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.585769][T18489] veth0_vlan: entered promiscuous mode [ 378.625407][T18489] veth1_vlan: entered promiscuous mode [ 378.701689][T18489] veth0_macvtap: entered promiscuous mode [ 378.720059][T18489] veth1_macvtap: entered promiscuous mode [ 378.778386][T18489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.797222][T18489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.829036][T13560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.835172][T13560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.841223][T13560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.857414][T13560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.107157][T13560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.110985][T13560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.179782][T13566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.183520][T13566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.240572][ T40] audit: type=1400 audit(2000000448.188:43907): avc: denied { mounton } for pid=18489 comm="syz-executor" path="/syzkaller.tMwvn3/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 379.267122][ T40] audit: type=1400 audit(2000000448.188:43908): avc: denied { mount } for pid=18489 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 379.702685][ T5976] Bluetooth: hci2: command tx timeout [ 380.902256][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 381.782374][ T5976] Bluetooth: hci2: command tx timeout [ 387.975218][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 387.975237][ T40] audit: type=1400 audit(2000000456.928:43939): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=36620 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 388.064689][T18571] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 388.065578][ T40] audit: type=1400 audit(2000000456.938:43940): avc: denied { recv } for pid=5950 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=58034 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 388.107843][T18571] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 388.140258][ T40] audit: type=1400 audit(2000000457.008:43941): avc: denied { allowed } for pid=18570 comm="syz.5.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 388.155553][T18571] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 388.155582][T18571] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 388.221681][ T40] audit: type=1400 audit(2000000457.008:43942): avc: denied { mounton } for pid=18570 comm="syz.5.3696" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 388.284056][ T40] audit: type=1400 audit(2000000457.038:43943): avc: denied { create } for pid=18573 comm="syz.4.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 388.294899][ T40] audit: type=1400 audit(2000000457.038:43944): avc: denied { write } for pid=18573 comm="syz.4.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 388.315929][ T40] audit: type=1400 audit(2000000457.038:43945): avc: denied { create } for pid=18572 comm="syz.0.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.349019][ T40] audit: type=1400 audit(2000000457.038:43946): avc: denied { write } for pid=18572 comm="syz.0.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.397522][ T40] audit: type=1400 audit(2000000457.048:43947): avc: denied { read } for pid=18572 comm="syz.0.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.447232][ T40] audit: type=1400 audit(2000000457.058:43948): avc: denied { read } for pid=18572 comm="syz.0.3694" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 388.792360][T18609] openvswitch: netlink: IPv6 tunnel dst address is zero [ 388.952665][T18614] loop6: detected capacity change from 0 to 7 [ 388.963161][T18594] Dev loop6: unable to read RDB block 7 [ 388.965967][T18594] loop6: AHDI p1 [ 388.979037][T18594] loop6: partition table partially beyond EOD, truncated [ 389.011351][T18614] Dev loop6: unable to read RDB block 7 [ 389.032143][T18614] loop6: AHDI p1 [ 389.033964][T18614] loop6: partition table partially beyond EOD, truncated [ 389.135185][T18622] xfrm0 speed is unknown, defaulting to 1000 [ 389.161042][T18622] lo speed is unknown, defaulting to 1000 [ 389.647286][T18650] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3715'. [ 389.697639][T18622] lo speed is unknown, defaulting to 1000 [ 389.880082][T18655] program syz.5.3717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.951062][T18653] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 390.104200][T18660] MINIX-fs: blocksize too small for device [ 391.452629][T18674] sctp: [Deprecated]: syz.1.3722 (pid 18674) Use of int in max_burst socket option deprecated. [ 391.452629][T18674] Use struct sctp_assoc_value instead [ 393.014155][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 393.014173][ T40] audit: type=1400 audit(2000000461.948:44115): avc: denied { allowed } for pid=18681 comm="syz.5.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 393.019804][T18690] netlink: 700 bytes leftover after parsing attributes in process `syz.1.3727'. [ 393.087230][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3727'. [ 393.170329][ T40] audit: type=1400 audit(2000000462.118:44116): avc: denied { getopt } for pid=18682 comm="syz.4.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.205016][ T40] audit: type=1400 audit(2000000462.128:44117): avc: denied { sqpoll } for pid=18681 comm="syz.5.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 393.217762][ T40] audit: type=1400 audit(2000000462.128:44118): avc: denied { create } for pid=18681 comm="syz.5.3725" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 393.415812][ T40] audit: type=1400 audit(2000000462.368:44119): avc: denied { create } for pid=18693 comm="syz.5.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 393.439276][ T40] audit: type=1400 audit(2000000462.368:44120): avc: denied { write } for pid=18693 comm="syz.5.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 393.521955][ T40] audit: type=1400 audit(2000000462.438:44121): avc: denied { accept } for pid=18697 comm="syz.5.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 393.548730][ T40] audit: type=1400 audit(2000000462.488:44122): avc: denied { ioctl } for pid=18697 comm="syz.5.3729" path="socket:[90799]" dev="sockfs" ino=90799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 394.083095][T18700] mkiss: ax0: crc mode is auto. [ 394.121193][ T40] audit: type=1400 audit(2000000463.038:44123): avc: denied { read } for pid=18701 comm="syz.5.3730" dev="nsfs" ino=4026533295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 394.161379][ T40] audit: type=1400 audit(2000000463.038:44124): avc: denied { open } for pid=18701 comm="syz.5.3730" path="net:[4026533295]" dev="nsfs" ino=4026533295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 394.492737][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3737'. [ 394.533834][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3737'. [ 394.537552][T13544] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.558107][T13544] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.579618][T13544] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.591018][T18720] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3738'. [ 394.599386][T13544] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.601699][ T59] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 394.811859][ T59] usb 9-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 394.824395][ T59] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 394.840672][ T59] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.881222][ T59] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.886240][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.891726][ T59] usb 9-1: Product: syz [ 394.902522][ T59] usb 9-1: Manufacturer: syz [ 394.904398][ T59] usb 9-1: SerialNumber: syz [ 394.974733][T18745] netlink: 'syz.0.3741': attribute type 5 has an invalid length. [ 395.028645][T18745] 9pnet_fd: Insufficient options for proto=fd [ 395.137357][T18752] netlink: 'syz.0.3743': attribute type 4 has an invalid length. [ 395.367601][T18759] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 395.546402][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3747'. [ 395.605067][T18753] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 395.687294][ T59] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 395.710942][ T59] cdc_ncm 9-1:1.0: bind() failure [ 395.739063][ T59] usb 9-1: USB disconnect, device number 17 [ 395.802541][ T5974] Bluetooth: hci3: command 0x0406 tx timeout [ 395.905012][T18770] binder: BINDER_SET_CONTEXT_MGR already set [ 395.907299][T18770] binder: 18768:18770 ioctl 4018620d 200000000480 returned -16 [ 395.929300][T18769] binder: 18768:18769 ioctl c0306201 200000000640 returned -22 [ 395.933261][T18769] binder: 18768:18769 ioctl 400454a4 200000000140 returned -22 [ 396.278141][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 396.813966][T18801] netlink: 'syz.5.3758': attribute type 4 has an invalid length. [ 396.959350][T18805] kvm: emulating exchange as write [ 397.044825][T18801] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 397.341819][ C2] vkms_vblank_simulate: vblank timer overrun [ 397.389977][ C2] vkms_vblank_simulate: vblank timer overrun [ 397.478911][T18821] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3765'. [ 397.484436][T18821] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 397.621552][T18826] netlink: 'syz.4.3768': attribute type 21 has an invalid length. [ 397.627362][T18826] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3768'. [ 397.907221][T18845] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3771'. [ 398.062633][ T40] kauditd_printk_skb: 160 callbacks suppressed [ 398.062649][ T40] audit: type=1400 audit(2000000467.008:44285): avc: denied { read write } for pid=18846 comm="syz.4.3772" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.093570][ T40] audit: type=1400 audit(2000000467.028:44286): avc: denied { open } for pid=18846 comm="syz.4.3772" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.120850][ T40] audit: type=1400 audit(2000000467.028:44287): avc: denied { ioctl } for pid=18846 comm="syz.4.3772" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.142748][ T40] audit: type=1400 audit(2000000467.058:44288): avc: denied { create } for pid=18848 comm="syz.5.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 398.159783][ T40] audit: type=1400 audit(2000000467.058:44289): avc: denied { create } for pid=18848 comm="syz.5.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 398.175153][ T40] audit: type=1400 audit(2000000467.058:44290): avc: denied { connect } for pid=18848 comm="syz.5.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 398.185516][ T40] audit: type=1400 audit(2000000467.068:44291): avc: denied { setopt } for pid=18822 comm="syz.0.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 398.200127][ T40] audit: type=1400 audit(2000000467.128:44292): avc: denied { listen } for pid=18848 comm="syz.5.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 398.212823][T18823] binder: BINDER_SET_CONTEXT_MGR already set [ 398.215881][ T40] audit: type=1400 audit(2000000467.128:44293): avc: denied { accept } for pid=18848 comm="syz.5.