last executing test programs: 11m13.327500033s ago: executing program 32 (id=5489): r0 = fsopen(&(0x7f0000000240)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10m18.507605061s ago: executing program 33 (id=8442): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x28, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x12, 0x1, 0x0, 0x0, @str='\xfe\xff\xff\xff*%*[-#\xd9&-\x00'}]}, 0x28}}, 0x0) 9m14.945451488s ago: executing program 3 (id=10535): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd451, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 9m14.940670272s ago: executing program 3 (id=10537): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000580)={0xd52, 0x8000, 0x1000006, 0x8000004, 0x1fc, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x5c, 0x3, 0x1, 0x4, 0x9c, 0xff, 0x6}) 9m14.698879627s ago: executing program 3 (id=10540): setrlimit(0x1, &(0x7f0000000000)) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f0000001940)=""/4086, 0xff6) 9m14.693759456s ago: executing program 3 (id=10542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 9m14.632579153s ago: executing program 3 (id=10544): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 9m14.632311989s ago: executing program 3 (id=10545): r0 = mq_open(&(0x7f0000000100)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x1000000000000000, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) 9m2.908702645s ago: executing program 1 (id=10917): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) syz_clone(0x20223000, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x0) 9m2.574624238s ago: executing program 1 (id=10927): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x7f, 0x4}) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 9m2.170585834s ago: executing program 1 (id=10938): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 9m2.16896879s ago: executing program 1 (id=10940): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[r1], 0x1}) 9m2.10153118s ago: executing program 1 (id=10943): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 9m2.017483295s ago: executing program 1 (id=10946): ftruncate(0xffffffffffffffff, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x12e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xffffffff80000000, 0x0, 0x0) 8m58.622699533s ago: executing program 34 (id=10545): r0 = mq_open(&(0x7f0000000100)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x1000000000000000, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) 8m46.039438112s ago: executing program 35 (id=10946): ftruncate(0xffffffffffffffff, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x12e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xffffffff80000000, 0x0, 0x0) 7m39.082038406s ago: executing program 0 (id=12875): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc97a, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 7m38.998168206s ago: executing program 0 (id=12876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000000c0)={0x8, "a5497074f68ebb2c"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m38.87357893s ago: executing program 0 (id=12880): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10022, 0x0) 7m38.333050025s ago: executing program 0 (id=12890): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 7m38.199934565s ago: executing program 0 (id=12893): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 7m38.121518321s ago: executing program 0 (id=12896): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) listen(r0, 0x80000000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 7m22.089854201s ago: executing program 36 (id=12896): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) listen(r0, 0x80000000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 6m3.68278624s ago: executing program 6 (id=14913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "f18f6578e84065a7", "7e443705b36051956863188ee23a5f589cab500bb83a32527257e9349bf27712", "2f307a17", "fc8555794a817dda"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c47f49541ce800", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "00f97667", '\x00\x00\x00\x00!\x00'}, 0x38) 6m3.592687814s ago: executing program 6 (id=14914): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/80, 0x50}], 0x1) 6m3.451439994s ago: executing program 6 (id=14922): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m3.401731005s ago: executing program 6 (id=14925): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 6m3.316305478s ago: executing program 6 (id=14928): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="b8759b431a05b9319c", 0x9}], 0x1}}], 0x1, 0x20000000) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x747f}], 0x1, 0x40, 0x0) 6m2.647418447s ago: executing program 6 (id=14942): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.freeze\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 6m2.524400757s ago: executing program 37 (id=14942): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.freeze\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 4m28.146555696s ago: executing program 8 (id=16865): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) 4m27.926654301s ago: executing program 8 (id=16870): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c394f305916c4516999da286dddd75", 0x10, 0x0, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="fb76f11b713b"}, 0x14) 4m27.856465s ago: executing program 8 (id=16873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x8004, 0x7f, 0xc6d2, 0xfd, "00000807000000f61500000001000000000002", 0x240000, 0x1fd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m27.600728737s ago: executing program 8 (id=16876): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 4m27.545029201s ago: executing program 8 (id=16878): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) 4m27.195134978s ago: executing program 8 (id=16883): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000200)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @private2, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "562efc99e0ec"}}}}}}}, 0x0) 4m27.095013159s ago: executing program 38 (id=16883): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000200)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @private2, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "562efc99e0ec"}}}}}}}, 0x0) 3m32.740539209s ago: executing program 9 (id=17779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000100039", @ANYRES32=0x0, @ANYBLOB="01d2a446bb90df8d9b"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendto(0xffffffffffffffff, 0x0, 0x0, 0x44, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x4ae, 0x1, 0x80000005, 0x3, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x40000000000002}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) 3m32.549121547s ago: executing program 9 (id=17780): socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') close(0x3) r1 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) read(r1, &(0x7f0000000000)=""/76, 0x4c) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1, 0x2, 0x2) 3m31.588502379s ago: executing program 9 (id=17782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf2ff, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m31.449841592s ago: executing program 9 (id=17783): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000001c0)={0x79c, r0, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) 3m31.237639872s ago: executing program 9 (id=17785): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 3m31.108490443s ago: executing program 9 (id=17786): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) close(0x3) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) 3m14.947156148s ago: executing program 39 (id=17786): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) close(0x3) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) 1.727331319s ago: executing program 2 (id=21446): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)="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", 0x15c}, {&(0x7f0000000e80)="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", 0x1ba}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9", 0xc2}], 0x1}}], 0x2, 0x50) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.663184129s ago: executing program 4 (id=21447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000070900020063"], 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x8094) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.473513736s ago: executing program 4 (id=21450): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"86dbb8b3cba28d7abac784cac0f10ab1", 0x0, 0x0, {0x5, 0x5}, {0x2, 0x8}, 0x7fffffffffffffff, [0x401, 0x500000000000000, 0x2, 0x800, 0x100000001, 0x4, 0x8001, 0x5, 0x7, 0x9, 0x1, 0x600000, 0x80000001, 0x8, 0xa, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xfffff296, 0x9, 0x10}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.242692374s ago: executing program 4 (id=21452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x9}}}}}}}, 0x0) 819.694911ms ago: executing program 2 (id=21456): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) 669.809564ms ago: executing program 2 (id=21459): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"87122d2db706848e61803cc75966f600", 0x0, 0x0, {0x8, 0xaf}, {0x2, 0x8}, 0x0, [0x4, 0x8001, 0x106, 0x6, 0x8, 0x9, 0x942, 0x2, 0x9, 0x3, 0x7, 0x2, 0x21, 0x7, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"86dbb8b3cba28d7abac784cac0f10ab1", 0x0, r0, {0x5, 0x5}, {0x2, 0x8}, 0x7fffffffffffffff, [0x401, 0x500000000000000, 0x2, 0x800, 0x100000001, 0x4, 0x8001, 0x5, 0x7, 0x9, 0x1, 0x600000, 0x80000001, 0x8, 0xa, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x7, 0x20493859, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x10433}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @mcast1}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a"], 0xd4}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 475.239557ms ago: executing program 2 (id=21463): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 404.768599ms ago: executing program 2 (id=21466): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x4, 0x2004c8, 0x8000000, 0xfffffffffffffffc, 0x4, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x18304}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x40, 0x88, 0x0, 0x8, 0x8d], 0xfec00000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 404.545672ms ago: executing program 5 (id=21467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848", 0x14}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x71, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x100, 0x106c, 0x100, 0x7fffffffffffc, 0xc, 0xfffffffffffffffe, 0x20000000000008, 0x20000000, 0x1, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 404.335859ms ago: executing program 7 (id=21468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}]}}]}, 0x44}}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3c002400000000000600000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 404.152627ms ago: executing program 5 (id=21469): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"87122d2db706848e61803cc75966f600", 0x0, 0x0, {0x8, 0xaf}, {0x2, 0x8}, 0x0, [0x4, 0x8001, 0x106, 0x6, 0x8, 0x9, 0x942, 0x2, 0x9, 0x3, 0x7, 0x2, 0x21, 0x7, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"86dbb8b3cba28d7abac784cac0f10ab1", 0x0, r0, {0x5, 0x5}, {0x2, 0x8}, 0x7fffffffffffffff, [0x401, 0x500000000000000, 0x2, 0x800, 0x100000001, 0x4, 0x8001, 0x5, 0x7, 0x9, 0x1, 0x600000, 0x80000001, 0x8, 0xa, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xfffff296, 0x9, 0x10}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 303.551785ms ago: executing program 7 (id=21470): socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 303.325347ms ago: executing program 5 (id=21471): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x141000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) 300.432163ms ago: executing program 7 (id=21472): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private1, @local, {[], {0xfffc, 0xe22, 0x30, 0x0, @gue={{0x1, 0x1, 0x3, 0xf6, 0x0, @void}, "85ce23b2a2f00c5e0e7a79e4ca107dd7a248aa015c3c4138fb15c68e503f0d9526872da8"}}}}}}}, 0x0) 299.967667ms ago: executing program 4 (id=21473): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_conf_req={{0x4, 0x1, 0x4}, {0x1a9, 0x7fff}}, @l2cap_disconn_req={{0x6, 0xb, 0x4}, {0x2, 0xff}}]}}, 0x19) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 299.094937ms ago: executing program 4 (id=21474): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51"]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) chdir(&(0x7f0000000300)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000000)='usrquota') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5}}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000001340)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xc, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0xffffffff, 0x12d5c, 0x1294b}}, 0x44) read$FUSE(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 197.207283ms ago: executing program 2 (id=21475): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a", 0x88}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f50539", 0x23}], 0x7, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc350256c77f4e6e63466d3481f6bc59325ad99a551a874b901ed7478d589452109e200940bc27d0efb7bbce0bf88495c5e550beba28b917ea48cbb953b7ddf6fe250ead7aa0091e4679f3c41016ea"], 0xd4}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 195.505696ms ago: executing program 7 (id=21476): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a", 0x3a}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141", 0x14}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)}], 0x7, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc350256c77f4e6e63466d3481f6bc59325ad99a551a874b901ed7478d589452109e200940bc27d0efb7bbce0bf88495c5e550beba28b917ea48cbb953b7ddf6fe250ead7aa0091e4679f3c41016ea"], 0xd4}}, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 82.811256ms ago: executing program 7 (id=21477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 77.208028ms ago: executing program 5 (id=21478): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f00000000c0)={0x2, 0x66, 0x3ff, 0x100004, 0x3}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x404) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0}, 0x4000880) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000180), 0x0) 76.79552ms ago: executing program 7 (id=21479): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) socket$netlink(0x10, 0x3, 0x0) read(r0, &(0x7f00000019c0)=""/4107, 0x100b) 65.266997ms ago: executing program 4 (id=21480): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"87122d2db706848e61803cc75966f600", 0x0, 0x0, {0x8, 0xaf}, {0x2, 0x8}, 0x0, [0x4, 0x8001, 0x106, 0x6, 0x8, 0x9, 0x942, 0x2, 0x9, 0x3, 0x7, 0x2, 0x21, 0x7, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"86dbb8b3cba28d7abac784cac0f10ab1", 0x0, r0, {0x5, 0x5}, {0x2, 0x8}, 0x7fffffffffffffff, [0x401, 0x500000000000000, 0x2, 0x800, 0x100000001, 0x4, 0x8001, 0x5, 0x7, 0x9, 0x1, 0x600000, 0x80000001, 0x8, 0xa, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xfffff296, 0x9, 0x10}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 216.174µs ago: executing program 5 (id=21481): openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x4, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x2, 0x4, 0x4cb6, 0x0, 0x1, 0xa, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x7, 0x1, 0xeb, 0x5743393a, 0x1, 0x2e, 0x8000, 0x2, 0x2, 0x8, 0xf, 0x10000, 0xfffffffe, 0x3, 0x20101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x5, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0x7, 0x4, 0x5, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1, 0x8, 0x2, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x11, 0xa39a, 0x8, 0x76, 0x2, 0x8, 0x3, 0xa, 0x40, 0x4, 0x4, 0x0, 0x0, 0x6, 0x8001, 0x7, 0x5a6, 0x3, 0x6, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8244, 0x9, 0xacf, 0xedb, 0xe771, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x6, 0x10006, 0x20000, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x80000000, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0xffffffff, 0x8, 0x3ff, 0x6, 0x0, 0x8001, 0x33, 0x5, 0x4, 0x6, 0x4, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x7, 0x7fffffff, 0x8, 0x1, 0xffffffff, 0xb, 0x46, 0xa5f, 0xfff, 0x2, 0x7, 0xf, 0x1, 0x3db1], [0x0, 0x3, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x12, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x1, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0x3141, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0x5, 0x1, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffffff, 0x5, 0xb]}, 0x45c) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000580)=0xfc) 0s ago: executing program 5 (id=21482): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000001440)='./bus\x00', 