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 398.218033][T18823] binder: 18822:18823 ioctl 4018620d 200000000280 returned -16 [ 398.231392][ T40] audit: type=1400 audit(2000000467.158:44294): avc: denied { ioctl } for pid=18822 comm="syz.0.3763" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.342173][T18724] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 398.488038][T18724] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.494029][T18724] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 398.499953][T18724] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.505801][T18724] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.513740][T18849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.527033][T18724] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.721898][T18739] usb 9-1: USB disconnect, device number 18 [ 399.173460][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3781'. [ 399.179061][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3781'. [ 399.338225][T18900] input: syz1 as /devices/virtual/input/input37 [ 399.536177][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3786'. [ 399.541370][ C2] vkms_vblank_simulate: vblank timer overrun [ 399.709886][ C2] vkms_vblank_simulate: vblank timer overrun [ 399.823129][ C2] vkms_vblank_simulate: vblank timer overrun [ 400.064575][ C2] vkms_vblank_simulate: vblank timer overrun [ 400.265246][T18934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=18934 comm=syz.5.3792 [ 400.265330][T18940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=18940 comm=syz.5.3792 [ 400.530690][T18721] hid-generic 0004:0004:0007.000A: item fetching failed at offset 5/9 [ 400.534751][T18721] hid-generic 0004:0004:0007.000A: probe with driver hid-generic failed with error -22 [ 400.770439][T18978] openvswitch: netlink: Tunnel attr 3 has unexpected len 10 expected 1 [ 400.844010][T18983] dummy0: entered allmulticast mode [ 400.907529][ C2] vkms_vblank_simulate: vblank timer overrun [ 401.052310][T19000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3812'. [ 401.136455][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'. [ 401.177638][T19003] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 401.180093][T19003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.186888][T19003] vhci_hcd vhci_hcd.0: Device attached [ 401.195547][T19008] vhci_hcd: connection closed [ 401.195986][T13544] vhci_hcd: stop threads [ 401.200205][T13544] vhci_hcd: release socket [ 401.216406][T13544] vhci_hcd: disconnect device [ 401.441239][T19027] ata1.00: invalid multi_count 1 ignored [ 401.474353][T18724] libceph: connect (1)[c::]:6789 error -101 [ 401.478792][T18724] libceph: mon0 (1)[c::]:6789 connect error [ 401.577952][T19036] netlink: 'syz.0.3822': attribute type 10 has an invalid length. [ 401.590949][T19036] netlink: 'syz.0.3822': attribute type 10 has an invalid length. [ 401.604500][T19036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3822'. [ 401.709345][ C2] vkms_vblank_simulate: vblank timer overrun [ 401.778553][T18724] libceph: connect (1)[c::]:6789 error -101 [ 401.825799][T18724] libceph: mon0 (1)[c::]:6789 connect error [ 401.857800][ C2] vkms_vblank_simulate: vblank timer overrun [ 402.129392][T19056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3827'. [ 402.311294][T19029] ceph: No mds server is up or the cluster is laggy [ 402.379197][T19074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3832'. [ 402.383843][T18723] libceph: connect (1)[c::]:6789 error -101 [ 402.419261][T18723] libceph: mon0 (1)[c::]:6789 connect error [ 402.617569][T19080] xfrm0 speed is unknown, defaulting to 1000 [ 402.632681][T19080] lo speed is unknown, defaulting to 1000 [ 402.843732][T19104] openvswitch: netlink: EtherType 0 is less than min 600 [ 402.867749][T19080] lo speed is unknown, defaulting to 1000 [ 403.074024][ T40] kauditd_printk_skb: 236 callbacks suppressed [ 403.074043][ T40] audit: type=1400 audit(2000000472.028:44531): avc: denied { create } for pid=19107 comm="syz.4.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 403.094786][ T40] audit: type=1400 audit(2000000472.038:44532): avc: denied { bpf } for pid=19116 comm="syz.5.3845" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 403.111108][ T40] audit: type=1400 audit(2000000472.038:44533): avc: denied { perfmon } for pid=19116 comm="syz.5.3845" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 403.124218][ T40] audit: type=1400 audit(2000000472.048:44534): avc: denied { connect } for pid=19107 comm="syz.4.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 403.139498][ T40] audit: type=1400 audit(2000000472.088:44535): avc: denied { read } for pid=19119 comm="syz.5.3846" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 403.177877][ T40] audit: type=1400 audit(2000000472.088:44536): avc: denied { open } for pid=19119 comm="syz.5.3846" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 403.208014][ T40] audit: type=1400 audit(2000000472.098:44537): avc: denied { ioctl } for pid=19119 comm="syz.5.3846" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 403.398672][ T40] audit: type=1400 audit(2000000472.348:44538): avc: denied { create } for pid=19122 comm="syz.1.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 403.420517][ T40] audit: type=1400 audit(2000000472.368:44539): avc: denied { write } for pid=19122 comm="syz.1.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 403.441857][ C2] vkms_vblank_simulate: vblank timer overrun [ 403.446322][ T40] audit: type=1400 audit(2000000472.378:44540): avc: denied { ioctl } for pid=19122 comm="syz.1.3847" path="socket:[92713]" dev="sockfs" ino=92713 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 403.799827][T19135] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.823461][ C2] vkms_vblank_simulate: vblank timer overrun [ 403.829745][T19137] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.848000][T19137] netlink: 'syz.5.3851': attribute type 2 has an invalid length. [ 403.855183][T19136] xt_socket: unknown flags 0xe4 [ 403.928920][T19136] xfrm0 speed is unknown, defaulting to 1000 [ 403.933810][T19136] lo speed is unknown, defaulting to 1000 [ 403.943271][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.998617][T19144] tipc: Can't bind to reserved service type 1 [ 404.034812][T19144] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3853'. [ 404.073138][T19146] support for cryptoloop has been removed. Use dm-crypt instead. [ 404.162378][T19136] lo speed is unknown, defaulting to 1000 [ 404.257677][T19136] could not set up IPv6 listen sock [ 404.492435][T19155] tc_dump_action: action bad kind [ 404.493801][ C2] vkms_vblank_simulate: vblank timer overrun [ 404.756037][T19141] delete_channel: no stack [ 405.124920][ C2] vkms_vblank_simulate: vblank timer overrun [ 405.202205][ T6065] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 405.372950][ T6065] usb 10-1: Using ep0 maxpacket: 16 [ 405.395623][ T6065] usb 10-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 405.405486][ T6065] usb 10-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.420220][ T6065] usb 10-1: config 1 interface 0 has no altsetting 0 [ 405.433679][ T6065] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.439957][ T6065] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.458284][ T6065] usb 10-1: Product: syz [ 405.460771][ T6065] usb 10-1: Manufacturer: syz [ 405.464960][ T6065] usb 10-1: SerialNumber: syz [ 405.486759][T19180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3867'. [ 405.660466][T19185] comedi comedi3: pcl812: I/O port conflict (0x4f23,16) [ 405.670007][T19185] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3868'. [ 405.718613][T19183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 405.725387][T19183] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 405.730362][T19186] fuse: Bad value for 'fd' [ 405.818255][T19183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.838671][T19183] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 405.858361][T19183] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 405.894220][ T6065] usb 10-1: bad CDC descriptors [ 405.941579][ T6065] usb 10-1: USB disconnect, device number 5 [ 406.156112][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3871'. [ 406.157059][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3871'. [ 406.328010][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.659694][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.692423][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.826273][T19207] fuse: Bad value for 'fd' [ 407.089832][ C2] vkms_vblank_simulate: vblank timer overrun [ 407.285652][T19223] 9pnet_fd: Insufficient options for proto=fd [ 407.371439][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3881'. [ 407.393825][ C2] vkms_vblank_simulate: vblank timer overrun [ 407.451494][T19228] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 407.712947][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 407.776696][T19249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19249 comm=syz.1.3886 [ 407.878905][ T5976] Bluetooth: hci2: command 0x0c1a tx timeout [ 408.154505][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 408.154525][ T40] audit: type=1400 audit(2000000477.088:44654): avc: denied { create } for pid=19258 comm="syz.1.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.174199][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3891'. [ 408.308248][ C2] vkms_vblank_simulate: vblank timer overrun [ 408.389956][ C2] vkms_vblank_simulate: vblank timer overrun [ 408.486428][ C2] vkms_vblank_simulate: vblank timer overrun [ 408.575072][ T40] audit: type=1400 audit(2000000477.518:44655): avc: denied { create } for pid=19270 comm="syz.0.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.598291][ T40] audit: type=1400 audit(2000000477.518:44656): avc: denied { write } for pid=19270 comm="syz.0.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.655333][ T40] audit: type=1400 audit(2000000477.598:44657): avc: denied { create } for pid=19286 comm="syz.0.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 408.657323][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3898'. [ 408.700979][ T40] audit: type=1400 audit(2000000477.608:44658): avc: denied { ioctl } for pid=19286 comm="syz.0.3898" path="socket:[95485]" dev="sockfs" ino=95485 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 408.709873][ C2] vkms_vblank_simulate: vblank timer overrun [ 408.791011][T19293] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 408.887228][T19299] netlink: 'syz.4.3901': attribute type 2 has an invalid length. [ 408.896135][T19299] netlink: 'syz.4.3901': attribute type 1 has an invalid length. [ 409.080671][ T40] audit: type=1400 audit(2000000478.028:44659): avc: denied { read } for pid=19300 comm="syz.5.3903" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 409.107289][ T40] audit: type=1400 audit(2000000478.028:44660): avc: denied { open } for pid=19300 comm="syz.5.3903" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 409.125168][ T40] audit: type=1400 audit(2000000478.028:44661): avc: denied { ioctl } for pid=19300 comm="syz.5.3903" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 409.140301][ T40] audit: type=1400 audit(2000000478.028:44662): avc: denied { create } for pid=19300 comm="syz.5.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 409.152661][ T40] audit: type=1400 audit(2000000478.058:44663): avc: denied { create } for pid=19303 comm="syz.4.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 409.425217][T19314] netlink: 'syz.5.3910': attribute type 32 has an invalid length. [ 409.437488][T19322] netlink: 'syz.5.3910': attribute type 32 has an invalid length. [ 409.774242][T19340] bridge0: entered promiscuous mode [ 409.776773][T19340] macsec3: entered promiscuous mode [ 409.801404][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 409.962388][ T5976] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.408782][T19375] team_slave_0: entered promiscuous mode [ 410.412255][T19375] team_slave_1: entered promiscuous mode [ 410.422133][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3926'. [ 410.424097][T19375] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 410.428309][T19377] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3926'. [ 410.438628][T19375] team0: Device macvtap1 is already an upper device of the team interface [ 410.529248][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3927'. [ 410.568677][T19375] team_slave_0: left promiscuous mode [ 410.573200][T19375] team_slave_1: left promiscuous mode [ 410.717132][T19377] geneve2: entered promiscuous mode [ 410.729191][T19377] geneve2: entered allmulticast mode [ 410.748855][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3925'. [ 410.767046][T19378] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3925'. [ 410.873425][T19386] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 410.996943][T19393] geneve2: entered promiscuous mode [ 411.019141][T19393] geneve2: entered allmulticast mode [ 411.323069][T19414] netlink: 'syz.0.3934': attribute type 2 has an invalid length. [ 411.332447][T19414] __nla_validate_parse: 2 callbacks suppressed [ 411.332462][T19414] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3934'. [ 411.343460][T19414] binder: 19413:19414 ioctl c0306201 200000000300 returned -14 [ 411.530085][T19431] xt_l2tp: unknown flags: 51 [ 411.816508][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'. [ 411.939607][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3944'. [ 411.945304][T19445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3944'. [ 411.951045][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3944'. [ 411.956513][T19437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3940'. [ 411.974015][T19445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3944'. [ 412.022273][ T5976] Bluetooth: hci2: command 0x0c1a tx timeout [ 412.044522][T19444] block nbd4: Attempted send on invalid socket [ 412.047173][T19444] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 412.051826][T19444] XFS (nbd4): SB validate failed with error -5. [ 412.140283][T19462] netlink: 'syz.1.3947': attribute type 1 has an invalid length. [ 412.143453][T19461] netlink: 'syz.1.3947': attribute type 1 has an invalid length. [ 412.233330][T19462] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 412.309241][T19471] sysfs: Unknown parameter 'usrquota' [ 412.388666][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3950'. [ 412.397348][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3950'. [ 412.416842][T19482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=19482 comm=syz.0.3952 [ 412.657696][ C2] vkms_vblank_simulate: vblank timer overrun [ 412.787146][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3957'. [ 412.836488][ C2] vkms_vblank_simulate: vblank timer overrun [ 413.189084][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 413.189101][ T40] audit: type=1400 audit(2000000482.128:44791): avc: denied { create } for pid=19524 comm="syz.1.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.229963][ T40] audit: type=1400 audit(2000000482.128:44792): avc: denied { write } for pid=19524 comm="syz.1.3966" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 413.269687][ T40] audit: type=1400 audit(2000000482.138:44793): avc: denied { open } for pid=19524 comm="syz.1.3966" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 413.290410][T19527] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 413.309929][ T40] audit: type=1400 audit(2000000482.138:44794): avc: denied { ioctl } for pid=19524 comm="syz.1.3966" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 413.350330][ T40] audit: type=1400 audit(2000000482.178:44795): avc: denied { read } for pid=19525 comm="syz.0.3968" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 413.361307][ T40] audit: type=1400 audit(2000000482.178:44796): avc: denied { open } for pid=19525 comm="syz.0.3968" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 413.386216][ T40] audit: type=1400 audit(2000000482.178:44797): avc: denied { read write } for pid=19525 comm="syz.0.3968" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 413.412288][ T40] audit: type=1400 audit(2000000482.178:44798): avc: denied { open } for pid=19525 comm="syz.0.3968" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 413.452639][ T40] audit: type=1400 audit(2000000482.178:44799): avc: denied { ioctl } for pid=19525 comm="syz.0.3968" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 413.466047][T19525] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 413.493737][ C2] vkms_vblank_simulate: vblank timer overrun [ 413.495829][ T40] audit: type=1400 audit(2000000482.228:44800): avc: denied { read } for pid=19524 comm="syz.1.3966" dev="nsfs" ino=4026533367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 413.657013][T18739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.822326][ C2] vkms_vblank_simulate: vblank timer overrun [ 414.011489][ C2] vkms_vblank_simulate: vblank timer overrun [ 414.184892][T18739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.403273][ C2] vkms_vblank_simulate: vblank timer overrun [ 414.445225][ C2] vkms_vblank_simulate: vblank timer overrun [ 414.605342][ C2] vkms_vblank_simulate: vblank timer overrun [ 414.917884][ C2] vkms_vblank_simulate: vblank timer overrun [ 415.105755][ C2] vkms_vblank_simulate: vblank timer overrun [ 415.154480][ C2] vkms_vblank_simulate: vblank timer overrun [ 415.552470][ C2] vkms_vblank_simulate: vblank timer overrun [ 415.589833][ C2] vkms_vblank_simulate: vblank timer overrun [ 415.625069][T19597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.672301][T18739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.810282][T19606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3608578061 (14434312244 ns) > initial count (13774754624 ns). Using initial count to start timer. [ 415.821778][ C2] vkms_vblank_simulate: vblank timer overrun [ 415.858921][ C2] vkms_vblank_simulate: vblank timer overrun [ 416.348660][T18739] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 416.385839][T19629] overlayfs: statfs failed on './file0' [ 416.501880][T18739] usb 6-1: device descriptor read/64, error -71 [ 416.590077][T18736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.733349][ C2] vkms_vblank_simulate: vblank timer overrun [ 416.776373][ C2] vkms_vblank_simulate: vblank timer overrun [ 416.794426][T18739] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 416.942204][T18739] usb 6-1: device descriptor read/64, error -71 [ 417.050611][T19641] delete_channel: no stack [ 417.052830][T18739] usb usb6-port1: attempt power cycle [ 417.101959][T19644] block nbd5: Attempted send on invalid socket [ 417.116866][T19644] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 417.121040][T19644] XFS (nbd5): SB validate failed with error -5. [ 417.201764][ C2] vkms_vblank_simulate: vblank timer overrun [ 417.381555][ C2] vkms_vblank_simulate: vblank timer overrun [ 417.416741][T18739] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 417.433132][T18739] usb 6-1: device descriptor read/8, error -71 [ 417.461344][T19669] binder: 19663:19669 ioctl c0306201 2000000001c0 returned -22 [ 417.481770][T19668] block device autoloading is deprecated and will be removed. [ 417.511753][T19673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=19673 comm=syz.4.4011 [ 417.518676][T19674] __nla_validate_parse: 38 callbacks suppressed [ 417.518693][T19674] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4011'. [ 417.710168][T18739] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 417.742862][T18739] usb 6-1: device descriptor read/8, error -71 [ 417.882365][T18739] usb usb6-port1: unable to enumerate USB device [ 417.986671][ C2] vkms_vblank_simulate: vblank timer overrun [ 418.041724][ C2] vkms_vblank_simulate: vblank timer overrun [ 419.333751][ T40] kauditd_printk_skb: 141 callbacks suppressed [ 419.333770][ T40] audit: type=1326 audit(2000000488.258:44942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.356176][ T40] audit: type=1326 audit(2000000488.258:44943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.386154][ T40] audit: type=1326 audit(2000000488.258:44944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.413754][ T40] audit: type=1326 audit(2000000488.258:44945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.447918][ T40] audit: type=1326 audit(2000000488.258:44946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.467343][ T40] audit: type=1326 audit(2000000488.258:44947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.521839][ T40] audit: type=1326 audit(2000000488.278:44948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.546943][ T40] audit: type=1326 audit(2000000488.278:44949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.588987][ T40] audit: type=1326 audit(2000000488.278:44950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.632831][ T40] audit: type=1326 audit(2000000488.278:44951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.1.4014" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb796b8ebe9 code=0x50000 [ 419.782186][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.218751][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4021'. [ 420.603723][T19723] /dev/sg0: Can't lookup blockdev [ 420.694416][T19726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4024'. [ 422.348375][T13565] bond0 (unregistering): (slave geneve3): Releasing active interface [ 422.582922][T13565] bond2 (unregistering): (slave geneve2): Releasing active interface [ 422.588518][T13565] geneve2 (unregistering): left promiscuous mode [ 422.799540][T19765] netlink: 'syz.5.4035': attribute type 15 has an invalid length. [ 424.483494][T13565] . (unregistering): Released all slaves [ 424.521770][T13565] bond1 (unregistering): Released all slaves [ 424.968812][T13565] bond2 (unregistering): Released all slaves [ 424.999310][T13565] bond3 (unregistering): Released all slaves [ 425.611004][T13565] bond0 (unregistering): Released all slaves [ 425.630573][T13565] bond4 (unregistering): Released all slaves [ 425.677333][T19716] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 425.679632][T19716] syzkaller1: group set to 15 [ 425.687220][T18736] xfrm0 speed is unknown, defaulting to 1000 [ 425.690088][T18736] syz1: Port: 1 Link DOWN [ 425.692564][T19726] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 425.716280][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 425.838933][T19781] overlayfs: missing 'lowerdir' [ 425.845795][ T40] kauditd_printk_skb: 10289 callbacks suppressed [ 425.845813][ T40] audit: type=1400 audit(2000000494.778:55205): avc: denied { mounton } for pid=19780 comm="syz.4.4038" path="/490/file0" dev="tmpfs" ino=2627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 425.910532][ T40] audit: type=1400 audit(2000000494.778:55206): avc: denied { mount } for pid=19780 comm="syz.4.4038" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 425.947940][ T40] audit: type=1400 audit(2000000494.898:55207): avc: denied { read write } for pid=18489 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 425.998053][ T40] audit: type=1400 audit(2000000494.898:55208): avc: denied { open } for pid=18489 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.038414][ T40] audit: type=1400 audit(2000000494.898:55209): avc: denied { ioctl } for pid=18489 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.066054][ T40] audit: type=1400 audit(2000000495.018:55210): avc: denied { unmount } for pid=11701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 426.097612][ C3] vkms_vblank_simulate: vblank timer overrun [ 426.105223][ T40] audit: type=1400 audit(2000000495.058:55211): avc: denied { read } for pid=19787 comm="syz.1.4041" name="system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.121646][ T40] audit: type=1400 audit(2000000495.058:55212): avc: denied { open } for pid=19787 comm="syz.1.4041" path="/dev/dma_heap/system" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.144703][ T40] audit: type=1400 audit(2000000495.068:55214): avc: denied { allowed } for pid=19787 comm="syz.1.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 426.171434][ T40] audit: type=1400 audit(2000000495.068:55213): avc: denied { module_request } for pid=19784 comm="syz.0.4040" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 426.245591][ C3] vkms_vblank_simulate: vblank timer overrun [ 426.309673][ C3] vkms_vblank_simulate: vblank timer overrun [ 426.314441][T19794] xt_HMARK: spi-set and port-set can't be combined [ 426.342975][ C3] vkms_vblank_simulate: vblank timer overrun [ 426.504502][ C3] vkms_vblank_simulate: vblank timer overrun [ 426.557040][T19803] netlink: 'syz.5.4044': attribute type 27 has an invalid length. [ 426.566687][ C3] vkms_vblank_simulate: vblank timer overrun [ 426.634604][ C3] vkms_vblank_simulate: vblank timer overrun [ 426.786881][T19803] bridge0: port 3(syz_tun) entered disabled state [ 426.814061][T19803] bridge0: port 2() entered disabled state [ 426.817322][T19803] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.885677][T19803] dummy0: left allmulticast mode [ 426.913260][ T6065] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 427.134069][ T6065] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 427.137436][ T6065] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.145474][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4047'. [ 427.148265][ T6065] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.173687][ T6065] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 427.189459][ T6065] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 427.206869][ T6065] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 427.212425][ T6065] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.227157][ T6065] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.252539][ T6065] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 427.262088][ T6065] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 427.299688][ T6065] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 427.326907][ T6065] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.340152][ T6065] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.365335][T19803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.371805][ T6065] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 427.382957][ T6065] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 427.393620][ T6065] usb 6-1: string descriptor 0 read