0x136) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x1400) unlink(&(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 0s ago: executing program 5 (id=21483): unshare(0x6020400) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) inotify_init() openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x7}) kernel console output (not intermixed with test programs): ing 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.015796][ T2092] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.019944][ T2092] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 704.025452][ T2092] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 704.028351][ T2092] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.042593][ T2092] usb 9-1: config 0 descriptor?? [ 704.489789][ T2092] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 706.646017][T16608] overlayfs: failed to clone upperpath [ 706.704381][ T2092] usb 9-1: USB disconnect, device number 13 [ 706.768319][ T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.777556][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.783986][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.787420][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.915231][T16638] team_slave_1: Caught tx_queue_len zero misconfig [ 707.031229][T16653] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 707.262262][ T40] kauditd_printk_skb: 119 callbacks suppressed [ 707.262344][ T40] audit: type=1400 audit(2000000179.749:40685): avc: denied { read } for pid=16670 comm="syz.2.19026" dev="nsfs" ino=4026533423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 707.282491][ T40] audit: type=1400 audit(2000000179.749:40686): avc: denied { open } for pid=16670 comm="syz.2.19026" path="net:[4026533423]" dev="nsfs" ino=4026533423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 707.292153][ T40] audit: type=1400 audit(2000000179.749:40687): avc: denied { create } for pid=16670 comm="syz.2.19026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 707.306183][ T40] audit: type=1400 audit(2000000179.749:40688): avc: denied { bind } for pid=16670 comm="syz.2.19026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 707.315711][ T40] audit: type=1400 audit(2000000179.749:40689): avc: denied { write } for pid=16670 comm="syz.2.19026" path="socket:[178875]" dev="sockfs" ino=178875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 707.372129][ T40] audit: type=1400 audit(2000000179.852:40690): avc: denied { mount } for pid=16674 comm="syz.4.19028" name="/" dev="9p" ino=72614051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 707.452896][ T40] audit: type=1400 audit(2000000179.918:40691): avc: denied { unmount } for pid=13791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 707.544816][ T40] audit: type=1400 audit(2000000180.012:40692): avc: denied { write } for pid=16677 comm="syz.2.19030" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 707.640382][ T40] audit: type=1400 audit(2000000180.106:40693): avc: denied { read write } for pid=16681 comm="syz.2.19032" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.655053][ T40] audit: type=1400 audit(2000000180.106:40694): avc: denied { open } for pid=16681 comm="syz.2.19032" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 708.134121][T16696] overlayfs: failed to clone lowerpath [ 708.252616][T16714] netlink: 28 bytes leftover after parsing attributes in process `syz.7.19042'. [ 708.256681][T16714] netlink: 'syz.7.19042': attribute type 7 has an invalid length. [ 708.259540][T16714] netlink: 'syz.7.19042': attribute type 8 has an invalid length. [ 708.262465][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19042'. [ 708.629521][T16749] overlayfs: failed to clone lowerpath [ 708.979404][T16774] overlayfs: failed to clone upperpath [ 709.009218][ T1891] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 709.168970][ T1891] usb 9-1: Using ep0 maxpacket: 8 [ 709.173573][ T1891] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.177577][ T1891] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.182965][ T1891] usb 9-1: config 0 interface 0 has no altsetting 0 [ 709.185327][ T1891] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 709.188084][ T1891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.195087][ T1891] usb 9-1: config 0 descriptor?? [ 709.603679][T16823] overlayfs: failed to clone lowerpath [ 709.642808][ T1891] hid_parser_main: 28 callbacks suppressed [ 709.642822][ T1891] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 709.648972][ T1891] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 709.651202][ T1891] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 709.653392][ T1891] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 709.655868][ T1891] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 709.658475][ T1891] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 709.858478][ T1891] usb 9-1: USB disconnect, device number 14 [ 710.213031][T16864] bridge_slave_1: Caught tx_queue_len zero misconfig [ 710.853033][ T2092] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 711.044921][ T2092] usb 9-1: Using ep0 maxpacket: 16 [ 711.050901][ T2092] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 711.054027][ T2092] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 711.057602][ T2092] usb 9-1: Product: syz [ 711.059031][ T2092] usb 9-1: Manufacturer: syz [ 711.060556][ T2092] usb 9-1: SerialNumber: syz [ 711.065380][ T2092] usb 9-1: config 0 descriptor?? [ 711.275301][T16901] syz.2.19115 (16901): drop_caches: 2 [ 711.298585][ T2092] usb 9-1: USB disconnect, device number 15 [ 711.439764][T16924] xt_hashlimit: size too large, truncated to 1048576 [ 711.765714][T16954] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 712.269378][T16990] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19152'. [ 712.606102][ T40] kauditd_printk_skb: 194 callbacks suppressed [ 712.606114][ T40] audit: type=1400 audit(2000000184.759:40889): avc: denied { ioctl } for pid=17017 comm="syz.2.19161" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 712.814634][ C2] hrtimer: interrupt took 10925470 ns [ 712.872907][ T40] audit: type=1400 audit(2000000185.013:40890): avc: denied { mounton } for pid=17028 comm="syz.5.19165" path="/2834/file0" dev="tmpfs" ino=14673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 712.882953][ T40] audit: type=1400 audit(2000000185.022:40891): avc: denied { mount } for pid=17028 comm="syz.5.19165" name="/" dev="9p" ino=72614051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 713.012217][ T40] audit: type=1400 audit(2000000185.144:40892): avc: denied { map_create } for pid=17036 comm="syz.2.19168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 713.024806][ T40] audit: type=1400 audit(2000000185.144:40893): avc: denied { write } for pid=17036 comm="syz.2.19168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.038961][ T40] audit: type=1400 audit(2000000185.144:40894): avc: denied { read } for pid=17036 comm="syz.2.19168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.103101][T17045] overlayfs: failed to clone upperpath [ 713.167838][ T40] audit: type=1400 audit(2000000185.285:40895): avc: denied { create } for pid=17051 comm="syz.5.19173" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 713.192745][ T40] audit: type=1400 audit(2000000185.313:40896): avc: denied { mounton } for pid=17051 comm="syz.5.19173" path="/2836/file0" dev="tmpfs" ino=14684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 713.265224][ T40] audit: type=1400 audit(2000000185.378:40897): avc: denied { remount } for pid=17051 comm="syz.5.19173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 713.279416][ T40] audit: type=1400 audit(2000000185.388:40898): avc: denied { unlink } for pid=17061 comm="syz.2.19177" name="#50" dev="tmpfs" ino=2268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 713.323882][T17065] speed is unknown, defaulting to 1000 [ 713.496445][T17074] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 713.499849][T17065] ip6_vti0 speed is unknown, defaulting to 1000 [ 714.305812][T17115] netfs: Couldn't get user pages (rc=-14) [ 714.935331][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 715.107323][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.116467][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.120527][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 715.125955][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 715.131045][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.143431][ T9] usb 9-1: config 0 descriptor?? [ 715.585876][ T9] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 715.691122][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19237'. [ 715.864104][ T8298] usb 9-1: USB disconnect, device number 16 [ 716.082867][T17236] overlayfs: failed to clone upperpath [ 717.971327][ T40] kauditd_printk_skb: 183 callbacks suppressed [ 717.971345][ T40] audit: type=1400 audit(2000000189.788:41082): avc: denied { remount } for pid=17379 comm="syz.4.19305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 718.054100][ T40] audit: type=1400 audit(2000000189.872:41083): avc: denied { unmount } for pid=13791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 718.076969][ T40] audit: type=1400 audit(2000000189.891:41084): avc: denied { mount } for pid=17384 comm="syz.4.19306" name="/" dev="ramfs" ino=183753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 718.264189][ T40] audit: type=1400 audit(2000000190.069:41085): avc: denied { read write } for pid=17389 comm="syz.4.19308" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 718.275684][ T40] audit: type=1400 audit(2000000190.069:41086): avc: denied { open } for pid=17389 comm="syz.4.19308" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 718.285667][ T40] audit: type=1400 audit(2000000190.069:41087): avc: denied { ioctl } for pid=17389 comm="syz.4.19308" path="/dev/video1" dev="devtmpfs" ino=956 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 718.297130][ T40] audit: type=1400 audit(2000000190.098:41088): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50566 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 718.608707][ T40] audit: type=1400 audit(2000000190.388:41089): avc: denied { create } for pid=17398 comm="syz.4.19312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.626947][ T40] audit: type=1400 audit(2000000190.388:41090): avc: denied { create } for pid=17398 comm="syz.4.19312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 718.651177][ T40] audit: type=1400 audit(2000000190.398:41091): avc: denied { create } for pid=17398 comm="syz.4.19312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 719.316206][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 719.319519][ T25] block nbd0: Possible stuck request ffff888029188000: control (read@0,1024B). Runtime 360 seconds [ 719.323237][ T25] block nbd0: Possible stuck request ffff888029188200: control (read@1024,1024B). Runtime 360 seconds [ 719.327318][ T25] block nbd0: Possible stuck request ffff888029188400: control (read@2048,1024B). Runtime 360 seconds [ 719.331585][ T25] block nbd0: Possible stuck request ffff888029188600: control (read@3072,1024B). Runtime 360 seconds [ 720.737183][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19351'. [ 720.741331][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19351'. [ 720.753778][T17491] erspan1: entered promiscuous mode [ 720.755801][T17491] erspan1: entered allmulticast mode [ 721.219473][T17515] netlink: 'syz.5.19362': attribute type 6 has an invalid length. [ 722.041067][T17554] SELinux: failed to load policy [ 723.322021][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 723.322037][ T40] audit: type=1400 audit(2000000194.807:41179): avc: denied { read } for pid=17629 comm="syz.4.19407" dev="nsfs" ino=4026534483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 723.334365][ T40] audit: type=1400 audit(2000000194.807:41180): avc: denied { open } for pid=17629 comm="syz.4.19407" path="net:[4026534483]" dev="nsfs" ino=4026534483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 723.344446][ T40] audit: type=1400 audit(2000000194.807:41181): avc: denied { create } for pid=17629 comm="syz.4.19407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.382651][ T40] audit: type=1400 audit(2000000194.873:41182): avc: denied { write } for pid=17629 comm="syz.4.19407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.390732][ T40] audit: type=1400 audit(2000000194.873:41183): avc: denied { read } for pid=17629 comm="syz.4.19407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.397384][ T40] audit: type=1400 audit(2000000194.873:41184): avc: denied { ioctl } for pid=17629 comm="syz.4.19407" path="socket:[184857]" dev="sockfs" ino=184857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.423181][ T40] audit: type=1400 audit(2000000194.911:41185): avc: denied { create } for pid=17636 comm="syz.5.19410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 723.433050][ T40] audit: type=1400 audit(2000000194.920:41186): avc: denied { bpf } for pid=17636 comm="syz.5.19410" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 723.439800][ T40] audit: type=1400 audit(2000000194.920:41187): avc: denied { perfmon } for pid=17636 comm="syz.5.19410" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 723.447674][ T40] audit: type=1400 audit(2000000194.920:41188): avc: denied { prog_run } for pid=17636 comm="syz.5.19410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 723.669003][T17644] overlayfs: failed to clone upperpath [ 724.602886][ T5998] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 724.762619][ T5998] usb 9-1: Using ep0 maxpacket: 8 [ 724.766481][ T5998] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 724.770610][ T5998] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 724.775091][ T5998] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 724.779694][ T5998] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.784772][ T5998] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 724.788221][ T5998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.799797][ T5998] usbtmc 9-1:16.0: bulk endpoints not found [ 725.562938][T17696] overlayfs: failed to clone lowerpath [ 725.567365][T17696] overlayfs: failed to clone lowerpath [ 725.703072][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19438'. [ 727.534440][T17765] overlayfs: failed to clone upperpath [ 727.560745][ T8298] usb 9-1: USB disconnect, device number 17 [ 727.969753][T17792] pim6reg1: entered promiscuous mode [ 727.973329][T17792] pim6reg1: entered allmulticast mode [ 728.675316][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 728.675373][ T40] audit: type=1400 audit(2000000199.845:41258): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=50566 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 728.699622][ T40] audit: type=1400 audit(2000000199.864:41259): avc: denied { read } for pid=17836 comm="syz.2.19490" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 728.722379][ T40] audit: type=1400 audit(2000000199.883:41260): avc: denied { open } for pid=17836 comm="syz.2.19490" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 728.741984][ T40] audit: type=1400 audit(2000000199.902:41261): avc: denied { ioctl } for pid=17836 comm="syz.2.19490" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 728.819924][ T40] audit: type=1400 audit(2000000199.967:41262): avc: denied { read write } for pid=17842 comm="syz.2.19493" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 728.828905][ T40] audit: type=1400 audit(2000000199.967:41263): avc: denied { open } for pid=17842 comm="syz.2.19493" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 728.837349][ T40] audit: type=1400 audit(2000000199.967:41264): avc: denied { ioctl } for pid=17842 comm="syz.2.19493" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 728.941188][T17843] kvm: kvm [17842]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 728.945557][T17843] kvm: kvm [17842]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 728.966494][T17843] kvm: kvm [17842]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 728.995297][T17843] kvm: kvm [17842]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xfffffc18 [ 728.999146][T17843] kvm: kvm [17842]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xfffffc18 [ 729.001775][T17856] overlayfs: failed to clone upperpath [ 729.047774][ T40] audit: type=1400 audit(2000000200.193:41265): avc: denied { write } for pid=17857 comm="syz.5.19499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 729.056756][ T40] audit: type=1400 audit(2000000200.193:41266): avc: denied { read } for pid=17857 comm="syz.5.19499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 729.057440][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19499'. [ 729.066013][ T40] audit: type=1400 audit(2000000200.193:41267): avc: denied { ioctl } for pid=17857 comm="syz.5.19499" path="socket:[184969]" dev="sockfs" ino=184969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 729.147945][T17862] ip6gre7: entered promiscuous mode [ 729.150209][T17862] ip6gre7: entered allmulticast mode [ 729.220639][T17864] syzkaller0: entered promiscuous mode [ 729.222911][T17864] syzkaller0: entered allmulticast mode [ 729.430331][T17883] overlayfs: failed to clone upperpath [ 729.494179][T17896] overlayfs: failed to clone upperpath [ 729.519425][T17899] overlayfs: failed to clone upperpath [ 730.646296][ T8298] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 730.818307][ T8298] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.822514][ T8298] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.825900][ T8298] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 730.831036][ T8298] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 730.834251][ T8298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.838844][ T8298] usb 9-1: config 0 descriptor?? [ 731.287978][ T8298] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 731.461160][T17986] netlink: 'syz.7.19550': attribute type 3 has an invalid length. [ 731.566309][T17992] overlayfs: failed to clone lowerpath [ 731.571698][T17992] overlayfs: failed to clone lowerpath [ 731.608220][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 731.940079][T18011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19561'. [ 732.470016][T18025] overlayfs: failed to clone upperpath [ 733.160100][T18072] overlayfs: failed to clone upperpath [ 733.506549][T30146] usb 9-1: USB disconnect, device number 18 [ 733.991222][T18096] overlayfs: failed to clone upperpath [ 734.014450][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 734.014467][ T40] audit: type=1400 audit(2000000204.846:41395): avc: denied { mounton } for pid=18097 comm="syz.2.19594" path="/proc/1140/task" dev="proc" ino=185197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 734.047265][ T40] audit: type=1400 audit(2000000204.865:41396): avc: denied { mount } for pid=18097 comm="syz.2.19594" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 734.126673][ T40] audit: type=1400 audit(2000000204.949:41397): avc: denied { mount } for pid=18104 comm="syz.7.19597" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 734.155311][ T40] audit: type=1400 audit(2000000204.949:41398): avc: denied { mounton } for pid=18104 comm="syz.7.19597" path="/2665/file0" dev="tmpfs" ino=13859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 734.177004][ T40] audit: type=1400 audit(2000000204.996:41399): avc: denied { unmount } for pid=13791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 734.243854][ T40] audit: type=1400 audit(2000000205.062:41400): avc: denied { remount } for pid=18104 comm="syz.7.19597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 734.254316][ T40] audit: type=1400 audit(2000000205.062:41401): avc: denied { bpf } for pid=18104 comm="syz.7.19597" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 734.268902][ T40] audit: type=1400 audit(2000000205.081:41402): avc: denied { read write } for pid=18111 comm="syz.4.19599" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 734.278856][ T40] audit: type=1400 audit(2000000205.081:41403): avc: denied { open } for pid=18111 comm="syz.4.19599" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 734.388484][ T40] audit: type=1400 audit(2000000205.203:41404): avc: denied { create } for pid=18113 comm="syz.4.19600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 735.591301][T18184] overlayfs: failed to clone upperpath [ 736.246647][T18203] serio: Serial port pty28 [ 736.936327][T18232] netlink: 'syz.4.19644': attribute type 1 has an invalid length. [ 736.968807][T18232] bond3: (slave geneve2): making interface the new active one [ 736.972255][T18232] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 736.978911][ T1237] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 736.981799][ T1237] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 736.989289][ T1237] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 736.995148][ T1237] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 738.250126][T18288] xt_hashlimit: size too large, truncated to 1048576 [ 738.639215][T18315] overlayfs: failed to clone upperpath [ 738.656152][T18317] overlayfs: failed to clone upperpath [ 739.378852][ T40] kauditd_printk_skb: 167 callbacks suppressed [ 739.378869][ T40] audit: type=1400 audit(2000000209.884:41572): avc: denied { read write } for pid=10986 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 739.392096][ T40] audit: type=1400 audit(2000000209.884:41573): avc: denied { open } for pid=10986 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 739.406328][ T40] audit: type=1400 audit(2000000209.884:41574): avc: denied { ioctl } for pid=10986 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 739.418285][ T40] audit: type=1400 audit(2000000209.894:41575): avc: denied { bind } for pid=18383 comm="syz.7.19701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 739.425609][ T40] audit: type=1400 audit(2000000209.912:41576): avc: denied { recv } for pid=9 comm="kworker/0:0" saddr=127.0.0.1 src=50566 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 739.435238][ T40] audit: type=1400 audit(2000000209.922:41577): avc: denied { name_bind } for pid=18392 comm="syz.5.19706" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 739.443479][ T40] audit: type=1400 audit(2000000209.922:41578): avc: denied { node_bind } for pid=18392 comm="syz.5.19706" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 739.487305][ T40] audit: type=1400 audit(2000000209.978:41579): avc: denied { mounton } for pid=18398 comm="syz.7.19709" path="/2705/file0" dev="tmpfs" ino=14077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 739.557560][ T40] audit: type=1400 audit(2000000210.053:41580): avc: denied { remount } for pid=18398 comm="syz.7.19709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 739.662524][ T40] audit: type=1400 audit(2000000210.138:41581): avc: denied { read write } for pid=18406 comm="syz.2.19712" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 740.025017][ T1156] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xde [ 740.605965][T18461] overlayfs: failed to clone upperpath [ 740.671290][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19731'. [ 740.986095][T18471] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 741.981069][T18533] fuse: Bad value for 'fd' [ 742.598479][T18554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19765'. [ 742.609823][T18554] vlan3: entered promiscuous mode [ 742.611504][T18554] bond0: entered promiscuous mode [ 742.838198][T18571] overlayfs: failed to clone upperpath [ 743.146916][T18423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.164361][T18590] fuse: Bad value for 'fd' [ 743.288527][T18600] overlayfs: failed to clone upperpath [ 743.742650][T18630] overlayfs: failed to clone upperpath [ 744.821022][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 744.821127][ T40] audit: type=1400 audit(2000000214.979:41734): avc: denied { write } for pid=18676 comm="syz.4.19813" path="socket:[188857]" dev="sockfs" ino=188857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 744.839962][ T40] audit: type=1400 audit(2000000214.997:41735): avc: denied { recv } for pid=5915 comm="syz-executor" saddr=127.0.0.1 src=50566 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 744.866759][ T40] audit: type=1400 audit(2000000215.035:41736): avc: denied { read } for pid=18684 comm="syz.4.19816" name="qrtr-tun" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 744.874107][ T40] audit: type=1400 audit(2000000215.035:41737): avc: denied { open } for pid=18684 comm="syz.4.19816" path="/dev/qrtr-tun" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 744.882073][ T40] audit: type=1400 audit(2000000215.035:41738): avc: denied { create } for pid=18684 comm="syz.4.19816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 744.889365][ T40] audit: type=1400 audit(2000000215.035:41739): avc: denied { connect } for pid=18684 comm="syz.4.19816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 744.895736][ T40] audit: type=1400 audit(2000000215.035:41740): avc: denied { map } for pid=18684 comm="syz.4.19816" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=189852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 744.904211][ T40] audit: type=1400 audit(2000000215.035:41741): avc: denied { read write } for pid=18684 comm="syz.4.19816" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=189852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 744.905002][T18683] netlink: 44 bytes leftover after parsing attributes in process `syz.5.19817'. [ 744.914264][ T40] audit: type=1400 audit(2000000215.035:41742): avc: denied { write } for pid=18684 comm="syz.4.19816" path="socket:[189851]" dev="sockfs" ino=189851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 744.945444][ T40] audit: type=1400 audit(2000000215.101:41743): avc: denied { create } for pid=18695 comm="syz.5.19821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 745.328623][ T5939] IPVS: starting estimator thread 0... [ 745.378066][T18722] overlayfs: failed to get inode (-116) [ 745.381525][T18722] overlayfs: failed to get inode (-116) [ 745.440724][T18720] IPVS: using max 46 ests per chain, 110400 per kthread [ 747.881687][T17074] IPVS: ip_vs_send_async error -22 [ 748.232533][ T1891] IPVS: starting estimator thread 0... [ 748.307843][ T2092] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 748.344773][T18771] IPVS: using max 46 ests per chain, 110400 per kthread [ 748.478235][ T2092] usb 9-1: Using ep0 maxpacket: 8 [ 748.481555][ T2092] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 748.484214][ T2092] usb 9-1: config 0 has no interface number 0 [ 748.486227][ T2092] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 748.499490][ T2092] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 748.503198][ T2092] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 748.507594][ T2092] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 748.512584][ T2092] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 748.515530][ T2092] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.523315][ T2092] usb 9-1: config 0 descriptor?? [ 748.529792][ T2092] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 748.897447][T18789] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 749.092457][T18808] overlayfs: failed to clone upperpath [ 749.626742][T18832] netlink: 'syz.5.19873': attribute type 4 has an invalid length. [ 749.634425][T18832] netlink: 'syz.5.19873': attribute type 4 has an invalid length. [ 750.218991][T18868] overlayfs: failed to clone upperpath [ 750.316780][ T40] kauditd_printk_skb: 5617 callbacks suppressed [ 750.316796][ T40] audit: type=1400 audit(2000000220.139:47361): avc: denied { create } for pid=18874 comm="syz.5.19891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 750.331135][ T40] audit: type=1400 audit(2000000220.148:47362): avc: denied { connect } for pid=18874 comm="syz.5.19891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 750.385626][T18877] overlayfs: failed to clone upperpath [ 750.952015][ T2092] usb 9-1: USB disconnect, device number 19 [ 750.959519][ T2092] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 751.377927][ T25] block nbd0: Possible stuck request ffff888029188000: control (read@0,1024B). Runtime 390 seconds [ 751.382562][ T25] block nbd0: Possible stuck request ffff888029188200: control (read@1024,1024B). Runtime 390 seconds [ 751.387218][ T25] block nbd0: Possible stuck request ffff888029188400: control (read@2048,1024B). Runtime 390 seconds [ 751.392168][ T25] block nbd0: Possible stuck request ffff888029188600: control (read@3072,1024B). Runtime 390 seconds [ 751.634220][ T40] audit: type=1400 audit(2000000221.377:47363): avc: denied { mount } for pid=18891 comm="syz.7.19898" name="/" dev="ramfs" ino=190816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 751.748565][ T40] audit: type=1400 audit(2000000221.480:47364): avc: denied { read write } for pid=18897 comm="syz.4.19901" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 751.757866][ T40] audit: type=1400 audit(2000000221.480:47365): avc: denied { open } for pid=18897 comm="syz.4.19901" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 751.765604][ T40] audit: type=1400 audit(2000000221.480:47366): avc: denied { mount } for pid=18897 comm="syz.4.19901" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 751.827255][ T40] audit: type=1400 audit(2000000221.565:47367): avc: denied { unmount } for pid=13791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 751.856506][ T40] audit: type=1400 audit(2000000221.584:47368): avc: denied { create } for pid=18901 comm="syz.4.19903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 751.866425][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19903'. [ 751.867807][ T40] audit: type=1400 audit(2000000221.593:47369): avc: denied { setopt } for pid=18901 comm="syz.4.19903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 751.875375][ T40] audit: type=1400 audit(2000000221.593:47370): avc: denied { bind } for pid=18901 comm="syz.4.19903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 752.124814][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19909'. [ 752.318362][T30146] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 752.496762][T30146] usb 9-1: Using ep0 maxpacket: 8 [ 752.500035][T30146] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 752.502764][T30146] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.506311][T30146] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.510013][T30146] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.513730][T30146] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.518410][T30146] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 752.521646][T30146] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.679426][T18931] syzkaller0: entered promiscuous mode [ 752.681264][T18931] syzkaller0: entered allmulticast mode [ 752.959644][T18942] netlink: 'syz.2.19920': attribute type 3 has an invalid length. [ 753.363848][T18964] overlayfs: failed to clone upperpath [ 753.641123][T18977] speed is unknown, defaulting to 1000 [ 753.713033][T18979] usbtmc 9-1:16.0: simple usb_control_msg failed -32 [ 753.723652][T18977] ip6_vti0 speed is unknown, defaulting to 1000 [ 754.057997][T18990] overlayfs: failed to clone upperpath [ 754.788275][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 755.270112][T30146] usb 9-1: USB disconnect, device number 20 [ 755.538808][T19043] netlink: 'syz.7.19959': attribute type 7 has an invalid length. [ 755.542301][T19043] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19959'. [ 755.688436][ T40] kauditd_printk_skb: 108 callbacks suppressed [ 755.688450][ T40] audit: type=1400 audit(2000000225.177:47479): avc: denied { node_bind } for pid=19050 comm="syz.4.19962" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 755.700686][ T40] audit: type=1400 audit(2000000225.177:47480): avc: denied { create } for pid=19052 comm="syz.7.19963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 755.707926][ T40] audit: type=1400 audit(2000000225.177:47481): avc: denied { bind } for pid=19052 comm="syz.7.19963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 755.714385][ T40] audit: type=1400 audit(2000000225.177:47482): avc: denied { name_bind } for pid=19052 comm="syz.7.19963" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 755.722587][ T40] audit: type=1400 audit(2000000225.177:47483): avc: denied { node_bind } for pid=19052 comm="syz.7.19963" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 755.731233][ T40] audit: type=1400 audit(2000000225.177:47484): avc: denied { setopt } for pid=19052 comm="syz.7.19963" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 755.740308][ T40] audit: type=1400 audit(2000000225.214:47485): avc: denied { sys_module } for pid=19052 comm="syz.7.19963" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 755.810522][T19057] overlayfs: failed to clone lowerpath [ 755.814951][T19057] overlayfs: failed to clone upperpath [ 755.832984][ T40] audit: type=1400 audit(2000000225.318:47486): avc: denied { recv } for pid=5915 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50566 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 755.881138][T19059] overlayfs: failed to clone upperpath [ 755.959961][ T40] audit: type=1400 audit(2000000225.430:47487): avc: denied { create } for pid=19062 comm="syz.7.19967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 755.969990][ T40] audit: type=1400 audit(2000000225.440:47488): avc: denied { ioctl } for pid=19062 comm="syz.7.19967" path="socket:[191995]" dev="sockfs" ino=191995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 756.306965][T19091] fuse: Unknown parameter 