error: -22 [ 427.401538][ T6065] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 427.408704][ T6065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.411376][T19803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.471686][ C3] vkms_vblank_simulate: vblank timer overrun [ 427.475354][ T6065] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 427.632970][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.755439][ T59] usb 6-1: USB disconnect, device number 16 [ 427.827464][ C3] vkms_vblank_simulate: vblank timer overrun [ 427.959026][T19803] bond1: left allmulticast mode [ 428.027287][T19803] geneve2: left promiscuous mode [ 428.032993][T19803] geneve2: left allmulticast mode [ 428.064679][T13564] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.069174][T13564] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.107212][ C3] vkms_vblank_simulate: vblank timer overrun [ 428.111144][T13564] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.126519][T13564] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.175783][T19824] fuse: Bad value for 'fd' [ 428.203380][T13564] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.208266][T13564] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.224431][T13564] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.231267][T13564] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.883138][T19857] overlayfs: missing 'workdir' [ 428.887145][T19858] overlayfs: missing 'workdir' [ 428.967990][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4060'. [ 429.034622][T19865] macvlan2: entered promiscuous mode [ 429.037555][T19865] macvlan2: entered allmulticast mode [ 429.057012][T19865] veth1_vlan: entered allmulticast mode [ 429.064600][T19865] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 429.089123][T19876] netlink: 'syz.5.4065': attribute type 4 has an invalid length. [ 429.093641][ C3] vkms_vblank_simulate: vblank timer overrun [ 429.429386][T19888] netlink: 'syz.5.4069': attribute type 5 has an invalid length. [ 429.481518][T19888] ip6erspan0: entered promiscuous mode [ 429.526244][T10969] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 429.611381][T19895] netlink: 'syz.0.4071': attribute type 7 has an invalid length. [ 429.718920][T10969] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 429.726484][T10969] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 429.734499][T10969] usb 6-1: config 0 interface 0 has no altsetting 0 [ 429.744631][T10969] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 429.759610][T10969] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 429.769006][T10969] usb 6-1: Product: syz [ 429.772799][T10969] usb 6-1: Manufacturer: syz [ 429.775917][T10969] usb 6-1: SerialNumber: syz [ 429.790655][T10969] usb 6-1: config 0 descriptor?? [ 429.797001][T10969] hub 6-1:0.0: bad descriptor, ignoring hub [ 429.801092][T10969] hub 6-1:0.0: probe with driver hub failed with error -5 [ 429.856176][ C3] vkms_vblank_simulate: vblank timer overrun [ 429.870038][T10969] usb 6-1: selecting invalid altsetting 0 [ 429.981655][ C3] vkms_vblank_simulate: vblank timer overrun [ 430.043475][ C3] vkms_vblank_simulate: vblank timer overrun [ 430.161777][ C3] vkms_vblank_simulate: vblank timer overrun [ 430.166786][T10969] usb 6-1: USB disconnect, device number 17 [ 430.597782][T19927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=19927 comm=syz.0.4079 [ 430.608451][T19927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4079'. [ 430.723133][T19933] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4080'. [ 430.832626][T19940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.870969][ C3] vkms_vblank_simulate: vblank timer overrun [ 430.901692][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 430.901709][ T40] audit: type=1400 audit(2000000499.848:55358): avc: denied { read write } for pid=19939 comm="syz.0.4083" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 430.963242][ T40] audit: type=1400 audit(2000000499.848:55359): avc: denied { open } for pid=19939 comm="syz.0.4083" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 430.988775][T19945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4086'. [ 430.990516][ T40] audit: type=1400 audit(2000000499.878:55360): avc: denied { module_request } for pid=19939 comm="syz.0.4083" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 431.017806][ T40] audit: type=1400 audit(2000000499.908:55361): avc: denied { create } for pid=19947 comm="syz.1.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.027334][ C3] vkms_vblank_simulate: vblank timer overrun [ 431.048084][ T40] audit: type=1400 audit(2000000499.918:55362): avc: denied { prog_load } for pid=19947 comm="syz.1.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 431.058701][ T40] audit: type=1400 audit(2000000499.918:55363): avc: denied { bpf } for pid=19947 comm="syz.1.4085" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 431.127974][ T40] audit: type=1400 audit(2000000499.918:55364): avc: denied { perfmon } for pid=19947 comm="syz.1.4085" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 431.166155][ T40] audit: type=1400 audit(2000000499.918:55365): avc: denied { read write } for pid=19944 comm="syz.4.4086" name="video6" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 431.213969][ T40] audit: type=1400 audit(2000000499.918:55366): avc: denied { open } for pid=19944 comm="syz.4.4086" path="/dev/video6" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 431.233605][ C3] vkms_vblank_simulate: vblank timer overrun [ 431.244269][ T40] audit: type=1400 audit(2000000499.918:55367): avc: denied { ioctl } for pid=19944 comm="syz.4.4086" path="/dev/video6" dev="devtmpfs" ino=963 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 431.409655][ C3] vkms_vblank_simulate: vblank timer overrun [ 431.415075][T19964] overlayfs: failed to resolve './file2': -2 [ 431.461443][ C3] vkms_vblank_simulate: vblank timer overrun [ 431.595531][ T5976] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 431.600973][T19966] binder: 19965:19966 ioctl c0306201 200000000680 returned -14 [ 431.746591][ C3] vkms_vblank_simulate: vblank timer overrun [ 431.793621][ C3] vkms_vblank_simulate: vblank timer overrun [ 431.877557][ C3] vkms_vblank_simulate: vblank timer overrun [ 431.912895][ C3] vkms_vblank_simulate: vblank timer overrun [ 432.095294][T19970] could not allocate digest TFM handle cryptd(blake2b-160) [ 432.209668][ C3] vkms_vblank_simulate: vblank timer overrun [ 432.278010][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4098'. [ 432.382132][T11879] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 432.400507][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4098'. [ 432.577615][T11879] usb 9-1: device descriptor read/64, error -71 [ 432.832545][T11879] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 432.941778][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 432.948739][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 432.952829][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4106'. [ 432.957401][T20016] netlink: 'syz.0.4106': attribute type 20 has an invalid length. [ 432.993037][T11879] usb 9-1: device descriptor read/64, error -71 [ 433.112400][T11879] usb usb9-port1: attempt power cycle [ 433.472770][T11879] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 433.502243][T18728] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 433.503519][T11879] usb 9-1: device descriptor read/8, error -71 [ 433.599965][T20024] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 433.603322][T20024] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 433.607109][T20024] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 433.622504][T20024] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 433.674661][T18728] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 433.677943][T18728] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 433.681040][T18728] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 433.698665][T18728] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 433.704473][T18728] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 433.708418][T18728] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 433.712876][T18728] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 433.738044][T18728] usb 10-1: string descriptor 0 read error: -22 [ 433.745210][T18728] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 433.752492][T18728] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.752832][T11879] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 433.785118][T18728] usb 10-1: config 0 descriptor?? [ 433.801820][T18728] hub 10-1:0.0: bad descriptor, ignoring hub [ 433.806922][T18728] hub 10-1:0.0: probe with driver hub failed with error -5 [ 433.811397][T11879] usb 9-1: device descriptor read/8, error -71 [ 433.830546][T18728] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input40 [ 433.933190][T11879] usb usb9-port1: unable to enumerate USB device [ 433.991130][T20028] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 434.061303][T11879] usb 10-1: USB disconnect, device number 6 [ 434.366527][T20032] exFAT-fs (nullb0): invalid boot record signature [ 434.370390][T20032] exFAT-fs (nullb0): failed to read boot sector [ 434.377766][T20032] exFAT-fs (nullb0): failed to recognize exfat type [ 434.491622][T20034] sp0: Synchronizing with TNC [ 434.568594][ C3] vkms_vblank_simulate: vblank timer overrun [ 434.576964][T20034] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4113'. [ 434.829557][ C3] vkms_vblank_simulate: vblank timer overrun [ 434.961384][ C3] vkms_vblank_simulate: vblank timer overrun [ 435.528407][T20059] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 435.561582][ C3] vkms_vblank_simulate: vblank timer overrun [ 435.654576][T20071] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 435.706609][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'. [ 436.013520][ C3] vkms_vblank_simulate: vblank timer overrun [ 436.015654][ T40] kauditd_printk_skb: 211 callbacks suppressed [ 436.015670][ T40] audit: type=1400 audit(2000000504.938:55579): avc: denied { read write } for pid=20077 comm="syz.0.4126" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 436.061589][ C3] vkms_vblank_simulate: vblank timer overrun [ 436.082131][ T40] audit: type=1400 audit(2000000504.938:55580): avc: denied { open } for pid=20077 comm="syz.0.4126" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 436.106776][ T40] audit: type=1400 audit(2000000504.988:55581): avc: denied { ioctl } for pid=20077 comm="syz.0.4126" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 436.131070][ T40] audit: type=1400 audit(2000000505.068:55582): avc: denied { create } for pid=20077 comm="syz.0.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 436.141091][ T40] audit: type=1400 audit(2000000505.068:55583): avc: denied { ioctl } for pid=20077 comm="syz.0.4126" path="socket:[97112]" dev="sockfs" ino=97112 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 436.167945][ T40] audit: type=1400 audit(2000000505.068:55584): avc: denied { create } for pid=20077 comm="syz.0.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 436.177902][ T40] audit: type=1400 audit(2000000505.068:55585): avc: denied { create } for pid=20077 comm="syz.0.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 436.202942][ T40] audit: type=1400 audit(2000000505.068:55586): avc: denied { setopt } for pid=20077 comm="syz.0.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 436.424743][ T40] audit: type=1400 audit(2000000505.368:55587): avc: denied { kexec_image_load } for pid=20084 comm="syz.0.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 436.452416][ T40] audit: type=1400 audit(2000000505.388:55588): avc: denied { create } for pid=20084 comm="syz.0.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 436.569528][ C3] vkms_vblank_simulate: vblank timer overrun [ 436.625674][ T5976] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 436.661534][ C3] vkms_vblank_simulate: vblank timer overrun [ 437.034943][T20100] dlm: no local IP address has been set [ 437.053362][T20100] dlm: cannot start dlm midcomms -107 [ 437.634150][T20116] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4137'. [ 437.761944][T20118] binder: 20117:20118 ioctl 80087601 200000001c40 returned -22 [ 437.964143][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4141'. [ 438.236019][T20134] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 439.097041][T20149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4149'. [ 439.180992][T20171] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 439.577155][T20181] netlink: 'syz.5.4157': attribute type 21 has an invalid length. [ 439.583269][T20181] netlink: 'syz.5.4157': attribute type 6 has an invalid length. [ 439.587963][T20181] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4157'. [ 439.772066][T20185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4158'. [ 439.797736][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.124215][T20206] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 440.732714][T20229] netlink: 'syz.0.4169': attribute type 10 has an invalid length. [ 440.760861][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4169'. [ 440.779551][T20233] nvme_fabrics: unknown parameter or missing value 'ELFi' in ctrl creation request [ 440.816592][T20229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4169'. [ 440.991493][T20240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4172'. [ 441.023186][T20220] Process accounting resumed [ 441.147599][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 441.147615][ T40] audit: type=1400 audit(2000000510.098:55728): avc: denied { create } for pid=20249 comm="syz.1.4175" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.166263][ T40] audit: type=1400 audit(2000000510.098:55729): avc: denied { map } for pid=20249 comm="syz.1.4175" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=98997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.194786][ T40] audit: type=1400 audit(2000000510.098:55730): avc: denied { read } for pid=20249 comm="syz.1.4175" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=98997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.279681][T20256] overlayfs: failed to resolve './file0': -2 [ 441.318631][ T40] audit: type=1400 audit(2000000510.228:55731): avc: denied { mount } for pid=20251 comm="syz.5.4174" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 441.329084][ T40] audit: type=1400 audit(2000000510.258:55732): avc: denied { unmount } for pid=15486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 441.339694][T20257] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 441.356388][ T40] audit: type=1400 audit(2000000510.278:55733): avc: denied { mounton } for pid=20251 comm="syz.5.4174" path="/265/bus" dev="tmpfs" ino=1439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 441.394963][ T40] audit: type=1400 audit(2000000510.278:55734): avc: denied { unlink } for pid=20251 comm="syz.5.4174" name="#5d" dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 441.420507][ T40] audit: type=1400 audit(2000000510.278:55735): avc: denied { getattr } for pid=20251 comm="syz.5.4174" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 441.445944][ T40] audit: type=1400 audit(2000000510.308:55736): avc: denied { mount } for pid=20251 comm="syz.5.4174" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 441.467925][ T40] audit: type=1400 audit(2000000510.308:55737): avc: denied { create } for pid=20251 comm="syz.5.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 441.509030][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'. [ 441.605748][T20266] tmpfs: Unknown parameter 'grpqusta_blocl_8' [ 442.935993][T20306] veth0_vlan: entered allmulticast mode [ 443.764282][T20330] fuse: Unknown parameter 'ge' [ 443.834228][T20331] tmpfs: Unknown parameter 'smackfshat' [ 444.545112][T18737] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 444.580610][T20348] Failed to initialize the IGMP autojoin socket (err -2) [ 444.597231][T20349] Failed to initialize the IGMP autojoin socket (err -2) [ 444.730259][T18737] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 444.773201][T18737] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 444.832871][T18737] usb 6-1: config 0 interface 0 has no altsetting 0 [ 444.844657][T18737] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.870692][T18737] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 444.877850][T18737] usb 6-1: Product: syz [ 444.884657][T18737] usb 6-1: Manufacturer: syz [ 444.889443][T18737] usb 6-1: SerialNumber: syz [ 444.896993][T18737] usb 6-1: config 0 descriptor?? [ 444.924852][T20353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30993 sclass=netlink_route_socket pid=20353 comm=syz.4.4197 [ 444.951600][T18737] hub 6-1:0.0: bad descriptor, ignoring hub [ 444.959448][T18737] hub 6-1:0.0: probe with driver hub failed with error -5 [ 444.970032][T20359] IPv6: NLM_F_REPLACE set, but no existing node found! [ 444.987049][T18737] usb 6-1: selecting invalid altsetting 0 [ 445.238699][T20367] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4207'. [ 445.456008][T20379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4210'. [ 445.474565][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4210'. [ 446.002687][T20333] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 446.236425][ T40] kauditd_printk_skb: 148 callbacks suppressed [ 446.236442][ T40] audit: type=1400 audit(2000000515.188:55886): avc: denied { create } for pid=20397 comm="syz.0.4216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 446.268454][ T40] audit: type=1400 audit(2000000515.198:55887): avc: denied { write } for pid=20397 comm="syz.0.4216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 446.301605][ T40] audit: type=1400 audit(2000000515.218:55888): avc: denied { create } for pid=20397 comm="syz.0.4216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 446.342765][ T40] audit: type=1400 audit(2000000515.218:55889): avc: denied { ioctl } for pid=20397 comm="syz.0.4216" path="socket:[99083]" dev="sockfs" ino=99083 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 446.443835][T20333] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71) [ 446.454522][T18737] usb 6-1: USB disconnect, device number 18 [ 446.512073][ T40] audit: type=1400 audit(2000000515.438:55890): avc: denied { read write open } for pid=15486 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.539620][ T40] audit: type=1400 audit(2000000515.438:55891): avc: denied { ioctl } for pid=15486 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.600920][ T40] audit: type=1400 audit(2000000515.548:55892): avc: denied { prog_load } for pid=20404 comm="syz.0.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 446.605887][T20408] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4219'. [ 446.626346][ T40] audit: type=1400 audit(2000000515.548:55893): avc: denied { prog_run } for pid=20404 comm="syz.0.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 446.639345][T20408] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 446.665136][ T40] audit: type=1400 audit(2000000515.548:55894): avc: denied { map_create } for pid=20404 comm="syz.0.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 446.705592][ T40] audit: type=1400 audit(2000000515.548:55895): avc: denied { read write } for pid=20404 comm="syz.0.4218" name="swradio0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 446.992138][T18728] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 447.160502][T18728] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 447.164904][T18728] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 447.177834][T18728] usb 9-1: config 0 interface 0 has no altsetting 0 [ 447.223763][T18728] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 447.230439][T18728] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 447.249686][T18728] usb 9-1: Product: syz [ 447.266109][T18728] usb 9-1: Manufacturer: syz [ 447.268112][T18728] usb 9-1: SerialNumber: syz [ 447.303779][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.311026][T18728] usb 9-1: config 0 descriptor?? [ 447.317659][T18728] hub 9-1:0.0: bad descriptor, ignoring hub [ 447.333939][T18728] hub 9-1:0.0: probe with driver hub failed with error -5 [ 447.339376][T18728] usb 9-1: selecting invalid altsetting 0 [ 447.433423][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.690269][T11879] usb 9-1: USB disconnect, device number 23 [ 447.710314][T20424] netlink: 'syz.1.4224': attribute type 1 has an invalid length. [ 447.718311][T20424] netlink: 'syz.1.4224': attribute type 2 has an invalid length. [ 447.948581][T20429] ipvlan2: entered promiscuous mode [ 447.952578][T20429] bridge0: port 3(ipvlan2) entered blocking state [ 447.956272][T20429] bridge0: port 3(ipvlan2) entered disabled state [ 447.957459][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.960243][T20429] ipvlan2: entered allmulticast mode [ 447.992992][T20429] bridge0: entered allmulticast mode [ 447.999865][T20429] ipvlan2: left allmulticast mode [ 448.001950][T20429] bridge0: left allmulticast mode [ 448.018231][T20433] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 448.221549][T20436] ubi31: attaching mtd0 [ 448.227098][T20436] ubi31: scanning is finished [ 448.231952][T20436] ubi31: empty MTD device detected [ 448.300441][T20438] netlink: 'syz.0.4230': attribute type 11 has an invalid length. [ 448.478879][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.516862][T20436] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 448.540380][T20436] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 448.548794][T20436] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 448.557901][T20436] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 448.605533][T20436] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 448.608553][T20436] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 448.639593][T20436] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3130110687 [ 448.660146][T20436] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 448.676290][ T5976] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 448.683983][T20447] ubi31: background thread "ubi_bgt31d" started, PID 20447 [ 448.696650][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.712294][T20440] ubi: mtd0 is already attached to ubi31 [ 448.762341][T20455] batadv_slave_1: entered promiscuous mode [ 448.831751][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.041610][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.062926][T20465] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4239'. [ 449.104655][T18737] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 449.153752][T20460] batadv_slave_1: left promiscuous mode [ 449.224488][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 449.284439][T18737] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.291273][T18737] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 449.308013][T18737] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.324702][T18737] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.339419][T20457] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 449.373234][T18737] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 449.589407][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.611376][T18737] usb 10-1: USB disconnect, device number 7 [ 449.685921][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.875385][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.101373][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.300607][T20502] tipc: Resetting bearer [ 450.596421][T20509] netlink: 'syz.4.4251': attribute type 2 has an invalid length. [ 450.739143][T20514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4254'. [ 450.882541][T20517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4255'. [ 451.595252][ T40] kauditd_printk_skb: 134 callbacks suppressed [ 451.595268][ T40] audit: type=1400 audit(2000000520.548:56030): avc: denied { bind } for pid=20525 comm="syz.1.