'grou00000000000000000000' [ 756.574259][T19096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19977'. [ 756.580777][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19977'. [ 757.415945][T19126] overlayfs: failed to clone upperpath [ 757.965353][T19148] fuse: Unknown parameter 'grou00000000000000000000' [ 758.608027][T19176] overlayfs: failed to clone upperpath [ 758.647650][T19179] overlayfs: failed to clone upperpath [ 758.670713][T19174] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 758.674791][T19174] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 760.091001][T19234] netlink: 'syz.7.20030': attribute type 1 has an invalid length. [ 760.601002][T19284] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20049'. [ 761.070972][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 761.070987][ T40] audit: type=1400 audit(2000000230.234:47621): avc: denied { read write } for pid=19292 comm="syz.2.20053" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 761.083301][ T40] audit: type=1400 audit(2000000230.234:47622): avc: denied { open } for pid=19292 comm="syz.2.20053" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 761.091121][ T40] audit: type=1400 audit(2000000230.234:47623): avc: denied { mount } for pid=19292 comm="syz.2.20053" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 761.203107][ T40] audit: type=1400 audit(2000000230.356:47624): avc: denied { unmount } for pid=10986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 761.230884][ T40] audit: type=1400 audit(2000000230.384:47625): avc: denied { node_bind } for pid=19295 comm="syz.4.20052" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 761.246030][ T40] audit: type=1400 audit(2000000230.393:47626): avc: denied { create } for pid=19297 comm="syz.2.20054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 761.252791][ T40] audit: type=1400 audit(2000000230.393:47627): avc: denied { connect } for pid=19297 comm="syz.2.20054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 761.261070][ T40] audit: type=1400 audit(2000000230.393:47628): avc: denied { write } for pid=19297 comm="syz.2.20054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 761.280770][ T40] audit: type=1400 audit(2000000230.393:47629): avc: denied { read } for pid=19297 comm="syz.2.20054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 761.288798][ T40] audit: type=1400 audit(2000000230.393:47630): avc: denied { write } for pid=19297 comm="syz.2.20054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 761.344773][T19309] tipc: Enabling of bearer rejected, failed to enable media [ 761.555098][T19320] fuse: Unknown parameter 'group_id00000000000000000000' [ 761.602052][T19324] netdevsim netdevsim7: Direct firmware load for / [ 761.602052][T19324] failed with error -2 [ 761.605846][T19324] netdevsim netdevsim7: Falling back to sysfs fallback for: / [ 761.605846][T19324] [ 762.007105][T19335] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 762.756050][T19381] tipc: Started in network mode [ 762.757916][T19381] tipc: Node identity e68596608aa, cluster identity 4711 [ 762.760437][T19381] tipc: Enabled bearer , priority 0 [ 762.764986][T19381] syzkaller0: MTU too low for tipc bearer [ 762.767055][T19381] tipc: Disabling bearer [ 762.828246][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20088'. [ 762.870375][T19387] veth1_to_batadv: entered allmulticast mode [ 762.874830][T19387] veth1_to_batadv: left allmulticast mode [ 763.617522][T19407] overlayfs: failed to clone upperpath [ 763.661207][T19409] tipc: Enabling of bearer rejected, failed to enable media [ 763.815198][T19425] netlink: 64 bytes leftover after parsing attributes in process `syz.5.20103'. [ 763.839684][T19428] gretap2: entered promiscuous mode [ 764.861835][T19464] fuse: Bad value for 'user_id' [ 764.863482][T19464] fuse: Bad value for 'user_id' [ 765.208025][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20125'. [ 765.542027][T19492] overlayfs: failed to clone upperpath [ 765.930146][T19518] batadv_slave_0: entered promiscuous mode [ 766.057334][T19524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 766.507621][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 766.507652][ T40] audit: type=1400 audit(2000000000.225:47751): avc: denied { module_request } for pid=19550 comm="syz.4.20159" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 766.538791][T19551] fuse: Bad value for 'fd' [ 766.540578][ T40] audit: type=1400 audit(2000000000.253:47752): avc: denied { mounton } for pid=19550 comm="syz.4.20159" path="/357/file0" dev="tmpfs" ino=1895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 766.550591][T19556] overlayfs: failed to clone upperpath [ 766.601040][ T40] audit: type=1400 audit(2000000000.309:47753): avc: denied { remount } for pid=19550 comm="syz.4.20159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 766.620102][ T40] audit: type=1400 audit(2000000000.328:47754): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=50566 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 766.702007][ T40] audit: type=1400 audit(2000000000.403:47755): avc: denied { create } for pid=19564 comm="syz.7.20165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 766.713260][ T40] audit: type=1400 audit(2000000000.412:47756): avc: denied { connect } for pid=19564 comm="syz.7.20165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 766.721630][ T40] audit: type=1400 audit(2000000000.422:47757): avc: denied { setopt } for pid=19564 comm="syz.7.20165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 766.729436][ T40] audit: type=1400 audit(2000000000.422:47758): avc: denied { bind } for pid=19564 comm="syz.7.20165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 766.737682][ T40] audit: type=1400 audit(2000000000.422:47759): avc: denied { write } for pid=19564 comm="syz.7.20165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 766.751598][ T40] audit: type=1400 audit(2000000000.450:47760): avc: denied { read } for pid=19564 comm="syz.7.20165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 767.804999][T19620] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 767.996062][T19624] overlayfs: failed to clone upperpath [ 768.109892][T19628] fuse: Bad value for 'fd' [ 768.493423][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20195'. [ 769.226320][T19686] overlayfs: failed to clone upperpath [ 770.024737][T19732] speed is unknown, defaulting to 1000 [ 770.157353][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 770.910182][T19758] overlayfs: upper fs does not support file handles, falling back to index=off. [ 771.972779][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 771.972822][ T40] audit: type=1400 audit(2000000005.357:47860): avc: denied { execute } for pid=19768 comm="syz.5.20247" name="file2" dev="tmpfs" ino=16667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 771.989287][ T40] audit: type=1400 audit(2000000005.366:47861): avc: denied { execute_no_trans } for pid=19768 comm="syz.5.20247" path="/3213/file2" dev="tmpfs" ino=16667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 772.000082][ T40] audit: type=1400 audit(2000000005.366:47862): avc: denied { create } for pid=19768 comm="syz.5.20247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 772.090414][ T40] audit: type=1400 audit(2000000005.460:47863): avc: denied { sys_module } for pid=19772 comm="syz.5.20249" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 772.099150][ T40] audit: type=1400 audit(2000000005.460:47864): avc: denied { module_request } for pid=19772 comm="syz.5.20249" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 772.106756][ T40] audit: type=1400 audit(2000000005.460:47865): avc: denied { getopt } for pid=19775 comm="syz.4.20250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 772.113846][ T40] audit: type=1400 audit(2000000005.469:47866): avc: denied { name_bind } for pid=19775 comm="syz.4.20250" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 772.227744][ T40] audit: type=1400 audit(2000000005.591:47867): avc: denied { create } for pid=19784 comm="syz.5.20252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 772.235703][ T40] audit: type=1400 audit(2000000005.591:47868): avc: denied { bind } for pid=19784 comm="syz.5.20252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 772.243810][ T40] audit: type=1400 audit(2000000005.591:47869): avc: denied { setopt } for pid=19784 comm="syz.5.20252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 772.555347][T19801] fuse: Invalid rootmode [ 773.791270][T19833] overlayfs: upper fs does not support file handles, falling back to index=off. [ 773.853089][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20267'. [ 774.397722][T19867] kvm: kvm [19866]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 774.403234][T19867] kvm: kvm [19866]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 774.904878][T19849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.076960][T19893] syzkaller1: entered promiscuous mode [ 775.078758][T19893] syzkaller1: entered allmulticast mode [ 775.273661][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20299'. [ 776.227484][T19938] overlayfs: failed to clone upperpath [ 777.358819][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 777.358862][ T40] audit: type=1400 audit(2000000010.395:48005): avc: denied { read write } for pid=13791 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 777.368624][ T40] audit: type=1400 audit(2000000010.395:48006): avc: denied { open } for pid=13791 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 777.375834][ T40] audit: type=1400 audit(2000000010.395:48007): avc: denied { ioctl } for pid=13791 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 777.383406][ T40] audit: type=1400 audit(2000000010.414:48008): avc: denied { read } for pid=19970 comm="syz.4.20321" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.390431][ T40] audit: type=1400 audit(2000000010.414:48009): avc: denied { read open } for pid=19970 comm="syz.4.20321" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.398315][ T40] audit: type=1400 audit(2000000010.414:48010): avc: denied { ioctl } for pid=19970 comm="syz.4.20321" path="/dev/binderfs/binder0" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.405625][ T40] audit: type=1400 audit(2000000010.414:48011): avc: denied { set_context_mgr } for pid=19970 comm="syz.4.20321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 777.411950][ T40] audit: type=1400 audit(2000000010.423:48012): avc: denied { map } for pid=19970 comm="syz.4.20321" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.419157][ T40] audit: type=1400 audit(2000000010.423:48013): avc: denied { call } for pid=19970 comm="syz.4.20321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 777.425087][ T40] audit: type=1400 audit(2000000010.460:48014): avc: denied { create } for pid=19972 comm="syz.4.20322" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 777.461478][T19973] fuse: Unknown parameter 'user00000000000000000000' [ 778.018686][T19997] netlink: 60 bytes leftover after parsing attributes in process `syz.5.20331'. [ 778.024648][T19997] netlink: 60 bytes leftover after parsing attributes in process `syz.5.20331'. [ 778.566481][T20005] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 778.584907][T20005] x9: left allmulticast mode [ 778.586484][T20005] x9: left promiscuous mode [ 778.588702][T20005] bridge0: port 1(1x9) entered disabled state [ 778.596424][T20005] bridge_slave_1: left promiscuous mode [ 778.599062][T20005] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.608780][T20005] bond0: (slave veth0_to_bond): Releasing active interface [ 778.612510][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 778.634875][T20006] netlink: 'syz.7.20334': attribute type 10 has an invalid length. [ 778.654926][T20005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.659208][T20005] bond4: (slave bond5): Releasing backup interface [ 778.677537][T20005] bond6: (slave geneve2): Releasing active interface [ 778.724856][T20005] bond7: (slave vxcan3): Releasing backup interface [ 778.727080][T20005] vxcan3: left promiscuous mode [ 778.761049][T20005] bond17: (slave bond0): Releasing active interface [ 778.763222][T20005] ip6gretap2: entered promiscuous mode [ 778.807063][T20005] bond13: (slave veth9): Releasing active interface [ 778.826383][T20005] bond14: (slave ip6gretap1): Releasing active interface [ 778.874105][T20005] bond16: (slave vxcan1): Releasing backup interface [ 778.879146][T20011] overlayfs: failed to clone upperpath [ 778.923609][T20005] bond17: (slave ip6gretap2): Releasing active interface [ 778.925966][T20005] ip6gretap2: left promiscuous mode [ 778.970007][T20005] veth17: left allmulticast mode [ 778.972015][T20005] veth17: left promiscuous mode [ 778.974433][T20005] bridge9: port 1(veth17) entered disabled state [ 778.986221][T20006] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 779.461216][T20034] netlink: 'syz.5.20344': attribute type 1 has an invalid length. [ 779.481409][T20034] bond14: entered promiscuous mode [ 779.483318][T20034] 8021q: adding VLAN 0 to HW filter on device bond14 [ 779.527423][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 780.797851][T20081] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2526149805/2526149807 [ 780.803951][T20081] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2526149805/2526149807 [ 780.808242][T20081] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2526149805/2526149807 [ 780.827002][T20085] bond15: entered allmulticast mode [ 780.993657][T20093] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 781.299100][T20097] syzkaller0: entered promiscuous mode [ 781.301008][T20097] syzkaller0: entered allmulticast mode [ 782.750409][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 782.750426][ T40] audit: type=1400 audit(2000000015.461:48100): avc: denied { create } for pid=20108 comm="syz.7.20372" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 782.804827][ T40] audit: type=1400 audit(2000000015.508:48101): avc: denied { mount } for pid=20108 comm="syz.7.20372" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 782.813808][T20109] fuse: Unknown parameter 'user_i00000000000000000000' [ 782.885526][ T40] audit: type=1400 audit(2000000015.592:48102): avc: denied { remount } for pid=20108 comm="syz.7.20372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 783.410619][T20119] tipc: Enabling of bearer rejected, already enabled [ 783.445507][ T25] block nbd0: Possible stuck request ffff888029188000: control (read@0,1024B). Runtime 420 seconds [ 783.449301][ T25] block nbd0: Possible stuck request ffff888029188200: control (read@1024,1024B). Runtime 420 seconds [ 783.450481][ T40] audit: type=1400 audit(2000000016.118:48103): avc: denied { create } for pid=20122 comm="syz.7.20377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 783.453751][ T25] block nbd0: Possible stuck request ffff888029188400: control (read@2048,1024B). Runtime 420 seconds [ 783.453776][ T25] block nbd0: Possible stuck request ffff888029188600: control (read@3072,1024B). Runtime 420 seconds [ 783.492076][ T40] audit: type=1400 audit(2000000016.137:48104): avc: denied { setopt } for pid=20122 comm="syz.7.20377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 783.571406][ T40] audit: type=1400 audit(2000000016.230:48105): avc: denied { allowed } for pid=20124 comm="syz.2.20378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 783.602624][ T40] audit: type=1400 audit(2000000016.259:48106): avc: denied { prog_load } for pid=20124 comm="syz.2.20378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 783.609198][ T40] audit: type=1400 audit(2000000016.259:48107): avc: denied { bpf } for pid=20124 comm="syz.2.20378" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 783.746709][ T40] audit: type=1400 audit(2000000016.390:48108): avc: denied { module_request } for pid=20131 comm="syz.5.20380" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 783.768147][ T40] audit: type=1400 audit(2000000016.409:48109): avc: denied { sys_module } for pid=20131 comm="syz.5.20380" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 784.029788][T20146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20383'. [ 784.099295][T20146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20146 comm=syz.4.20383 [ 784.101527][T20152] overlayfs: failed to clone upperpath [ 784.198644][T20160] vlan6: entered promiscuous mode [ 784.201100][T20160] vlan6: entered allmulticast mode [ 784.203370][T20160] hsr_slave_1: entered allmulticast mode [ 784.210883][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20388'. [ 784.442181][T20174] random: crng reseeded on system resumption [ 784.511864][T20174] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 784.549896][T20174] kvm: pic: level sensitive irq not supported [ 784.551294][T20174] kvm: pic: non byte read [ 784.560271][T20174] kvm: pic: level sensitive irq not supported [ 784.561292][T20174] kvm: pic: non byte read [ 784.568065][T20174] kvm: pic: level sensitive irq not supported [ 784.569362][T20174] kvm: pic: non byte read [ 784.577557][T20174] kvm: pic: level sensitive irq not supported [ 784.579080][T20174] kvm: pic: non byte read [ 784.584717][T20174] kvm: pic: level sensitive irq not supported [ 784.585019][T20174] kvm: pic: non byte read [ 784.592709][T20174] kvm: pic: level sensitive irq not supported [ 784.593698][T20174] kvm: pic: non byte read [ 784.662290][T20186] IPVS: lc: FWM 3 0x00000003 - no destination available [ 784.666522][T20186] IPVS: lc: FWM 3 0x00000003 - no destination available [ 785.041256][T20206] syzkaller0: entered promiscuous mode [ 785.043643][T20206] syzkaller0: entered allmulticast mode [ 785.401437][T20218] fuse: Unknown parameter 'user_id00000000000000000000' [ 785.704241][T20222] tipc: Enabled bearer , priority 0 [ 785.707563][T20222] syzkaller0: entered promiscuous mode [ 785.713387][T20222] syzkaller0: entered allmulticast mode [ 785.729104][T20222] tipc: Resetting bearer [ 785.737561][T20224] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 785.762875][T20221] tipc: Resetting bearer [ 785.775975][T20221] tipc: Disabling bearer [ 786.016791][T20230] netlink: 'syz.7.20415': attribute type 3 has an invalid length. [ 786.195923][T20240] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20419'. [ 786.767978][T20264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20426'. [ 786.771246][T20264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20426'. [ 786.776001][T20264] syzkaller0: entered promiscuous mode [ 786.777871][T20264] syzkaller0: entered allmulticast mode [ 787.047733][T20285] loop5: detected capacity change from 0 to 2640 [ 787.053065][T20285] buffer_io_error: 10 callbacks suppressed [ 787.053081][T20285] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 787.061804][T15085] Buffer I/O error on dev loop5, logical block 3, async page read [ 787.068856][T20285] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 787.197621][T20302] xt_hashlimit: size too large, truncated to 1048576 [ 787.466732][T20318] syzkaller0: entered promiscuous mode [ 787.470999][T20318] syzkaller0: entered allmulticast mode [ 787.494751][T20309] kvm: kvm [20308]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 787.562662][T20323] tipc: Enabling of bearer rejected, already enabled [ 787.685338][T20329] netlink: 'syz.2.20449': attribute type 3 has an invalid length. [ 787.732200][T20331] syzkaller0: entered promiscuous mode [ 787.734774][T20331] syzkaller0: entered allmulticast mode [ 787.934708][T20333] tipc: Started in network mode [ 787.936792][T20333] tipc: Node identity 8a11569f0f59, cluster identity 4711 [ 787.939867][T20333] tipc: Enabled bearer , priority 0 [ 787.944073][T20333] syzkaller0: entered promiscuous mode [ 787.946422][T20333] syzkaller0: entered allmulticast mode [ 787.973354][T20333] tipc: Resetting bearer [ 787.987265][T20332] tipc: Resetting bearer [ 788.004370][T20332] tipc: Disabling bearer [ 788.110829][T20337] netlink: 'syz.2.20454': attribute type 10 has an invalid length. [ 788.119138][T20337] bond0: (slave ): Enslaving as an active interface with an up link [ 788.169874][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 788.169892][ T40] audit: type=1400 audit(2000000020.546:48268): avc: denied { name_bind } for pid=20340 comm="syz.2.20455" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 788.194939][ T40] audit: type=1400 audit(2000000020.546:48269): avc: denied { node_bind } for pid=20340 comm="syz.2.20455" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 788.217883][ T40] audit: type=1400 audit(2000000020.565:48270): avc: denied { create } for pid=20340 comm="syz.2.20455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 788.235196][ T40] audit: type=1400 audit(2000000020.565:48271): avc: denied { bind } for pid=20340 comm="syz.2.20455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 788.256551][ T40] audit: type=1400 audit(2000000020.565:48272): avc: denied { setopt } for pid=20340 comm="syz.2.20455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 788.263949][ T40] audit: type=1400 audit(2000000020.565:48273): avc: denied { accept } for pid=20340 comm="syz.2.20455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 788.271122][ T40] audit: type=1400 audit(2000000020.565:48274): avc: denied { create } for pid=20338 comm="syz.5.20453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 788.280008][ T40] audit: type=1400 audit(2000000020.565:48275): avc: denied { create } for pid=20340 comm="syz.2.20455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 788.288349][ T40] audit: type=1400 audit(2000000020.565:48276): avc: denied { perfmon } for pid=20340 comm="syz.2.20455" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 788.297483][ T40] audit: type=1400 audit(2000000020.565:48277): avc: denied { prog_run } for pid=20340 comm="syz.2.20455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 789.101433][T20375] netlink: 'syz.5.20466': attribute type 10 has an invalid length. [ 789.105315][ T4710] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 789.108945][ T4710] CPU: 0 UID: 0 PID: 4710 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.108964][ T4710] Tainted: [L]=SOFTLOCKUP [ 789.108968][ T4710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 789.108978][ T4710] Workqueue: hci1 hci_rx_work [ 789.109197][ T4710] Call Trace: [ 789.109236][ T4710] [ 789.109243][ T4710] dump_stack_lvl+0x100/0x190 [ 789.109383][ T4710] sysfs_warn_dup.cold+0x1c/0x28 [ 789.109435][ T4710] sysfs_create_dir_ns+0x24b/0x2b0 [ 789.109528][ T4710] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 789.109548][ T4710] ? find_held_lock+0x2b/0x80 [ 789.109651][ T4710] ? kobject_add_internal+0x25f/0x930 [ 789.109745][ T4710] ? kobject_add_internal+0x25f/0x930 [ 789.109775][ T4710] ? do_raw_spin_unlock+0x145/0x1e0 [ 789.109799][ T4710] kobject_add_internal+0x2c8/0x930 [ 789.109828][ T4710] kobject_add+0x16a/0x1e0 [ 789.109848][ T4710] ? __pfx_kobject_add+0x10/0x10 [ 789.109868][ T4710] ? class_to_subsys+0x10f/0x150 [ 789.110031][ T4710] ? kobject_put+0xb9/0x640 [ 789.110045][ T4710] ? _raw_spin_unlock+0x28/0x50 [ 789.110067][ T4710] device_add+0x294/0x1950 [ 789.110084][ T4710] ? __pfx_dev_set_name+0x10/0x10 [ 789.110102][ T4710] ? __pfx_device_add+0x10/0x10 [ 789.110119][ T4710] ? mgmt_send_event_skb+0x2fb/0x460 [ 789.110142][ T4710] hci_conn_add_sysfs+0x1a3/0x260 [ 789.110155][ T4710] le_conn_complete_evt+0x11cb/0x1f40 [ 789.110177][ T4710] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 789.110199][ T4710] hci_le_conn_complete_evt+0x23c/0x3a0 [ 789.110217][ T4710] ? skb_pull_data+0x15f/0x1e0 [ 789.110321][ T4710] hci_le_meta_evt+0x34a/0x5f0 [ 789.110339][ T4710] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 789.110360][ T4710] hci_event_packet+0x682/0x11c0 [ 789.110377][ T4710] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 789.110397][ T4710] ? __pfx_hci_event_packet+0x10/0x10 [ 789.110417][ T4710] ? kcov_remote_start+0x374/0x660 [ 789.110434][ T4710] ? lockdep_hardirqs_on+0x78/0x100 [ 789.110451][ T4710] hci_rx_work+0x451/0xfc0 [ 789.110470][ T4710] process_one_work+0x9d7/0x1920 [ 789.110491][ T4710] ? __pfx_process_one_work+0x10/0x10 [ 789.110508][ T4710] ? __pfx_hci_rx_work+0x10/0x10 [ 789.110526][ T4710] worker_thread+0x5da/0xe40 [ 789.110543][ T4710] ? __pfx_worker_thread+0x10/0x10 [ 789.110555][ T4710] ? kthread+0x13a/0x450 [ 789.110565][ T4710] ? __pfx_worker_thread+0x10/0x10 [ 789.110577][ T4710] kthread+0x370/0x450 [ 789.110587][ T4710] ? __pfx_kthread+0x10/0x10 [ 789.110599][ T4710] ret_from_fork+0x754/0xd80 [ 789.110614][ T4710] ? __pfx_ret_from_fork+0x10/0x10 [ 789.110626][ T4710] ? __switch_to+0x7b4/0x1120 [ 789.110640][ T4710] ? __pfx_kthread+0x10/0x10 [ 789.110652][ T4710] ret_from_fork_asm+0x1a/0x30 [ 789.110673][ T4710] [ 789.118346][T20375] mac80211_hwsim hwsim25 : entered promiscuous mode [ 789.121477][ T4710] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 789.222298][ T4710] Bluetooth: hci1: failed to register connection device [ 789.230161][ T4710] Bluetooth: Unexpected continuation frame (len 125) [ 789.365397][T20390] netlink: 76 bytes leftover after parsing attributes in process `syz.7.20470'. [ 789.402230][T20392] syzkaller0: entered promiscuous mode [ 789.404291][T20392] syzkaller0: entered allmulticast mode [ 789.958556][T20441] fuse: Unknown parameter '0x0000000000000006' [ 789.961643][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20491'. [ 789.966358][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20491'. [ 790.081850][T20447] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 791.023560][T20495] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 791.152316][T20497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20509'. [ 791.156876][T20497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20509'. [ 791.160835][T20497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20509'. [ 791.164901][T20497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20509'. [ 791.991436][T20528] wg1: left promiscuous mode [ 791.993684][T20528] wg1: left allmulticast mode [ 791.999725][T20528] bridge_slave_1: left allmulticast mode [ 792.005557][T20528] mac80211_hwsim hwsim24 wlan0: left allmulticast mode [ 792.011567][T20528] ip6gre2: left allmulticast mode [ 792.014005][T20528] ip6gre3: left allmulticast mode [ 792.017382][T20528] bond4: left promiscuous mode [ 792.019375][T20528] vti0: left promiscuous mode [ 792.021317][T20528] geneve3: left promiscuous mode [ 792.024914][T20528] bond7: left allmulticast mode [ 792.027319][T20528] ip6gre5: left promiscuous mode [ 792.029191][T20528] ip6gre5: left allmulticast mode [ 792.034695][T20528] ip6gre6: left promiscuous mode [ 792.036426][T20528] ip6gre6: left allmulticast mode [ 792.086984][T20528] vlan4: left promiscuous mode [ 792.088925][T20528] bond9: left promiscuous mode [ 792.090713][T20528] batadv1: left promiscuous mode [ 792.093364][T20528] vlan4: left allmulticast mode [ 792.095500][T20528] bond9: left allmulticast mode [ 792.097115][T20528] batadv1: left allmulticast mode [ 792.112812][T20528] vlan5: left promiscuous mode [ 792.114586][T20528] bond10: left promiscuous mode [ 792.116441][T20528] bridge15: left promiscuous mode [ 792.118498][T20528] vlan5: left allmulticast mode [ 792.120615][T20528] bond10: left allmulticast mode [ 792.122478][T20528] bridge15: left allmulticast mode [ 792.162577][T20541] 9pnet_virtio: no channels available for device syz [ 792.204982][T20528] ip6gre7: left promiscuous mode [ 792.206858][T20528] ip6gre7: left allmulticast mode [ 792.212627][T20541] trusted_key: encrypted_key: key trusted:syz not found [ 792.215126][T20541] /dev/sg0: Can't lookup blockdev [ 792.224610][T20528] bond14: left promiscuous mode [ 792.227834][T20528] vlan6: left promiscuous mode [ 792.228806][T20541] IPVS: ip_vs_add_dest(): server weight less than zero [ 792.229995][T20528] vlan6: left allmulticast mode [ 792.235027][T20528] hsr_slave_1: left allmulticast mode [ 792.416493][T20548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20522'. [ 792.420418][T20548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20522'. [ 792.424496][T20548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20522'. [ 793.241356][T20562] syzkaller0: entered promiscuous mode [ 793.243342][T20562] syzkaller0: entered allmulticast mode [ 793.252220][T20562] 0: reclassify loop, rule prio 0, protocol 800 [ 793.630348][ T40] kauditd_printk_skb: 172 callbacks suppressed [ 793.630472][ T40] audit: type=1400 audit(2000000025.669:48450): avc: denied { create } for pid=20570 comm="syz.5.20532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 793.644677][ T40] audit: type=1400 audit(2000000025.687:48451): avc: denied { getopt } for pid=20570 comm="syz.5.20532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 793.654403][ T40] audit: type=1400 audit(2000000025.697:48452): avc: denied { create } for pid=20570 comm="syz.5.20532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 793.671183][ T40] audit: type=1400 audit(2000000025.697:48453): avc: denied { read write } for pid=20572 comm="syz.2.20533" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 793.686311][ T40] audit: type=1400 audit(2000000025.706:48454): avc: denied { open } for pid=20572 comm="syz.2.20533" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 793.696930][ T40] audit: type=1400 audit(2000000025.706:48455): avc: denied { ioctl } for pid=20572 comm="syz.2.20533" path="/dev/video1" dev="devtmpfs" ino=956 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 793.706735][ T40] audit: type=1400 audit(2000000025.716:48456): avc: denied { write } for pid=20570 comm="syz.5.20532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 793.720493][ T40] audit: type=1400 audit(2000000025.753:48457): avc: denied { allowed } for pid=20570 comm="syz.5.20532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 793.774793][T20576] syzkaller0: entered promiscuous mode [ 793.777277][T20576] syzkaller0: entered allmulticast mode [ 794.070120][ T40] audit: type=1400 audit(2000000026.081:48458): avc: denied { node_bind } for pid=20592 comm="syz.5.20542" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 794.090992][ T40] audit: type=1400 audit(2000000026.100:48459): avc: denied { map_create } for pid=20584 comm="syz.2.20539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 794.113065][T20596] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:32789 [ 794.187487][T20585] netlink: 'syz.2.20539': attribute type 7 has an invalid length. [ 794.190184][T20585] netlink: 'syz.2.20539': attribute type 8 has an invalid length. [ 794.955142][T20624] syzkaller0: entered promiscuous mode [ 794.957251][T20624] syzkaller0: entered allmulticast mode [ 795.073921][T20629] trusted_key: encrypted_key: key trusted:syz not found [ 795.076886][T20629] IPVS: ip_vs_add_dest(): server weight less than zero [ 795.149336][T20635] netlink: 'syz.4.20558': attribute type 2 has an invalid length. [ 795.249318][T20649] tipc: Enabling of bearer rejected, already enabled [ 795.718506][T20695] syzkaller0: entered promiscuous mode [ 795.720823][T20695] syzkaller0: entered allmulticast mode [ 795.883897][T20702] trusted_key: encrypted_key: key trusted:syz not found [ 795.888715][T20702] /dev/sg0: Can't lookup blockdev [ 795.896891][T20702] IPVS: ip_vs_add_dest(): server weight less than zero [ 796.083235][ T4710] Bluetooth: hci1: link tx timeout [ 796.089384][ T4710] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 796.685985][T20748] tipc: Enabling of bearer rejected, already enabled [ 796.988850][T20776] tipc: Enabling of bearer rejected, already enabled [ 797.089379][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 797.202831][T20797] Cache volume key already in use (9p,syz,) [ 797.272387][T20800] trusted_key: encrypted_key: key trusted:syz not found [ 797.675769][T20833] trusted_key: encrypted_key: key trusted:syz not found [ 797.682070][T20833] IPVS: ip_vs_add_dest(): server weight less than zero [ 798.018808][T20870] trusted_key: encrypted_key: key trusted:syz not found [ 798.275816][ T5942] Bluetooth: hci1: command 0x0406 tx timeout [ 798.529112][T20894] trusted_key: encrypted_key: key trusted:syz not found [ 799.032288][ T40] kauditd_printk_skb: 160 callbacks suppressed [ 799.032306][ T40] audit: type=1400 audit(2000000030.735:48620): avc: denied { remount } for pid=20931 comm="syz.7.20684" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 799.086089][T20938] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 799.171422][ T40] audit: type=1400 audit(2000000030.876:48621): avc: denied { name_bind } for pid=20947 comm="syz.5.20692" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 799.203093][ T40] audit: type=1400 audit(2000000030.904:48622): avc: denied { map_create } for pid=20949 comm="syz.7.20693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 799.211741][ T40] audit: type=1400 audit(2000000030.904:48623): avc: denied { read } for pid=20951 comm="syz.4.20695" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 799.230553][ T40] audit: type=1400 audit(2000000030.904:48624): avc: denied { open } for pid=20951 comm="syz.4.20695" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 799.247910][ T40] audit: type=1400 audit(2000000030.904:48625): avc: denied { ioctl } for pid=20951 comm="syz.4.20695" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 799.256983][ T40] audit: type=1400 audit(2000000030.923:48626): avc: denied { module_request } for pid=20953 comm="syz.5.20694" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 799.265614][ T40] audit: type=1400 audit(2000000030.923:48627): avc: denied { write } for pid=20951 comm="syz.4.20695" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 799.274880][ T40] audit: type=1400 audit(2000000030.951:48628): avc: denied { execute } for pid=20956 comm="syz.7.20696" path="/dev/nullb0" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 799.284868][ T40] audit: type=1800 audit(2000000030.951:48629): pid=20957 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.20696" name="nullb0" dev="tmpfs" ino=343 res=0 errno=0 [ 799.423023][T20971] xt_hashlimit: size too large, truncated to 1048576 [ 799.835487][T20991] tipc: Enabling of bearer rejected, failed to enable media [ 800.044755][T21003] __nla_validate_parse: 4 callbacks suppressed [ 800.044773][T21003] netlink: 44 bytes leftover after parsing attributes in process `syz.5.20715'. [ 800.719692][T21067] trusted_key: encrypted_key: key trusted:syz not found [ 800.823595][ T6005] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 800.988281][ T6005] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 800.992034][ T6005] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.999343][ T6005] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 801.003132][ T6005] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 801.006908][ T6005] usb 9-1: Manufacturer: syz [ 801.014587][ T6005] usb 9-1: config 0 descriptor?? [ 801.047840][T21092] trusted_key: encrypted_key: key trusted:syz not found [ 801.068341][ T6005] rc_core: IR keymap rc-hauppauge not found [ 801.073314][ T6005] Registered IR keymap rc-empty [ 801.076414][ T6005] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 801.081817][ T6005] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input55 [ 801.241915][ T9] usb 9-1: USB disconnect, device number 21 [ 801.365632][T21102] trusted_key: encrypted_key: key trusted:syz not found [ 801.461009][T21104] tipc: Enabling of bearer rejected, already enabled [ 801.893610][T21135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20769'. [ 801.965676][T21139] trusted_key: encrypted_key: key trusted:syz not found [ 801.969920][T21139] /dev/sg0: Can't lookup blockdev [ 802.269879][T21155] syzkaller0: entered promiscuous mode [ 802.271695][T21155] syzkaller0: entered allmulticast mode [ 802.460668][T21161] trusted_key: encrypted_key: key trusted:syz not found [ 804.185946][T21202] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 804.194643][T21202] overlayfs: overlapping lowerdir path [ 804.209223][T21207] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 804.517853][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 804.517865][ T40] audit: type=1400 audit(2000000035.886:48750): avc: denied { open } for pid=21245 comm="syz.2.20822" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 804.530607][ T40] audit: type=1400 audit(2000000035.895:48751): avc: denied { ioctl } for pid=21245 comm="syz.2.20822" path="/dev/ptyq9" dev="devtmpfs" ino=136 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 804.563611][T21249] Failed to get privilege flags for destination (handle=0x2:0x0) [ 804.575279][T21251] tipc: Enabled bearer , priority 0 [ 804.582525][T21251] tipc: Resetting bearer [ 804.596049][T21250] tipc: Disabling bearer [ 804.632941][ T40] audit: type=1400 audit(2000000035.989:48752): avc: denied { name_bind } for pid=21254 comm="syz.2.20826" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 804.663723][ T40] audit: type=1400 audit(2000000036.026:48753): avc: denied { unlink } for pid=21256 comm="syz.2.20827" name="#65" dev="tmpfs" ino=3294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 804.673389][ T40] audit: type=1400 audit(2000000036.026:48754): avc: denied { remount } for pid=21256 comm="syz.2.20827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 804.682666][ T40] audit: type=1400 audit(2000000036.036:48755): avc: denied { map_create } for pid=21258 comm="syz.7.20828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 804.709668][ T40] audit: type=1400 audit(2000000036.064:48756): avc: denied { read } for pid=21261 comm="syz.4.20831" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 804.717651][ T40] audit: type=1400 audit(2000000036.064:48757): avc: denied { open } for pid=21261 comm="syz.4.20831" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 804.728205][ T40] audit: type=1400 audit(2000000036.064:48758): avc: denied { ioctl } for pid=21261 comm="syz.4.20831" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 804.739137][ T40] audit: type=1400 audit(2000000036.073:48759): avc: denied { setopt } for pid=21260 comm="syz.2.20829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 804.858655][T21270] trusted_key: encrypted_key: key trusted:syz not found [ 804.881014][T21274] 5gQ[: renamed from lo (while UP) [ 805.104143][T21294] syzkaller0: entered promiscuous mode [ 805.106209][T21294] syzkaller0: entered allmulticast mode [ 805.270902][T21307] trusted_key: encrypted_key: key trusted:syz not found [ 805.807030][T21324] /dev/sg0: Can't lookup blockdev [ 806.004069][T21326] binder: 21325:21326 ioctl c0306201 0 returned -14 [ 807.190286][T21351] netlink: 'syz.4.20864': attribute type 1 has an invalid length. [ 807.286985][T21363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20870'. [ 807.344137][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20876'. [ 807.383972][T21377] overlayfs: failed to clone upperpath [ 807.687079][T21415] netlink: 48 bytes leftover after parsing attributes in process `syz.7.20892'. [ 808.219317][T21439] trusted_key: encrypted_key: key trusted:syz not found [ 808.220885][T21439] /dev/sg0: Can't lookup blockdev [ 808.738221][T21469] overlayfs: failed to clone lowerpath [ 809.336643][T21486] /dev/sg0: Can't lookup blockdev [ 809.361754][T21488] team0: Device ipvlan1 failed to register rx_handler [ 809.957371][ T40] kauditd_printk_skb: 164 callbacks suppressed [ 809.957384][ T40] audit: type=1400 audit(2000000040.980:48924): avc: denied { name_bind } for pid=21549 comm="syz.7.20951" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 809.969135][ T40] audit: type=1400 audit(2000000040.980:48925): avc: denied { node_bind } for pid=21549 comm="syz.7.20951" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 809.976935][ T40] audit: type=1400 audit(2000000040.999:48926): avc: denied { unmount } for pid=13791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 809.992017][ T40] audit: type=1400 audit(2000000041.018:48927): avc: denied { create } for pid=21554 comm="syz.7.20952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 810.013674][ T40] audit: type=1400 audit(2000000041.018:48928): avc: denied { write } for pid=21554 comm="syz.7.20952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 810.024166][ T40] audit: type=1400 audit(2000000041.018:48929): avc: denied { read } for pid=21554 comm="syz.7.20952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 810.031215][ T40] audit: type=1400 audit(2000000041.046:48930): avc: denied { read write } for pid=21558 comm="syz.4.20953" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 810.039708][ T40] audit: type=1400 audit(2000000041.046:48931): avc: denied { open } for pid=21558 comm="syz.4.20953" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 810.048379][ T40] audit: type=1400 audit(2000000041.046:48932): avc: denied { ioctl } for pid=21558 comm="syz.4.20953" path="/dev/video1" dev="devtmpfs" ino=956 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 810.056651][ T40] audit: type=1400 audit(2000000041.046:48933): avc: denied { read } for pid=21558 comm="syz.4.20953" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 810.092311][T21563] trusted_key: encrypted_key: key trusted:syz not found [ 810.094097][T21563] IPVS: ip_vs_add_dest(): server weight less than zero [ 810.254214][T21582] tipc: Enabling not permitted [ 810.260370][T21582] tipc: Enabling of bearer rejected, failed to enable media [ 810.388196][T21594] netlink: 'syz.7.20969': attribute type 11 has an invalid length. [ 810.853084][ T8298] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 811.014236][ T8298] usb 9-1: Using ep0 maxpacket: 8 [ 811.017268][ T8298] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 811.021136][ T8298] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 811.025069][ T8298] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 811.028339][ T8298] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 811.032972][ T8298] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 811.036318][ T8298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.261799][ T8298] usb 9-1: GET_CAPABILITIES returned 0 [ 811.263647][ T8298] usbtmc 9-1:16.0: can't read capabilities [ 811.440143][T21661] /dev/sg0: Can't lookup blockdev [ 811.448521][T21661] IPVS: ip_vs_add_dest(): server weight less than zero [ 811.483591][ T9] usb 9-1: USB disconnect, device number 22 [ 812.294078][T21691] IPVS: ip_vs_add_dest(): server weight less than zero [ 813.027421][ T1891] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 813.188699][ T1891] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 813.191938][ T1891] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 813.195106][ T1891] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.204127][ T1891] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 813.207391][ T1891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.210320][ T1891] usb 9-1: Product: syz [ 813.211733][ T1891] usb 9-1: Manufacturer: syz [ 813.213319][ T1891] usb 9-1: SerialNumber: syz [ 813.218732][ T1891] hub 9-1:1.0: bad descriptor, ignoring hub [ 813.221131][ T1891] hub 9-1:1.0: probe with driver hub failed with error -5 [ 813.434497][ T1891] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 813.452539][T21755] trusted_key: encrypted_key: insufficient parameters specified [ 813.527451][T21762] overlayfs: failed to clone upperpath [ 813.820086][T21788] trusted_key: encrypted_key: insufficient parameters specified [ 814.015725][T21797] trusted_key: encrypted_key: insufficient parameters specified [ 814.106985][T21803] tipc: Enabling of bearer rejected, already enabled [ 814.434331][T21723] usb 9-1: reset high-speed USB device number 23 using dummy_hcd [ 814.448115][T21828] tipc: Enabling of bearer rejected, failed to enable media [ 814.609077][T21723] usb 9-1: device firmware changed [ 814.614428][ T9] usb 9-1: USB disconnect, device number 23 [ 814.620118][ T9] usblp0: removed [ 814.765053][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 814.926129][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 814.930487][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 814.934011][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 814.941813][ T9] usb 9-1: string descriptor 0 read error: -22 [ 814.944733][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 814.949034][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.958714][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 814.961519][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 815.180703][ T9] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 815.207387][ T9] usb 9-1: USB disconnect, device number 24 [ 815.211088][ T9] usblp0: removed [ 815.387734][ T40] kauditd_printk_skb: 153 callbacks suppressed [ 815.387748][ T40] audit: type=1400 audit(2000000046.084:49087): avc: denied { mount } for pid=21854 comm="syz.7.21071" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 815.511145][ T25] block nbd0: Possible stuck request ffff888029188000: control (read@0,1024B). Runtime 450 seconds [ 815.517606][ T25] block nbd0: Possible stuck request ffff888029188200: control (read@1024,1024B). Runtime 450 seconds [ 815.523715][ T25] block nbd0: Possible stuck request ffff888029188400: control (read@2048,1024B). Runtime 450 seconds [ 815.528624][ T25] block nbd0: Possible stuck request ffff888029188600: control (read@3072,1024B). Runtime 450 seconds [ 815.575746][ T40] audit: type=1326 audit(2000000046.262:49088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.5.21072" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f796659c629 code=0x0 [ 815.610504][ T40] audit: type=1400 audit(2000000046.290:49089): avc: denied { create } for pid=21858 comm="syz.7.21080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 815.618521][ T40] audit: type=1400 audit(2000000046.290:49090): avc: denied { bind } for pid=21858 comm="syz.7.21080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 815.624795][ T40] audit: type=1400 audit(2000000046.290:49091): avc: denied { setopt } for pid=21858 comm="syz.7.21080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 815.633452][ T40] audit: type=1400 audit(2000000046.290:49092): avc: denied { accept } for pid=21858 comm="syz.7.21080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 815.640155][ T40] audit: type=1400 audit(2000000046.290:49093): avc: denied { write } for pid=21858 comm="syz.7.21080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 815.647024][ T40] audit: type=1400 audit(2000000046.290:49094): avc: denied { read } for pid=21858 comm="syz.7.21080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 815.665033][ T40] audit: type=1400 audit(2000000046.347:49095): avc: denied { mount } for pid=21861 comm="syz.7.21073" name="/" dev="ramfs" ino=204680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 815.720506][ T40] audit: type=1400 audit(2000000046.393:49096): avc: denied { connect } for pid=21863 comm="syz.7.21074" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 815.850471][T21876] 9pnet_virtio: no channels available for device syz [ 815.854618][T21876] trusted_key: encrypted_key: insufficient parameters specified [ 816.802835][T21902] trusted_key: encrypted_key: key trusted:syz not found [ 816.821283][T21902] /dev/sg0: Can't lookup blockdev [ 816.831517][T21902] IPVS: ip_vs_add_dest(): server weight less than zero [ 817.161773][T21922] Cache volume key already in use (9p,syz,) [ 817.670209][T21932] SELinux: unknown common r [ 817.672570][T21932] SELinux: failed to load policy [ 817.829422][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21104'. [ 817.916352][T21947] input: syz1 as /devices/virtual/input/input56 [ 818.400090][T21964] overlayfs: failed to clone lowerpath [ 818.690848][T21987] tipc: Enabling of bearer rejected, already enabled [ 818.734544][T21990] trusted_key: encrypted_key: insufficient parameters specified [ 819.196689][T22010] syzkaller0: entered promiscuous mode [ 819.198950][T22010] syzkaller0: entered allmulticast mode [ 819.434382][T22018] trusted_key: encrypted_key: insufficient parameters specified [ 819.769393][T22042] trusted_key: encrypted_key: insufficient parameters specified [ 820.806834][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 820.806847][ T40] audit: type=1400 audit(2000000051.160:49215): avc: denied { create } for pid=22061 comm="syz.7.21152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.815530][ T40] audit: type=1400 audit(2000000051.160:49216): avc: denied { bind } for pid=22061 comm="syz.7.21152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.823906][ T40] audit: type=1400 audit(2000000051.160:49217): avc: denied { setopt } for pid=22061 comm="syz.7.21152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.831539][ T40] audit: type=1400 audit(2000000051.160:49218): avc: denied { accept } for pid=22061 comm="syz.7.21152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.839465][ T40] audit: type=1400 audit(2000000051.160:49219): avc: denied { write } for pid=22061 comm="syz.7.21152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.849222][ T40] audit: type=1400 audit(2000000051.169:49220): avc: denied { read } for pid=22061 comm="syz.7.21152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.864963][ T40] audit: type=1400 audit(2000000051.225:49221): avc: denied { setopt } for pid=22063 comm="syz.7.21153" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 821.256005][ T40] audit: type=1400 audit(2000000051.591:49222): avc: denied { read write } for pid=22072 comm="syz.4.21156" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 821.260287][T22073] input: syz0 as /devices/virtual/input/input57 [ 821.265005][ T40] audit: type=1400 audit(2000000051.591:49223): avc: denied { open } for pid=22072 comm="syz.4.21156" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 821.276128][ T40] audit: type=1400 audit(2000000051.591:49224): avc: denied { ioctl } for pid=22072 comm="syz.4.21156" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 821.390826][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21160'. [ 821.855051][T22101] overlayfs: failed to clone upperpath [ 822.000102][T21997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.277479][T22121] netlink: 'syz.5.21177': attribute type 29 has an invalid length. [ 822.291114][T22121] netlink: 'syz.5.21177': attribute type 29 has an invalid length. [ 822.295182][T22121] netlink: 'syz.5.21177': attribute type 32 has an invalid length. [ 822.298079][T22121] netlink: 500 bytes leftover after parsing attributes in process `syz.5.21177'. [ 822.344513][T22110] kvm: kvm [22109]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 