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.638252][ T40] audit: type=1400 audit(2000000520.588:56031): avc: denied { read write } for pid=20525 comm="syz.1.4258" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 451.644609][T20526] vivid-000: ================= START STATUS ================= [ 451.667573][ T40] audit: type=1400 audit(2000000520.588:56032): avc: denied { open } for pid=20525 comm="syz.1.4258" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 451.678543][T20526] vivid-000: Test Pattern: [ 451.692751][ T40] audit: type=1400 audit(2000000520.588:56033): avc: denied { write } for pid=20523 comm="syz.4.4257" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 451.694848][T20526] 75% Colorbar [ 451.703933][ T40] audit: type=1400 audit(2000000520.588:56034): avc: denied { open } for pid=20523 comm="syz.4.4257" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 451.728932][T20526] [ 451.728948][T20526] vivid-000: Fill Percentage of Frame: 100 [ 451.728978][T20526] vivid-000: Horizontal Movement: No Movement [ 451.729001][T20526] vivid-000: Vertical Movement: Move Up Slow [ 451.729024][T20526] vivid-000: OSD Text Mode: All [ 451.729046][T20526] vivid-000: Show Border: false [ 451.729067][T20526] vivid-000: Show Square: false [ 451.729091][T20526] vivid-000: Sensor Flipped Horizontally: false [ 451.729116][T20526] vivid-000: Sensor Flipped Vertically: false [ 451.729139][T20526] vivid-000: Insert SAV Code in Image: false [ 451.729162][T20526] vivid-000: Insert EAV Code in Image: false [ 451.729183][T20526] vivid-000: Insert Video Guard Band: false [ 451.729206][T20526] vivid-000: Reduced Framerate: false [ 451.729229][T20526] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 451.729252][T20526] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 451.729307][T20526] vivid-000: Enable Capture Cropping: true grabbed [ 451.729334][T20526] vivid-000: Enable Capture Composing: true grabbed [ 451.729364][T20526] vivid-000: Enable Capture Scaler: true grabbed [ 451.729390][T20526] vivid-000: Timestamp Source: End of Frame [ 451.729415][T20526] vivid-000: Colorspace: sRGB [ 451.729437][T20526] vivid-000: Transfer Function: Default [ 451.729459][T20526] vivid-000: Y'CbCr Encoding: Rec. 709 [ 451.729483][T20526] vivid-000: HSV Encoding: Hue 0-179 [ 451.729505][T20526] vivid-000: Quantization: Limited Range [ 451.729528][T20526] vivid-000: Apply Alpha To Red Only: false [ 451.729550][T20526] vivid-000: Standard Aspect Ratio: 4x3 [ 451.729575][T20526] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 451.729603][T20526] vivid-000: DV Timings: 640x480p59 inactive [ 451.729633][T20526] vivid-000: DV Timings Aspect Ratio: 4x3 [ 451.729656][T20526] vivid-000: Maximum EDID Blocks: 1 [ 451.729677][T20526] vivid-000: Limited RGB Range (16-235): true [ 451.729702][T20526] vivid-000: Rx RGB Quantization Range: Automatic [ 451.729725][T20526] vivid-000: Power Present: 0x00000001 [ 451.729748][T20526] tpg source WxH: 320x240 (Luma) [ 451.729762][T20526] tpg field: 1 [ 451.729772][T20526] tpg crop: (0,0)/320x240 [ 451.729785][T20526] tpg compose: (0,0)/320x240 [ 451.729800][T20526] tpg colorspace: 8 [ 451.729809][T20526] tpg transfer function: 0/2 [ 451.729820][T20526] tpg quantization: 2/2 [ 451.729831][T20526] tpg RGB range: 0/1 [ 451.729841][T20526] vivid-000: ================== END STATUS ================== [ 451.732871][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.980112][ T40] audit: type=1400 audit(2000000520.648:56035): avc: denied { write } for pid=20523 comm="syz.4.4257" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 452.012840][ T40] audit: type=1400 audit(2000000520.658:56036): avc: denied { create } for pid=20523 comm="syz.4.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.022835][ T40] audit: type=1400 audit(2000000520.658:56037): avc: denied { bind } for pid=20523 comm="syz.4.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.032607][ T40] audit: type=1400 audit(2000000520.658:56038): avc: denied { setopt } for pid=20523 comm="syz.4.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.045346][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.059720][ T40] audit: type=1400 audit(2000000520.658:56039): avc: denied { accept } for pid=20523 comm="syz.4.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.209676][T20541] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.232435][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.360826][T20552] vimc link validate: Scaler:src:16x16 (0x33524742, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 452.497653][T20562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4271'. [ 452.504171][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4271'. [ 453.245478][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.410504][T20589] netlink: 'syz.0.4279': attribute type 10 has an invalid length. [ 453.455348][T20589] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4279'. [ 453.631706][T20601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20601 comm=syz.1.4281 [ 453.662166][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.864956][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.395835][T20616] vlan2: entered allmulticast mode [ 454.405949][T20616] bond0: entered allmulticast mode [ 454.409736][T20616] bond_slave_0: entered allmulticast mode [ 454.415085][T20616] bond_slave_1: entered allmulticast mode [ 454.423797][T20616] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 454.604030][ T5974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.612194][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.629140][ T5974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.665454][ T5974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.693605][ T5974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.697976][ T5974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.732470][T20619] netlink: 'syz.0.4289': attribute type 1 has an invalid length. [ 454.808762][T20621] lo speed is unknown, defaulting to 1000 [ 455.127776][T20621] lo speed is unknown, defaulting to 1000 [ 455.223694][T20634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 455.254674][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.500003][T20621] chnl_net:caif_netlink_parms(): no params data found [ 455.729194][T20652] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 455.789292][T20621] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.799432][T20621] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.832401][T20621] bridge_slave_0: entered allmulticast mode [ 455.836730][T20621] bridge_slave_0: entered promiscuous mode [ 455.915840][T20621] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.938599][T20621] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.941767][T20621] bridge_slave_1: entered allmulticast mode [ 455.946160][T20621] bridge_slave_1: entered promiscuous mode [ 456.013929][T20621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.023917][T20621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.090637][T20659] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 456.161405][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.218813][T20621] team0: Port device team_slave_0 added [ 456.236809][T20621] team0: Port device team_slave_1 added [ 456.360431][T20621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.365353][T20621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.380859][T20621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.400687][T20621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.405945][T20621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.426538][T20621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.629423][T20621] hsr_slave_0: entered promiscuous mode [ 456.655423][T20621] hsr_slave_1: entered promiscuous mode [ 456.659607][T20621] debugfs: 'hsr0' already exists in 'hsr' [ 456.664862][T20621] Cannot create hsr debugfs directory [ 456.694588][T20654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 456.697303][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.701560][T20654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 456.704376][T20654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 456.708028][T20654] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 456.733323][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.795929][T20654] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 456.916531][T20662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34721 sclass=netlink_route_socket pid=20662 comm=syz.1.4299 [ 456.969398][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 456.969418][ T40] audit: type=1400 audit(2000000525.918:56191): avc: denied { perfmon } for pid=20661 comm="syz.1.4299" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 457.007751][ T40] audit: type=1400 audit(2000000525.948:56192): avc: denied { read } for pid=20661 comm="syz.1.4299" name="cec1" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.021235][ T40] audit: type=1400 audit(2000000525.948:56193): avc: denied { read } for pid=20663 comm="syz.5.4300" dev="nsfs" ino=4026533295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 457.051392][ T40] audit: type=1400 audit(2000000525.948:56194): avc: denied { open } for pid=20663 comm="syz.5.4300" path="net:[4026533295]" dev="nsfs" ino=4026533295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 457.081811][ T40] audit: type=1400 audit(2000000525.948:56195): avc: denied { open } for pid=20661 comm="syz.1.4299" path="/dev/cec1" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.112484][ T40] audit: type=1400 audit(2000000525.948:56196): avc: denied { create } for pid=20663 comm="syz.5.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 457.124671][ T40] audit: type=1400 audit(2000000525.948:56197): avc: denied { create } for pid=20661 comm="syz.1.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 457.152500][ T40] audit: type=1400 audit(2000000525.948:56198): avc: denied { setopt } for pid=20661 comm="syz.1.4299" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 457.163736][ T40] audit: type=1400 audit(2000000525.958:56199): avc: denied { ioctl } for pid=20661 comm="syz.1.4299" path="/dev/cec1" dev="devtmpfs" ino=975 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.193634][ T40] audit: type=1400 audit(2000000525.958:56200): avc: denied { sqpoll } for pid=20663 comm="syz.5.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 457.320682][T20668] program syz.1.4301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.395508][T20621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 457.421147][T20621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 457.441517][T20621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 457.501462][T20621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 457.645863][T20621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.696511][T20621] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.740710][T13564] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.753006][T13564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.758167][T13564] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.761715][T13564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.959784][T20689] bridge0: port 3(syz_tun) entered blocking state [ 457.976275][T20689] bridge0: port 3(syz_tun) entered forwarding state [ 457.988678][T20689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.994667][T20689] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.008798][T20689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.114000][ T5974] Bluetooth: hci3: command 0x0406 tx timeout [ 458.186795][T20621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.396807][T20701] netlink: 6028 bytes leftover after parsing attributes in process `syz.5.4307'. [ 458.451660][T20703] tipc: Started in network mode [ 458.453875][T20703] tipc: Node identity 667cb4a98ac6, cluster identity 4711 [ 458.456677][T20703] tipc: Enabled bearer , priority 0 [ 458.477277][T20705] syzkaller0: entered promiscuous mode [ 458.480306][T20705] syzkaller0: entered allmulticast mode [ 458.602712][T20621] veth0_vlan: entered promiscuous mode [ 458.611360][T20621] veth1_vlan: entered promiscuous mode [ 458.662296][T20705] tipc: Resetting bearer [ 458.776705][ T5976] Bluetooth: hci1: command 0x041b tx timeout [ 458.780862][ T5974] Bluetooth: hci2: command 0x0c1a tx timeout [ 458.802960][T20705] tipc: Disabling bearer [ 458.878150][T20621] veth0_macvtap: entered promiscuous mode [ 458.920132][T20621] veth1_macvtap: entered promiscuous mode [ 458.994344][T20621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.057729][T20621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.156891][T13556] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.188112][T13556] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.191920][T13556] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.206130][T13556] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.266704][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4316'. [ 459.526389][T13567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.531755][T13567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.659246][T13544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.683252][T13544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.317963][T20762] binder: 20761:20762 ioctl c00c642e 200000000580 returned -22 [ 460.319622][T20763] binder: 20761:20763 ioctl c00c642e 2000000005c0 returned -22 [ 460.373482][T20764] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4321'. [ 460.491226][T20769] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 460.620097][T20774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.830021][ T5976] Bluetooth: hci1: command 