822.964297][T22179] overlayfs: failed to clone upperpath [ 822.998477][T22181] overlayfs: failed to clone upperpath [ 823.002038][T22181] overlayfs: failed to clone upperpath [ 823.310568][T22193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21204'. [ 823.966567][T22213] tipc: Enabling of bearer rejected, already enabled [ 824.019487][T22219] trusted_key: encrypted_key: insufficient parameters specified [ 824.205941][T22241] tipc: Enabled bearer , priority 0 [ 824.214831][T22241] tipc: Resetting bearer [ 824.260125][T22240] tipc: Disabling bearer [ 824.321444][T22250] overlayfs: failed to clone upperpath [ 825.124196][T22297] syzkaller0: entered promiscuous mode [ 825.126369][T22297] syzkaller0: entered allmulticast mode [ 826.187887][T22321] trusted_key: encrypted_key: insufficient parameters specified [ 826.192962][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 826.192976][ T40] audit: type=1400 audit(2000000056.216:49328): avc: denied { create } for pid=22322 comm="syz.5.21257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 826.204309][ T40] audit: type=1400 audit(2000000056.235:49329): avc: denied { allowed } for pid=22322 comm="syz.5.21257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 826.230201][ T40] audit: type=1400 audit(2000000056.254:49330): avc: denied { mounton } for pid=22325 comm="syz.7.21258" path="/3267/file0" dev="tmpfs" ino=17073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 826.238472][ T40] audit: type=1400 audit(2000000056.254:49331): avc: denied { mount } for pid=22325 comm="syz.7.21258" name="/" dev="9p" ino=72614051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 826.295241][T22331] overlayfs: failed to clone upperpath [ 826.325322][ T40] audit: type=1400 audit(2000000056.338:49332): avc: denied { sys_module } for pid=22329 comm="syz.5.21260" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 826.336674][ T40] audit: type=1400 audit(2000000056.338:49333): avc: denied { module_request } for pid=22329 comm="syz.5.21260" kmod="syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 827.199896][ T40] audit: type=1400 audit(2000000057.164:49334): avc: denied { bind } for pid=22339 comm="syz.5.21262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 827.207846][ T40] audit: type=1400 audit(2000000057.173:49335): avc: denied { setopt } for pid=22339 comm="syz.5.21262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 827.268608][ T40] audit: type=1400 audit(2000000057.230:49336): avc: denied { read } for pid=22341 comm="syz.4.21263" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 827.277400][ T40] audit: type=1400 audit(2000000057.230:49337): avc: denied { open } for pid=22341 comm="syz.4.21263" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 827.458656][T22354] Bluetooth: hci0: Frame reassembly failed (-84) [ 827.465007][ T1237] Bluetooth: hci0: Frame reassembly failed (-84) [ 827.468451][ T2008] Bluetooth: hci0: Frame reassembly failed (-84) [ 828.460494][T22390] netlink: 60 bytes leftover after parsing attributes in process `syz.7.21285'. [ 828.983893][T22409] trusted_key: encrypted_key: insufficient parameters specified [ 828.988209][T22409] /dev/sg0: Can't lookup blockdev [ 829.025663][T22411] trusted_key: encrypted_key: key trusted:syz not found [ 829.029687][T22411] IPVS: ip_vs_add_dest(): server weight less than zero [ 829.120411][T22417] overlayfs: failed to clone upperpath [ 829.665711][ T5942] Bluetooth: hci0: command 0x1003 tx timeout [ 829.666305][ T4710] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 829.825927][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 830.227230][T22461] overlayfs: failed to get inode (-116) [ 830.229849][T22461] overlayfs: failed to get inode (-116) [ 830.392653][T22469] policy can only be matched on NF_INET_PRE_ROUTING [ 830.392666][T22469] unable to load match [ 830.433260][T22474] overlayfs: failed to clone upperpath Jk0AA\L?#ԃrkTxAך yDQDb8 Dt*4*pP1ZxI (8ZJAsߵj*r[PXzY|>1Q=+,Hқ:NW"i~m 'FϡYސyhA{vezGsZIӚF59cjAr2l=Y'wL9/xg@­$v? ":_/MEq`QN3vb%gBWF&c쵳exCy!jly; $ lz)@GeYIU-5]0;do|jL*Pybbxמ `LNo2׼^1u8 Q,3Q >&9*$Tga,L QF:ss  '']kl@Mj»!48c^q=oЀv zP 3h ]?0"S4T4~{rV,?tU@ Uǹf|+ 'jaYm@5MwG';^hY[756,&lYm{3INd1=5*HKaz}Ԝរ|,W05/L:P8C:oaS%U!Q5.Q;mVIXa/ږχ5Aqѯ}{97` {YQN#y:.pn66L/FxT-O, D (gġU [OW5$+5Y}2&et`Gf-jel͊.Xw~[/ תq1E1ő/Dprmo#?_ҩsuҭyc\e Z|=" %ڢ0qnH,QʌݒOw|n<$X@3WPɏI~vuw$lKe,u#̼_.';$K8yC uV qޝÿw!gHDiR^FN'MUXiY|yVMaR#,MlO 4aKs?H7^|e6 NcT[6k5z-<&8Je3ג^2gr6q-&qXJ/$+Pc-nKgؽϼ AkÈ\M"-N1:Su)w 8^T/B(٦nC&ͯlH{X# 8QRtA3:L:uGSYF=WKtEK6rY疈{wTAX}tCJeRy=:%74[w_snZ# x`m]EiXs]pƋvnteWeHbXi,꼀GګsZCR-ov,njWp?LZ4!DGJ_>]qs-wV{19Vz,cǨxH~FU";B5PyǤg#*>Ut ՘"`10z; 0?9q AkqpG֪$TjXܭeGgs]pVݓ7.v>ʬdE'i)Z_a4BZ,mV#DFصX+s\r<9)O]s3+8SPi]`U(lўg pBϟyu4;E09#>+7jih_wSYקlfnXӈe{&w`}dzmioQ4죚a;O :oѾ1kFӹ7h]5 w>P.6/iN-ು zCrDliPtcuõǍ틖|p pdRTf'H'XMzgfj&r2x{[M"wWCOXd鬩3doԄHMTo.5 bZ|fdU3o[|j!_XBysdCPǖS6=f$+fh&"WDjI5ٻ*W-(ulAHV JxӚ`\!hс?I^^YQw^Dh* nh:eB ;p;m7IctE]~(*2Zl|_XWTcAOXNdg6 #3#58WS2ѩPiK^?#ce$ȡLXO y{JZzW wPh@>ӻJ>|{ge@S6$ w+%袒\eTp l;3 #G)h}+}{؉Aٵpt8_eߖ=RP#2.`%Ҡ23q|зvu{*z[̉ x8O2xq\ x(:7^4ȸr *q%ݡI]V$}*{8-HE8t N'f̈́1k "KO<ĞvM"M~&xv|MOfG64O[%$wu W#81 1  /V_gQ!TbKupu2 J258NkQV|nټt}P?cEPMP[ 831.523524][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 831.523559][ T40] audit: type=1400 audit(2000000061.226:49425): avc: denied { map } for pid=22558 comm="syz.7.21354" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=210552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 831.535972][ T40] audit: type=1400 audit(2000000061.226:49426): avc: denied { read write } for pid=22558 comm="syz.7.21354" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=210552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 831.556726][ T40] audit: type=1400 audit(2000000061.255:49427): avc: denied { recv } for pid=5915 comm="syz-executor" saddr=127.0.0.1 src=50566 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 831.580910][ T40] audit: type=1400 audit(2000000061.273:49428): avc: denied { read write } for pid=13791 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.588763][ T40] audit: type=1400 audit(2000000061.273:49429): avc: denied { open } for pid=13791 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.597268][ T40] audit: type=1400 audit(2000000061.273:49430): avc: denied { ioctl } for pid=13791 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.613705][ T40] audit: type=1400 audit(2000000061.301:49431): avc: denied { setopt } for pid=22563 comm="syz.4.21356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 831.621006][ T40] audit: type=1400 audit(2000000061.301:49432): avc: denied { bind } for pid=22563 comm="syz.4.21356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 831.639135][ T40] audit: type=1400 audit(2000000061.330:49433): avc: denied { execute } for pid=22563 comm="syz.4.21356" path="/561/file1" dev="tmpfs" ino=3003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 831.644968][T22568] overlayfs: failed to clone upperpath [ 831.647986][ T40] audit: type=1400 audit(2000000061.330:49434): avc: denied { write } for pid=22563 comm="syz.4.21356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 832.030929][T22597] trusted_key: encrypted_key: key trusted:syz not found [ 832.033460][T22597] IPVS: ip_vs_add_dest(): server weight less than zero [ 832.119958][T22610] overlayfs: failed to clone upperpath [ 832.262117][T22619] overlayfs: failed to clone upperpath [ 832.306127][ T9] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 832.475136][T22630] netlink: 'syz.5.21386': attribute type 4 has an invalid length. [ 832.492391][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 832.495521][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 832.500305][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.506646][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 832.511676][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 832.517496][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 832.520689][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 832.525720][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.530575][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 832.535296][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 832.541042][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 832.544250][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 832.548715][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.553557][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 832.559175][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 832.566858][ T9] usb 9-1: string descriptor 0 read error: -22 [ 832.569786][ T9] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 832.573686][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.588913][ T9] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 832.828546][ T9] usb 9-1: USB disconnect, device number 25 [ 834.273356][T22675] mkiss: ax0: crc mode is auto. [ 834.647115][T22711] trusted_key: encrypted_key: key trusted:syz not found [ 834.651863][T22711] /dev/sg0: Can't lookup blockdev [ 834.661318][T22711] IPVS: ip_vs_add_dest(): server weight less than zero [ 834.906286][T22722] overlayfs: failed to get inode (-116) [ 834.913975][T22722] overlayfs: failed to get inode (-116) [ 834.982548][T22724] syzkaller0: entered promiscuous mode [ 834.986274][T22724] syzkaller0: entered allmulticast mode [ 835.597901][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21427'. [ 836.399902][T22759] overlayfs: failed to clone upperpath [ 837.007329][ T40] kauditd_printk_skb: 167 callbacks suppressed [ 837.007341][ T40] audit: type=1400 audit(2000000066.358:49602): avc: denied { mount } for pid=22788 comm="syz.5.21445" name="/" dev="9p" ino=72614051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 837.052053][ T40] audit: type=1400 audit(2000000066.405:49603): avc: denied { read write } for pid=10986 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.062194][ T40] audit: type=1400 audit(2000000066.405:49604): avc: denied { open } for pid=10986 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.072374][ T40] audit: type=1400 audit(2000000066.415:49605): avc: denied { ioctl } for pid=10986 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.082708][T22790] trusted_key: encrypted_key: key trusted:syz not found [ 837.084125][ T40] audit: type=1400 audit(2000000066.424:49606): avc: denied { node_bind } for pid=22791 comm="syz.2.21446" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 837.086454][T22790] IPVS: ip_vs_add_dest(): server weight less than zero [ 837.087194][ T40] audit: type=1400 audit(2000000066.443:49607): avc: denied { create } for pid=22788 comm="syz.5.21445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 837.109151][ T40] audit: type=1400 audit(2000000066.443:49608): avc: denied { setopt } for pid=22788 comm="syz.5.21445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 837.139882][ T40] audit: type=1400 audit(2000000066.490:49609): avc: denied { read } for pid=22793 comm="syz.4.21447" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 837.150015][ T40] audit: type=1400 audit(2000000066.490:49610): avc: denied { open } for pid=22793 comm="syz.4.21447" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 837.159743][ T40] audit: type=1400 audit(2000000066.499:49611): avc: denied { ioctl } for pid=22793 comm="syz.4.21447" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 838.201746][T22830] overlayfs: failed to clone upperpath [ 838.474169][T22852] syz.5.21471: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 838.479925][T22852] CPU: 3 UID: 0 PID: 22852 Comm: syz.5.21471 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.479945][T22852] Tainted: [L]=SOFTLOCKUP [ 838.479957][T22852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 838.479965][T22852] Call Trace: [ 838.479970][T22852] [ 838.479976][T22852] dump_stack_lvl+0x100/0x190 [ 838.480231][T22852] warn_alloc.cold+0x95/0x1c1 [ 838.480295][T22852] ? __pfx_warn_alloc+0x10/0x10 [ 838.480348][T22852] ? kasan_save_stack+0x3f/0x50 [ 838.480385][T22852] ? kasan_save_stack+0x30/0x50 [ 838.480401][T22852] ? kasan_save_track+0x14/0x30 [ 838.480418][T22852] ? xskq_create+0xfb/0x1d0 [ 838.480545][T22852] __vmalloc_node_range_noprof+0x1252/0x1530 [ 838.480563][T22852] ? xskq_create+0xfb/0x1d0 [ 838.480584][T22852] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 838.480604][T22852] ? xskq_create+0xfb/0x1d0 [ 838.480619][T22852] vmalloc_user_noprof+0x9e/0xe0 [ 838.480633][T22852] ? xskq_create+0xfb/0x1d0 [ 838.480650][T22852] xskq_create+0xfb/0x1d0 [ 838.480674][T22852] xsk_setsockopt+0x743/0xab0 [ 838.480698][T22852] ? __pfx_xsk_setsockopt+0x10/0x10 [ 838.480725][T22852] ? find_held_lock+0x2b/0x80 [ 838.480770][T22852] ? __fget_files+0x215/0x3d0 [ 838.480791][T22852] ? selinux_socket_setsockopt+0x6a/0x80 [ 838.480937][T22852] ? __pfx_xsk_setsockopt+0x10/0x10 [ 838.480966][T22852] do_sock_setsockopt+0xf3/0x1d0 [ 838.481104][T22852] __sys_setsockopt+0x195/0x220 [ 838.481138][T22852] __x64_sys_setsockopt+0xbd/0x160 [ 838.481164][T22852] ? do_syscall_64+0x95/0xf80 [ 838.481185][T22852] ? lockdep_hardirqs_on+0x78/0x100 [ 838.481205][T22852] do_syscall_64+0x106/0xf80 [ 838.481224][T22852] ? clear_bhb_loop+0x40/0x90 [ 838.481247][T22852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.481266][T22852] RIP: 0033:0x7f796659c629 [ 838.481307][T22852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.481319][T22852] RSP: 002b:00007f7967396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 838.481331][T22852] RAX: ffffffffffffffda RBX: 00007f7966815fa0 RCX: 00007f796659c629 [ 838.481339][T22852] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 838.481346][T22852] RBP: 00007f7966632b39 R08: 0000000000000004 R09: 0000000000000000 [ 838.481354][T22852] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.481361][T22852] R13: 00007f7966816038 R14: 00007f7966815fa0 R15: 00007ffcb4d02e58 [ 838.481378][T22852] [ 838.573466][T22852] Mem-Info: [ 838.574588][T22852] active_anon:36471 inactive_anon:5193 isolated_anon:0 [ 838.574588][T22852] active_file:14779 inactive_file:7377 isolated_file:0 [ 838.574588][T22852] unevictable:1768 dirty:280 writeback:0 [ 838.574588][T22852] slab_reclaimable:9309 slab_unreclaimable:104702 [ 838.574588][T22852] mapped:23355 shmem:31679 pagetables:9703 [ 838.574588][T22852] sec_pagetables:334 bounce:0 [ 838.574588][T22852] kernel_misc_reclaimable:0 [ 838.574588][T22852] free:397482 free_pcp:15534 free_cma:0 [ 838.591955][T22852] Node 0 active_anon:41348kB inactive_anon:19708kB active_file:27496kB inactive_file:3540kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9856kB dirty:360kB writeback:0kB shmem:26544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17184kB pagetables:24744kB sec_pagetables:1320kB all_unreclaimable? no Balloon:0kB [ 838.602955][T22852] Node 1 active_anon:104660kB inactive_anon:1064kB active_file:31620kB inactive_file:25968kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:83688kB dirty:760kB writeback:0kB shmem:100172kB shmem_thp:8192kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:224kB pagetables:14068kB sec_pagetables:16kB all_unreclaimable? no Balloon:0kB [ 838.613874][T22852] Node 0 DMA free:8780kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:132kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 838.623903][T22852] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 838.626394][T22852] Node 0 DMA32 free:314828kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41348kB inactive_anon:19576kB active_file:27496kB inactive_file:3536kB unevictable:3536kB writepending:360kB zspages:0kB present:2080628kB managed:1260988kB mlocked:0kB bounce:0kB free_pcp:39060kB local_pcp:8444kB free_cma:0kB [ 838.639352][T22852] lowmem_reserve[]: 0 0 0 0 0 [ 838.641637][T22852] Node 1 Normal free:1266568kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104660kB inactive_anon:1064kB active_file:31620kB inactive_file:25968kB unevictable:3536kB writepending:760kB zspages:7932kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:22812kB local_pcp:8204kB free_cma:0kB [ 838.652984][T22852] lowmem_reserve[]: 0 0 0 0 0 [ 838.654625][T22852] Node 0 DMA: 25*4kB (UM) 19*8kB (UM) 25*16kB (UM) 24*32kB (UM) 23*64kB (UM) 14*128kB (UM) 6*256kB (UM) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 8780kB [ 838.659704][T22852] Node 0 DMA32: 3714*4kB (UME) 5147*8kB (UME) 3601*16kB (UME) 803*32kB (UME) 430*64kB (UME) 470*128kB (UME) 198*256kB (UM) 69*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 315088kB [ 838.665756][T22852] Node 1 Normal: 1042*4kB (UME) 1118*8kB (UME) 1011*16kB (UME) 935*32kB (UME) 725*64kB (UME) 616*128kB (UME) 341*256kB (UME) 325*512kB (UM) 221*1024kB (UM) 20*2048kB (UME) 137*4096kB (UM) = 1266568kB [ 838.672045][T22852] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 838.676793][T22852] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 838.677746][T22859] trusted_key: encrypted_key: key trusted:syz not found [ 