0x041b tx timeout [ 461.073839][T20783] program syz.6.4329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.182227][T20786] loop2: detected capacity change from 0 to 7 [ 461.195357][T20786] loop2: p1 [ 461.197035][T20786] loop2: partition table partially beyond EOD, truncated [ 461.205527][T20786] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 461.213329][T20784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.294172][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.338093][T19779] udevd[19779]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 461.379469][T20788] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 461.425365][T20788] bridge_slave_0: left allmulticast mode [ 461.431285][T20788] bridge_slave_0: left promiscuous mode [ 461.435135][T20788] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.468378][T20794] netlink: 'syz.6.4331': attribute type 10 has an invalid length. [ 461.478678][T20788] bridge_slave_1: left allmulticast mode [ 461.482393][T20788] bridge_slave_1: left promiscuous mode [ 461.494263][T20788] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.514099][T20788] bond0: (slave bond_slave_0): Releasing backup interface [ 461.537040][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4331'. [ 461.603710][T20788] bond0: (slave bond_slave_1): Releasing backup interface [ 461.654798][T20788] team0: Port device team_slave_0 removed [ 461.707518][T20788] team0: Port device team_slave_1 removed [ 461.711398][T20788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.725640][T20788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.730338][T20788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.735058][T20788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.761053][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.813276][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.858257][T20794] mac80211_hwsim hwsim35 wlan1: left allmulticast mode [ 461.909520][T20794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.915527][T20794] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 462.121329][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.684786][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 462.684806][ T40] audit: type=1400 audit(2000000531.638:56398): avc: denied { unmount } for pid=18489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 462.758469][ T40] audit: type=1400 audit(2000000531.698:56399): avc: denied { create } for pid=20806 comm="syz.6.4335" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 462.791206][ T40] audit: type=1400 audit(2000000531.708:56400): avc: denied { ioctl } for pid=20806 comm="syz.6.4335" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=103808 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 462.882306][ T40] audit: type=1400 audit(2000000531.828:56401): avc: denied { create } for pid=20810 comm="syz.1.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 462.890012][ T40] audit: type=1400 audit(2000000531.828:56402): avc: denied { create } for pid=20813 comm="syz.5.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 462.921712][ T40] audit: type=1400 audit(2000000531.828:56403): avc: denied { create } for pid=20813 comm="syz.5.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 462.929988][ T5974] Bluetooth: hci1: command 0x041b tx timeout [ 462.930115][ T40] audit: type=1400 audit(2000000531.828:56404): avc: denied { create } for pid=20813 comm="syz.5.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.294378][ T40] audit: type=1400 audit(2000000531.828:56405): avc: denied { setopt } for pid=20813 comm="syz.5.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.324423][ T40] audit: type=1400 audit(2000000531.828:56406): avc: denied { getopt } for pid=20810 comm="syz.1.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 463.351829][ T40] audit: type=1400 audit(2000000531.838:56407): avc: denied { write } for pid=20813 comm="syz.5.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 463.739568][T20834] overlay: Unknown parameter 'silent' [ 463.815131][T20833] lo speed is unknown, defaulting to 1000 [ 463.881424][T20844] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4343'. [ 463.915136][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.966080][T20850] 9pnet_virtio: no channels available for device syz [ 464.167956][T20854] 9pnet_fd: p9_fd_create_unix (20854): problem connecting socket: ./file1: -111 [ 464.177645][T20833] lo speed is unknown, defaulting to 1000 [ 464.586315][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.997462][ T5976] Bluetooth: hci1: command 0x041b tx timeout [ 465.220516][T20898] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.225011][T20898] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 465.231154][T20898] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.234398][T20898] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 465.381571][T20897] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.421775][T20897] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 465.445281][T20897] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.450513][T20897] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 465.477338][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.791549][T20920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=513 sclass=netlink_tcpdiag_socket pid=20920 comm=syz.0.4372 [ 465.922306][T18723] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 466.119223][T18723] usb 10-1: unable to get BOS descriptor or descriptor too short [ 466.125055][T18723] usb 10-1: not running at top speed; connect to a high speed hub [ 466.149511][T20932] 9pnet_fd: Insufficient options for proto=fd [ 466.169991][T18723] usb 10-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.175913][T18723] usb 10-1: config 1 interface 0 has no altsetting 0 [ 466.218575][T18723] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.227712][T18723] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.240433][T18723] usb 10-1: Product: syz [ 466.245344][T18723] usb 10-1: Manufacturer: syz [ 466.247903][T18723] usb 10-1: SerialNumber: syz [ 466.528851][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4378'. [ 466.544671][T20941] vlan2: entered promiscuous mode [ 466.553372][T20941] vlan2: entered allmulticast mode [ 466.557449][T20941] hsr_slave_1: entered allmulticast mode [ 466.572390][T18723] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 466.634064][T18723] usb 10-1: USB disconnect, device number 8 [ 466.664542][T20942] delete_channel: no stack [ 466.901784][ C3] ================================================================== [ 466.905277][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 466.909000][ C3] Read of size 1 at addr ffff888025927018 by task swapper/3/0 [ 466.923173][ C3] [ 466.925325][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 466.925351][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 466.925364][ C3] Call Trace: [ 466.925373][ C3] [ 466.925383][ C3] dump_stack_lvl+0x116/0x1f0 [ 466.925429][ C3] print_report+0xcd/0x630 [ 466.925460][ C3] ? __virt_addr_valid+0x81/0x610 [ 466.925484][ C3] ? __phys_addr+0xe8/0x180 [ 466.925508][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 466.925525][ C3] kasan_report+0xe0/0x110 [ 466.925544][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 466.925563][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 466.925578][ C3] __kasan_check_byte+0x36/0x50 [ 466.925597][ C3] lock_acquire+0xfc/0x350 [ 466.925625][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 466.925643][ C3] ? .slowpath+0x9/0x18 [ 466.925662][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 466.925677][ C3] ? p9_req_put+0xaf/0x250 [ 466.925696][ C3] p9_req_put+0xaf/0x250 [ 466.925714][ C3] req_done+0x1dc/0x2e0 [ 466.925751][ C3] ? __pfx_req_done+0x10/0x10 [ 466.925776][ C3] ? debug_object_activate+0x2ec/0x4c0 [ 466.925803][ C3] ? __pfx_req_done+0x10/0x10 [ 466.925826][ C3] vring_interrupt+0x31b/0x400 [ 466.925851][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 466.925874][ C3] __handle_irq_event_percpu+0x22c/0x7d0 [ 466.925900][ C3] handle_irq_event+0xab/0x1e0 [ 466.925922][ C3] handle_edge_irq+0x3ca/0x9e0 [ 466.925945][ C3] __common_interrupt+0xcd/0x2f0 [ 466.925972][ C3] common_interrupt+0x61/0xe0 [ 466.926000][ C3] asm_common_interrupt+0x26/0x40 [ 466.926021][ C3] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 466.926046][ C3] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 a8 ab 8b e8 c8 e3 17 0a 65 66 c7 05 26 4f 5a 12 00 00 e8 69 44 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 20 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 466.926063][ C3] RSP: 0018:ffffc900006f8f28 EFLAGS: 00000206 [ 466.926080][ C3] RAX: 00000000002a494e RBX: 00000000ffffffff RCX: ffffffff81c3747f [ 466.926091][ C3] RDX: 0000000000000000 RSI: ffffffff8de513b8 RDI: ffffffff8c162b00 [ 466.926102][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 466.926113][ C3] R10: ffffffff90ab5c97 R11: 0000000000000000 R12: 0000000000000282 [ 466.926124][ C3] R13: 000000000000000a R14: 1ffff920000df1ed R15: ffffed1003bda000 [ 466.926140][ C3] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 466.926166][ C3] ? handle_softirqs+0x1d7/0x8e0 [ 466.926186][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 466.926214][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 466.926237][ C3] __irq_exit_rcu+0x109/0x170 [ 466.926258][ C3] irq_exit_rcu+0x9/0x30 [ 466.926279][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 466.926298][ C3] [ 466.926304][ C3] [ 466.926310][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.926329][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 466.926347][ C3] Code: 0c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 03 16 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 466.926363][ C3] RSP: 0018:ffffc90000197df8 EFLAGS: 00000282 [ 466.926376][ C3] RAX: 00000000002a494b RBX: 0000000000000003 RCX: ffffffff8b940c29 [ 466.926387][ C3] RDX: 0000000000000000 RSI: ffffffff8de513b8 RDI: ffffffff8c162b00 [ 466.926429][ C3] RBP: ffffed1003bda000 R08: 0000000000000001 R09: ffffed100d4e6655 [ 466.926442][ C3] R10: ffff88806a7332ab R11: 0000000000000000 R12: 0000000000000003 [ 466.926453][ C3] R13: ffff88801ded0000 R14: ffffffff90ab5c90 R15: 0000000000000000 [ 466.926468][ C3] ? ct_kernel_exit+0x139/0x190 [ 466.926494][ C3] default_idle+0x13/0x20 [ 466.926515][ C3] default_idle_call+0x6d/0xb0 [ 466.926536][ C3] do_idle+0x391/0x510 [ 466.926560][ C3] ? __pfx_do_idle+0x10/0x10 [ 466.926580][ C3] ? trace_sched_exit_tp+0x2f/0x120 [ 466.926601][ C3] cpu_startup_entry+0x4f/0x60 [ 466.926623][ C3] start_secondary+0x21d/0x2b0 [ 466.926649][ C3] ? __pfx_start_secondary+0x10/0x10 [ 466.926676][ C3] common_startup_64+0x13e/0x148 [ 466.926702][ C3] [ 466.926708][ C3] [ 467.075880][ T5974] Bluetooth: hci1: command 0x041b tx timeout [ 467.076278][ C3] Allocated by task 20948: [ 467.341220][ C3] kasan_save_stack+0x33/0x60 [ 467.344560][ C3] kasan_save_track+0x14/0x30 [ 467.347429][ C3] __kasan_kmalloc+0xaa/0xb0 [ 467.350286][ C3] p9_client_create+0xc7/0x11c0 [ 467.352585][ C3] v9fs_session_init+0x1f7/0x1a80 [ 467.354489][ C3] v9fs_mount+0xc5/0xa90 [ 467.356300][ C3] legacy_get_tree+0x10c/0x220 [ 467.358554][ C3] vfs_get_tree+0x8e/0x340 [ 467.360652][ C3] path_mount+0x1513/0x2000 [ 467.363048][ C3] __x64_sys_mount+0x28d/0x310 [ 467.365822][ C3] do_syscall_64+0xcd/0x4c0 [ 467.368829][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.372945][ C3] [ 467.374368][ C3] Freed by task 20948: [ 467.376618][ C3] kasan_save_stack+0x33/0x60 [ 467.378934][ C3] kasan_save_track+0x14/0x30 [ 467.380697][ C3] kasan_save_free_info+0x3b/0x60 [ 467.382769][ C3] __kasan_slab_free+0x60/0x70 [ 467.384732][ C3] kfree+0x2b4/0x4d0 [ 467.386298][ C3] p9_client_create+0xa28/0x11c0 [ 467.388117][ C3] v9fs_session_init+0x1f7/0x1a80 [ 467.406277][ C3] v9fs_mount+0xc5/0xa90 [ 467.408155][ C3] legacy_get_tree+0x10c/0x220 [ 467.410684][ C3] vfs_get_tree+0x8e/0x340 [ 467.413038][ C3] path_mount+0x1513/0x2000 [ 467.415341][ C3] __x64_sys_mount+0x28d/0x310 [ 467.417997][ C3] do_syscall_64+0xcd/0x4c0 [ 467.423322][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.432545][ C3] [ 467.433835][ C3] The buggy address belongs to the object at ffff888025927000 [ 467.433835][ C3] which belongs to the cache kmalloc-512 of size 512 [ 467.443409][ C3] The buggy address is located 24 bytes inside of [ 467.443409][ C3] freed 512-byte region [ffff888025927000, ffff888025927200) [ 467.457579][ C3] [ 467.459007][ C3] The buggy address belongs to the physical page: [ 467.469980][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25924 [ 467.474305][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 467.479732][ C3] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 467.491823][ C3] page_type: f5(slab) [ 467.493628][ C3] raw: 00fff00000000040 ffff88801b842c80 ffffea0001789700 dead000000000003 [ 467.497589][ C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 467.501570][ C3] head: 00fff00000000040 ffff88801b842c80 ffffea0001789700 dead000000000003 [ 467.505268][ C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 467.509002][ C3] head: 00fff00000000002 ffffea0000964901 00000000ffffffff 00000000ffffffff [ 467.512806][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 467.516641][ C3] page dumped because: kasan: bad access detected [ 467.519403][ C3] page_owner tracks the page as allocated [ 467.521684][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11201, tgid 11201 (syz-executor), ts 144614828769, free_ts 144544285258 [ 467.530594][ C3] post_alloc_hook+0x1c0/0x230 [ 467.532807][ C3] get_page_from_freelist+0x132b/0x38e0 [ 467.536041][ C3] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 467.539142][ C3] alloc_pages_mpol+0x1fb/0x550 [ 467.541593][ C3] new_slab+0x247/0x330 [ 467.543766][ C3] ___slab_alloc+0xcf2/0x1740 [ 467.546202][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 467.548971][ C3] __kmalloc_noprof+0x2f2/0x510 [ 467.551499][ C3] fib6_info_alloc+0x40/0x160 [ 467.571701][ C3] ip6_route_info_create+0x14c/0x870 [ 467.574432][ C3] ip6_route_add.part.0+0x22/0x1d0 [ 467.577606][ C3] ip6_route_add+0x45/0x60 [ 467.597048][ C3] addrconf_add_mroute+0x1dd/0x350 [ 467.599436][ C3] addrconf_add_dev+0x14e/0x1c0 [ 467.616123][ C3] addrconf_init_auto_addrs+0x201/0x810 [ 467.621487][ C3] addrconf_notify+0xe93/0x19e0 [ 467.624011][ C3] page last free pid 11273 tgid 11271 stack trace: [ 467.632643][ C3] __free_frozen_pages+0x7d5/0x10f0 [ 467.635121][ C3] device_release+0xa4/0x240 [ 467.656153][ C3] kobject_put+0x1e7/0x5a0 [ 467.658153][ C3] netdev_run_todo+0x7e9/0x1320 [ 467.660512][ C3] tun_chr_close+0xea/0x230 [ 467.663364][ C3] __fput+0x3ff/0xb70 [ 467.676485][ C3] task_work_run+0x150/0x240 [ 467.678213][ C3] exit_to_user_mode_loop+0xeb/0x110 [ 467.680461][ C3] do_syscall_64+0x3f6/0x4c0 [ 467.688044][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.691233][ C3] [ 467.692540][ C3] Memory state around the buggy address: [ 467.695252][ C3] ffff888025926f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 467.710278][ C3] ffff888025926f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 467.714025][ C3] >ffff888025927000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 467.717950][ C3] ^ [ 467.720271][ C3] ffff888025927080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 467.725580][ C3] ffff888025927100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 467.730064][ C3] ================================================================== [ 467.734042][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 467.738136][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 467.743119][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.751081][ C3] Call Trace: [ 467.754181][ C3] [ 467.756631][ C3] dump_stack_lvl+0x3d/0x1f0 [ 467.759886][ C3] vpanic+0x6e8/0x7a0 [ 467.763551][ C3] ? __pfx_vpanic+0x10/0x10 [ 467.767043][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 467.770422][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 467.774073][ C3] panic+0xca/0xd0 [ 467.777167][ C3] ? __pfx_panic+0x10/0x10 [ 467.781969][ C3] ? end_report+0x4c/0x170 [ 467.785986][ C3] ? rcu_is_watching+0x12/0xc0 [ 467.789454][ C3] ? lock_release+0x201/0x2f0 [ 467.793207][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 467.796709][ C3] check_panic_on_warn+0xab/0xb0 [ 467.799713][ C3] end_report+0x107/0x170 [ 467.802265][ C3] kasan_report+0xee/0x110 [ 467.805532][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 467.808859][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 467.813700][ C3] __kasan_check_byte+0x36/0x50 [ 467.819182][ C3] lock_acquire+0xfc/0x350 [ 467.821968][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 467.825360][ C3] ? .slowpath+0x9/0x18 [ 467.828631][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 467.832905][ C3] ? p9_req_put+0xaf/0x250 [ 467.836188][ C3] p9_req_put+0xaf/0x250 [ 467.840724][ C3] req_done+0x1dc/0x2e0 [ 467.845296][ C3] ? __pfx_req_done+0x10/0x10 [ 467.847721][ C3] ? debug_object_activate+0x2ec/0x4c0 [ 467.850674][ C3] ? __pfx_req_done+0x10/0x10 [ 467.853262][ C3] vring_interrupt+0x31b/0x400 [ 467.855707][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 467.859322][ C3] __handle_irq_event_percpu+0x22c/0x7d0 [ 467.863481][ C3] handle_irq_event+0xab/0x1e0 [ 467.868978][ C3] handle_edge_irq+0x3ca/0x9e0 [ 467.872798][ C3] __common_interrupt+0xcd/0x2f0 [ 467.876241][ C3] common_interrupt+0x61/0xe0 [ 467.878919][ C3] asm_common_interrupt+0x26/0x40 [ 467.881617][ C3] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 467.884840][ C3] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 a8 ab 8b e8 c8 e3 17 0a 65 66 c7 05 26 4f 5a 12 00 00 e8 69 44 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 20 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 467.901504][ C3] RSP: 0018:ffffc900006f8f28 EFLAGS: 00000206 [ 467.905808][ C3] RAX: 00000000002a494e RBX: 00000000ffffffff RCX: ffffffff81c3747f [ 467.911897][ C3] RDX: 0000000000000000 RSI: ffffffff8de513b8 RDI: ffffffff8c162b00 [ 467.917018][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 467.923358][ C3] R10: ffffffff90ab5c97 R11: 0000000000000000 R12: 0000000000000282 [ 467.928426][ C3] R13: 000000000000000a R14: 1ffff920000df1ed R15: ffffed1003bda000 [ 467.932463][ C3] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 467.935643][ C3] ? handle_softirqs+0x1d7/0x8e0 [ 467.938378][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 467.941825][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 467.945958][ C3] __irq_exit_rcu+0x109/0x170 [ 467.949581][ C3] irq_exit_rcu+0x9/0x30 [ 467.953298][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 467.956787][ C3] [ 467.958624][ C3] [ 467.960252][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.964347][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 467.968059][ C3] Code: 0c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 03 16 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 467.979427][ C3] RSP: 0018:ffffc90000197df8 EFLAGS: 00000282 [ 467.983102][ C3] RAX: 00000000002a494b RBX: 0000000000000003 RCX: ffffffff8b940c29 [ 467.990833][ C3] RDX: 0000000000000000 RSI: ffffffff8de513b8 RDI: ffffffff8c162b00 [ 467.998720][ C3] RBP: ffffed1003bda000 R08: 0000000000000001 R09: ffffed100d4e6655 [ 468.006030][ C3] R10: ffff88806a7332ab R11: 0000000000000000 R12: 0000000000000003 [ 468.012906][ C3] R13: ffff88801ded0000 R14: ffffffff90ab5c90 R15: 0000000000000000 [ 468.018386][ C3] ? ct_kernel_exit+0x139/0x190 [ 468.022159][ C3] default_idle+0x13/0x20 [ 468.024815][ C3] default_idle_call+0x6d/0xb0 [ 468.027768][ C3] do_idle+0x391/0x510 [ 468.030387][ C3] ? __pfx_do_idle+0x10/0x10 [ 468.035652][ C3] ? trace_sched_exit_tp+0x2f/0x120 [ 468.039063][ C3] cpu_startup_entry+0x4f/0x60 [ 468.042451][ C3] start_secondary+0x21d/0x2b0 [ 468.045164][ C3] ? __pfx_start_secondary+0x10/0x10 [ 468.048525][ C3] common_startup_64+0x13e/0x148 [ 468.051491][ C3] [ 468.053564][ C3] Kernel Offset: disabled [ 468.055448][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:42:58 Registers: info registers vcpu 0 CPU#0 RAX=ffffea0000f44b00 RBX=ffff88803d12c608 RCX=ffffea0000f44a01 RDX=ffffea0000f44a00 RSI=ffffffff816cb6f8 RDI=0000000000000007 RBP=ffff88803d12c608 RSP=ffffc90000007b80 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88806a4392a0 R13=ffff88801b8a0800 R14=0000000000000000 R15=ffff88801b885800 RIP=ffffffff8221b6a5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003de78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb9ff18f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb9ff1cd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb9ff1cd6 00007ffeb9ff1cdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb796c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb796c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb796c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb796c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb796c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb796c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=1ffff11004e1ab31 RDX=1ffff11004dd03f7 RSI=ffffffff849b0245 RDI=ffffc9000389f844 RBP=ffffc9000389f840 RSP=ffffc9000389f6b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000800 R11=0000000000000000 R12=000000000000022d R13=00000000000007ff R14=000000000000015d R15=0000000000000008 RIP=ffffffff849b03c0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558ff06500 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdcd0d6020 CR3=000000002901b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46781976c3 00007f46781976c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcd0d8160 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558ff2ec62 000055558ff2e920 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558ff4f2bc 000055558ff4ed80 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003000800149803 0008001490030008 0014880300080014 8003000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102a01000138004 0a1000060102de00 080015a003000800 1598030008001590 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 041580030fffffff ffffff0414f00300 080014e803000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14e00300080014d8 0300080014d0030f ffffffffffff0414 c00300080014b803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080014b0030fff ffffffffff0414a0 0300080014980300 0800149003000800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff8880346eb3b8 RBX=0000000000000006 RCX=ffffffff8198136c RDX=1ffff110068dd677 RSI=0000000000000000 RDI=ffff8880346eb3d0 RBP=ffffc900045c74f0 RSP=ffffc900045c73c0 R8 =0000000000000001 R9 =fffff520008b8e66 R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888044868000 R14=ffff88805ef7a930 R15=ffff888044869000 RIP=ffffffff84eb1540 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0a467b3f98 CR3=000000004fe67000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000025dfdbfe 0000000004210010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc45915d26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc45915d26 00007ffc45915d2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf90212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf90212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf90212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf90212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf90212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf90212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65e94af00001000c 0000000200009017 0001000c80040034 0000000a0000000e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000600000009 000010000001000c 0000200000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000900000008 0001000c80030028 0000000c0000000a 0002000c00000002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005000800008000 000000090001000c 0000000300000009 0001000c00000009 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000080001000c 800300280000000c 0000000a0002000c 0000000200010006 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000900001000 0001000c00002000 000000040001000c 00000bcb65e94af0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000c00000002 000090170001000c 800400340000000a 0000000e0002000c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85644675 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc900006f85b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000043 R14=ffffffff9b112060 R15=ffffffff85644610 RIP=ffffffff8564469f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555558aa3808 CR3=000000003cd23000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2837e580 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2837e706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2837e706 00007fff2837e70c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a48612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a48612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a48612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a48612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a48612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a48612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000