838.679862][T22852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 838.685626][T22852] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 838.688955][T22852] 56053 total pagecache pages [ 838.690741][T22852] 2222 pages in swap cache [ 838.692486][T22852] Free swap = 27892kB [ 838.694130][T22852] Total swap = 124996kB [ 838.695858][T22852] 1048443 pages RAM [ 838.697445][T22852] 0 pages HighMem/MovableOnly [ 838.699521][T22852] 283885 pages reserved [ 838.704537][T22852] 0 pages cma reserved [ 838.707896][T22859] /dev/sg0: Can't lookup blockdev [ 838.729647][T22859] IPVS: ip_vs_add_dest(): server weight less than zero [ 838.763707][T22869] netlink: 'syz.5.21478': attribute type 6 has an invalid length. [ 838.832360][T22875] overlayfs: failed to clone upperpath [ 838.861381][T22878] ================================================================== [ 838.864383][T22878] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130 [ 838.867085][T22878] Read of size 8 at addr ffff88803ed3f780 by task syz.5.21483/22878 [ 838.870253][T22878] [ 838.872327][T22878] CPU: 1 UID: 0 PID: 22878 Comm: syz.5.21483 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.872359][T22878] Tainted: [L]=SOFTLOCKUP [ 838.872368][T22878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 838.872380][T22878] Call Trace: [ 838.872390][T22878] [ 838.872400][T22878] dump_stack_lvl+0x100/0x190 [ 838.872436][T22878] print_report+0x156/0x4c9 [ 838.872465][T22878] ? __virt_addr_valid+0x81/0x620 [ 838.872499][T22878] ? __phys_addr+0xe8/0x180 [ 838.872526][T22878] ? __list_add_valid_or_report+0x105/0x130 [ 838.872549][T22878] kasan_report+0xdf/0x1e0 [ 838.872578][T22878] ? __list_add_valid_or_report+0x105/0x130 [ 838.872601][T22878] __list_add_valid_or_report+0x105/0x130 [ 838.872621][T22878] clone_mnt+0x633/0x930 [ 838.872650][T22878] copy_tree+0xfc/0xbf0 [ 838.872669][T22878] ? __pfx_down_write+0x10/0x10 [ 838.872695][T22878] copy_mnt_ns+0x2bd/0xc30 [ 838.872717][T22878] ? create_new_namespaces+0x30/0xac0 [ 838.872745][T22878] ? rcu_is_watching+0x12/0xc0 [ 838.872769][T22878] create_new_namespaces+0xd3/0xac0 [ 838.872795][T22878] ? bpf_lsm_capable+0x9/0x10 [ 838.872813][T22878] ? security_capable+0x80/0x260 [ 838.872843][T22878] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 838.872870][T22878] ksys_unshare+0x455/0xab0 [ 838.872894][T22878] ? kfree+0x2ec/0x6b0 [ 838.872914][T22878] ? rcu_is_watching+0x12/0xc0 [ 838.872935][T22878] ? __pfx_ksys_unshare+0x10/0x10 [ 838.872963][T22878] ? kcov_ioctl+0x16a/0x720 [ 838.872990][T22878] __x64_sys_unshare+0x31/0x40 [ 838.873016][T22878] do_syscall_64+0x106/0xf80 [ 838.873035][T22878] ? clear_bhb_loop+0x40/0x90 [ 838.873058][T22878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.873078][T22878] RIP: 0033:0x7f796659c629 [ 838.873095][T22878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.873115][T22878] RSP: 002b:00007f7967396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 838.873135][T22878] RAX: ffffffffffffffda RBX: 00007f7966815fa0 RCX: 00007f796659c629 [ 838.873148][T22878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 838.873161][T22878] RBP: 00007f7966632b39 R08: 0000000000000000 R09: 0000000000000000 [ 838.873174][T22878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.873186][T22878] R13: 00007f7966816038 R14: 00007f7966815fa0 R15: 00007ffcb4d02e58 [ 838.873206][T22878] [ 838.873214][T22878] [ 838.962805][T22878] Allocated by task 21964: [ 838.964735][T22878] kasan_save_stack+0x30/0x50 [ 838.966444][T22878] kasan_save_track+0x14/0x30 [ 838.968041][T22878] __kasan_slab_alloc+0x89/0x90 [ 838.969638][T22878] kmem_cache_alloc_noprof+0x241/0x6e0 [ 838.971386][T22878] alloc_vfsmnt+0x23/0x6a0 [ 838.972835][T22878] path_mount+0x1e6b/0x23d0 [ 838.974224][T22878] __x64_sys_mount+0x293/0x310 [ 838.975780][T22878] do_syscall_64+0x106/0xf80 [ 838.977310][T22878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.979260][T22878] [ 838.980071][T22878] Freed by task 33: [ 838.981322][T22878] kasan_save_stack+0x30/0x50 [ 838.982971][T22878] kasan_save_track+0x14/0x30 [ 838.984681][T22878] kasan_save_free_info+0x3b/0x70 [ 838.986362][T22878] __kasan_slab_free+0x5f/0x80 [ 838.988007][T22878] kmem_cache_free+0x124/0x6a0 [ 838.989573][T22878] rcu_core+0x5a2/0x10d0 [ 838.991000][T22878] handle_softirqs+0x1eb/0x9e0 [ 838.992654][T22878] run_ksoftirqd+0x38/0x60 [ 838.994128][T22878] smpboot_thread_fn+0x3d3/0xaa0 [ 838.995918][T22878] kthread+0x370/0x450 [ 838.997288][T22878] ret_from_fork+0x754/0xd80 [ 838.998832][T22878] ret_from_fork_asm+0x1a/0x30 [ 839.000750][T22878] [ 839.001687][T22878] Last potentially related work creation: [ 839.003502][T22878] kasan_save_stack+0x30/0x50 [ 839.005051][T22878] kasan_record_aux_stack+0xa7/0xc0 [ 839.006763][T22878] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 839.008714][T22878] task_work_run+0x150/0x240 [ 839.010234][T22878] exit_to_user_mode_loop+0x100/0x4a0 [ 839.011983][T22878] do_syscall_64+0x67c/0xf80 [ 839.013487][T22878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.015412][T22878] [ 839.016285][T22878] Second to last potentially related work creation: [ 839.018461][T22878] kasan_save_stack+0x30/0x50 [ 839.020019][T22878] kasan_record_aux_stack+0xa7/0xc0 [ 839.021701][T22878] task_work_add+0x28b/0x3b0 [ 839.023206][T22878] mntput_no_expire_slowpath+0x3da/0xb00 [ 839.025043][T22878] mntput_no_expire+0x1fd/0x220 [ 839.026653][T22878] path_mount+0x1cd0/0x23d0 [ 839.028158][T22878] __x64_sys_mount+0x293/0x310 [ 839.029700][T22878] do_syscall_64+0x106/0xf80 [ 839.031206][T22878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.033256][T22878] [ 839.034011][T22878] The buggy address belongs to the object at ffff88803ed3f6c0 [ 839.034011][T22878] which belongs to the cache mnt_cache of size 352 [ 839.038621][T22878] The buggy address is located 192 bytes inside of [ 839.038621][T22878] freed 352-byte region [ffff88803ed3f6c0, ffff88803ed3f820) [ 839.042920][T22878] [ 839.043711][T22878] The buggy address belongs to the physical page: [ 839.045681][T22878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ed3e [ 839.048495][T22878] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 839.051153][T22878] memcg:ffff88802afe2201 [ 839.052521][T22878] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 839.054898][T22878] page_type: f5(slab) [ 839.056331][T22878] raw: 00fff00000000040 ffff88801ceb4000 dead000000000100 dead000000000122 [ 839.059084][T22878] raw: 0000000000000000 0000000800120012 00000000f5000000 ffff88802afe2201 [ 839.061820][T22878] head: 00fff00000000040 ffff88801ceb4000 dead000000000100 dead000000000122 [ 839.064607][T22878] head: 0000000000000000 0000000800120012 00000000f5000000 ffff88802afe2201 [ 839.067374][T22878] head: 00fff00000000001 ffffea0000fb4f81 00000000ffffffff 00000000ffffffff [ 839.070171][T22878] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 839.072930][T22878] page dumped because: kasan: bad access detected [ 839.074839][T22878] page_owner tracks the page as allocated [ 839.076677][T22878] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5931, tgid 5931 (syz-executor), ts 61731407541, free_ts 60506260453 [ 839.083336][T22878] post_alloc_hook+0x153/0x170 [ 839.084897][T22878] get_page_from_freelist+0x111d/0x3140 [ 839.086677][T22878] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 839.088588][T22878] new_slab+0xa6/0x6d0 [ 839.089918][T22878] refill_objects+0x26b/0x400 [ 839.091549][T22878] __pcs_replace_empty_main+0x19f/0x600 [ 839.093391][T22878] kmem_cache_alloc_noprof+0x480/0x6e0 [ 839.095173][T22878] alloc_vfsmnt+0x23/0x6a0 [ 839.096635][T22878] clone_mnt+0x4b/0x930 [ 839.098036][T22878] copy_tree+0x329/0xbf0 [ 839.099440][T22878] copy_mnt_ns+0x2bd/0xc30 [ 839.100896][T22878] create_new_namespaces+0xd3/0xac0 [ 839.102500][T22878] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 839.104296][T22878] ksys_unshare+0x455/0xab0 [ 839.105772][T22878] __x64_sys_unshare+0x31/0x40 [ 839.107427][T22878] do_syscall_64+0x106/0xf80 [ 839.108982][T22878] page last free pid 5914 tgid 5914 stack trace: [ 839.111087][T22878] __free_frozen_pages+0x7e1/0x10d0 [ 839.113015][T22878] qlist_free_all+0x47/0xe0 [ 839.114620][T22878] kasan_quarantine_reduce+0x1a0/0x1f0 [ 839.116387][T22878] __kasan_slab_alloc+0x69/0x90 [ 839.117992][T22878] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 839.120074][T22878] __alloc_skb+0x140/0x710 [ 839.121567][T22878] tcp_stream_alloc_skb+0x34/0x660 [ 839.123549][T22878] tcp_sendmsg_locked+0x133b/0x45f0 [ 839.125282][T22878] tcp_sendmsg+0x2e/0x50 [ 839.126699][T22878] inet_sendmsg+0xb9/0x140 [ 839.132322][T22878] sock_write_iter+0x509/0x610 [ 839.133828][T22878] vfs_write+0x6ac/0x1070 [ 839.135186][T22878] ksys_write+0x1f8/0x250 [ 839.136511][T22878] do_syscall_64+0x106/0xf80 [ 839.137904][T22878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.139650][T22878] [ 839.140668][T22878] Memory state around the buggy address: [ 839.143056][T22878] ffff88803ed3f680: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 839.146271][T22878] ffff88803ed3f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 839.149467][T22878] >ffff88803ed3f780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 839.152949][T22878] ^ [ 839.154683][T22878] ffff88803ed3f800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 839.158161][T22878] ffff88803ed3f880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 839.161507][T22878] ================================================================== [ 839.168634][T22878] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 839.171044][T22878] CPU: 0 UID: 0 PID: 22878 Comm: syz.5.21483 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc [ 839.176379][T22878] Tainted: [L]=SOFTLOCKUP fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 839.178555][T22878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 839.183110][T22878] Call Trace: [ 839.184558][T22878] [ 839.185633][T22878] dump_stack_lvl+0x100/0x190 [ 839.187758][T22878] vpanic+0x552/0x970 [ 839.189517][T22878] ? __pfx_vpanic+0x10/0x10 [ 839.191427][T22878] ? __list_add_valid_or_report+0x105/0x130 [ 839.193368][T22878] panic+0xd1/0xe0 [ 839.194679][T22878] ? __pfx_panic+0x10/0x10 [ 839.196639][T22878] ? __list_add_valid_or_report+0x105/0x130 [ 839.199263][T22878] ? preempt_schedule_common+0x42/0xc0 [ 839.201765][T22878] check_panic_on_warn.cold+0x19/0x34 [ 839.204174][T22878] end_report.part.0+0x3a/0x90 [ 839.206257][T22878] kasan_report.cold+0xe/0x18 [ 839.208332][T22878] ? __list_add_valid_or_report+0x105/0x130 [ 839.210794][T22878] __list_add_valid_or_report+0x105/0x130 [ 839.213158][T22878] clone_mnt+0x633/0x930 [ 839.214981][T22878] copy_tree+0xfc/0xbf0 [ 839.216788][T22878] ? __pfx_down_write+0x10/0x10 [ 839.219082][T22878] copy_mnt_ns+0x2bd/0xc30 [ 839.221089][T22878] ? create_new_namespaces+0x30/0xac0 [ 839.223436][T22878] ? rcu_is_watching+0x12/0xc0 [ 839.225564][T22878] create_new_namespaces+0xd3/0xac0 [ 839.227783][T22878] ? bpf_lsm_capable+0x9/0x10 [ 839.229811][T22878] ? security_capable+0x80/0x260 [ 839.231965][T22878] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 839.234434][T22878] ksys_unshare+0x455/0xab0 [ 839.236466][T22878] ? kfree+0x2ec/0x6b0 [ 839.238295][T22878] ? rcu_is_watching+0x12/0xc0 [ 839.240431][T22878] ? __pfx_ksys_unshare+0x10/0x10 [ 839.242652][T22878] ? kcov_ioctl+0x16a/0x720 [ 839.244624][T22878] __x64_sys_unshare+0x31/0x40 [ 839.246740][T22878] do_syscall_64+0x106/0xf80 [ 839.248903][T22878] ? clear_bhb_loop+0x40/0x90 [ 839.250990][T22878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.253597][T22878] RIP: 0033:0x7f796659c629 [ 839.255539][T22878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.262651][T22878] RSP: 002b:00007f7967396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 839.266184][T22878] RAX: ffffffffffffffda RBX: 00007f7966815fa0 RCX: 00007f796659c629 [ 839.268843][T22878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 839.271337][T22878] RBP: 00007f7966632b39 R08: 0000000000000000 R09: 0000000000000000 [ 839.273921][T22878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.276458][T22878] R13: 00007f7966816038 R14: 00007f7966815fa0 R15: 00007ffcb4d02e58 [ 839.279103][T22878] [ 839.281206][T22878] Kernel Offset: disabled [ 839.283096][T22878] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:09:11 Registers: info registers vcpu 0 CPU#0 RAX=00000000005e866f RBX=ffffffff8e4975c0 RCX=ffffffff8b8f7c75 RDX=0000000000000000 RSI=ffffffff8de71ed4 RDI=ffffffff8c1aefa0 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d486795 R10=ffff88806a433cab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d96410 R15=0000000000000000 RIP=ffffffff8b8f65df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d634a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f796734da08 CR3=0000000052b6c000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fefc8000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656772656d5f6f 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb4d03346 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb4d03346 00007ffcb4d0334c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f796663319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79666331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7966633343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79666331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8578f2b5 RDI=ffffffff9b49b940 RBP=ffffffff9b49b900 RSP=ffffc900075af648 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6533303838386652 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff8578f250 RIP=ffffffff8578f2df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f79673966c0 ffffffff 00c00000 GS =0000 ffff8880d644a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f796664e9d3 CR3=00000000522ef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000fefc8000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb4d03346 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb4d03346 00007ffcb4d0334c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f796663319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79666331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7966633343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79666331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79667eb5f8 00007f79667eb5c8 00007f79667eb600 00007f79667eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000619bb9 RBX=ffff88801eeac900 RCX=ffffffff8b8f7c75 RDX=0000000000000000 RSI=ffffffff8de71ed4 RDI=ffffffff8c1aefa0 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c6795 R10=ffff88806a633cab R11=0000000000000000 R12=ffffed1003dd5920 R13=0000000000000002 R14=ffffffff90d96410 R15=0000000000000000 RIP=ffffffff8b8f65df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d654a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7966755c50 CR3=00000000270d5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb49354d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1554a386 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1554a386 00007ffc1554a38c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb49283319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4928331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb492833343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4928331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4929eb600 00007fb4929eb5e0 00007fb4929eb5e8 00007fb4929eb618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4929eb5f8 00007fb4929eb5c8 00007fb4929eb600 00007fb4929eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000518941 RBX=ffff88801eeaa480 RCX=ffffffff8b8f7c75 RDX=0000000000000000 RSI=ffffffff8de71ed4 RDI=ffffffff8c1aefa0 RBP=0000000000000003 RSP=ffffc90000197df0 R8 =0000000000000001 R9 =ffffed100d4e6795 R10=ffff88806a733cab R11=0000000000000000 R12=ffffed1003dd5490 R13=0000000000000003 R14=ffffffff90d96410 R15=0000000000000000 RIP=ffffffff8b8f65df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d664a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7966817dac CR3=00000000522ef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000fefc8000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f796734d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb4d03346 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb4d03346 00007ffcb4d0334c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f796663319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79666331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7966633343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79666331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79667eb600 00007f79667eb5e0 00007f79667eb5e8 00007f79667eb618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f796734d020 00007f79667eb5c0 00007f79667eb5d0 00007f79667eb610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79667eb5f8 00007f79667eb5c8 00007f79667eb600 00007f79667eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000