last executing test programs: 2m58.593647882s ago: executing program 3 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x2100c0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x40) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e24, 0x0, 0x4e23, 0x4, 0xa}, {0x2, 0x4, 0x0, 0x0, 0xfffffffbfffffffd, 0x6, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66b848f7288366efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x5a}], 0x1, 0x30, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f00000005c0), 0x0, 0x8, 0xffffffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 2m56.743521683s ago: executing program 3 (id=71): socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2502000000080008006c3e9c18d8e8778e5de457824a03fef2ccfdbcbe9b686ae2f12c8955a2ce3ca21f28d0d6787c7228343071770d42ac1a7fa3f30011b5c7820b868d1b02663f3c2c749e1955a3126a757a37ecd9f7dfe7f8b0e0cecf7911a83e39edf03207a85bf53786ac3263c1261414de000000000000040bba878fc7af630e6fb4bc413e7759cc2436cd19abfe47a6003b1352371f3eabc7339404ed926f3c", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x90009427, &(0x7f0000000180)) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 2m56.49284883s ago: executing program 3 (id=75): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66b848f7288366efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x5a}], 0x1, 0x30, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m54.753612724s ago: executing program 3 (id=80): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0xe800) 2m53.082552129s ago: executing program 3 (id=88): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd83, 0x8, 0x1, 0x31d}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}) r7 = syz_open_dev$ndb(0x0, 0x0, 0x42) ioctl$BLKROTATIONAL(r7, 0x127e, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xa01, 0x0) writev(r8, 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, 0x0, 0x0) io_uring_enter(r4, 0x22d2, 0x20, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_procfs(r1, &(0x7f0000000100)='pagemap\x00') pread64(r9, 0x0, 0x0, 0x1000000000) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1a3807, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4f2a7b1674a2054a}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r11, 0x29, 0x17, 0x0, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 2m53.017844098s ago: executing program 3 (id=91): set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2600}, 0x48) 2m37.895847534s ago: executing program 32 (id=91): set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2600}, 0x48) 1m56.463090506s ago: executing program 1 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 1m56.462740042s ago: executing program 1 (id=652): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) r1 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) getsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000ec0)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f00000003c0)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000007c0)={"cfc8752a08b459c22211981d67fc3b1822b3b0da6a04654e1c351e111c62f087a30886e37771683102e190e7605effbae324dfce22c050b5cb06caa01193d6b4779c57bd49948b71ca7865efa8c93c807b92fa676fe763264f8a770dab16bd15f32369481f34a1fcf93787dd0f642c98b6dace47fe64538c4706257ad770ed973a878d59b1271c71730e4d0dc3298543efe507f2154472e53679644c09b57639c01e59dabdfade2ad385ecc6cb75ca1100b3f883bb092b769433e8cba7eac7bd350202f357773cce8e7c788bd250d2a5faad9da3e9ee9d5a0c052a0f82e45734c708148b45cffcb208622dbd0b5a18605f453ebd20770a9f3d0839df63b477d50a94ab0023d8f52223fc700ad74e8c9512b745ae82d952e635776da6c4264ab43f6c5198e460281d17aa23a27a97fb82f0073248aa7c3df76bde448af6ab8d22e7fa1f3a8e6cbec2deacdcf12f76891c60a9448ef50c6e06e8dc791d6b34f42a31defbaca876be47111d055497c9f039a3de690885d2c4a098277e356c9eb458a31fda780b82778cc32f1f5d62ab9afd9352e174b9b420bb55399f93a5310eb93bca35e34ec1a4c7ba28bfd8a0fb5fd879d4264709216679b9fe852329c35a912e25cac60756a452824fce4fba63754a0e24026ffd7a23037f8eec9ca3e670aa3332da4d6514c64d1013dfda55b7fa071db419811f172e907a1c1fa2f34efb4ded276246b3140f5d61b7d1003b376fd0ea470c24c286327d528dd5110e5cc8826a1e2228f669b3e477eef1bde1ee76fb9afc5cb971faa0dbe4dff449541654640c198e2dc10fb5b79824c13b8e55919aa641a7297b92d09dae29d4429858e5d6d34d424fce911780f9e11aa74c17dde2b965b00ec5da7c302e21b7875093412ac2e17aed03c781280fde946c59977d82edfd385c3742928dcf31f1395f1199eb0f2b094425ea33bb29475ce2b18a4b3532a5cab2e7f35131356aee5d1052fbe31c457bab1d5fb140dc9488555c116bfd6cc82b5be3eb59a7caa5c0a8fbb0d19b7db4146de07088701042b772e093cc779c49764d329c8e2b9a1ac8551415d554e2dbaff7acf29c1b574592eab4f301f3d1a9318dbc4847f72908a199bd703a72c441be48f25103ab0925dea8b608096625530cc082026eddf3f9d349f2a8f68b86dfcc586c795dce98ef390da9b35b93212d9099cdff18ee96fcd8391098e93d9aca1a9d4b9f8e40a7867761d7aa0f2a845627953503098527bd07645b8c842e7a9dc6d92bdd85a0d2a8b9b209409a74736c5eb8e46fa5c6b3068a218f41919cbd7c69f71e15ee6e7effa87a56bfbbde790437774b0ec7add8947c510ce26947e2db1c89f9f9115785cd34df97b43165eca1183f4cb587307648333cae00304575784ba2e7a61b79052d505ba68f02b3103768352936aa2704b673c62b1b00"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000840)={0x0, 0x0, 0x3b8}) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, &(0x7f0000004440), 0x0, 0x40000a0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) creat(&(0x7f0000000180)='./file0/file0\x00', 0x48) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 1m56.181497047s ago: executing program 1 (id=653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x400300, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m55.582705918s ago: executing program 1 (id=659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d", 0x2d}], 0x1}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3688a8000008060095080006040003ae"], 0x0) 1m55.575571876s ago: executing program 1 (id=662): keyctl$get_persistent(0x16, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) keyctl$search(0xa, r0, &(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, r0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) chdir(&(0x7f0000000080)='./file1\x00') setxattr$incfs_metadata(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200), &(0x7f0000000440)="cf3c2a0db7af4ea67f0aedbcc88b0a59bda55c7ec6e84bf926599d6799378808aae06f4ae93d3769d3f90cd3f3d3738838b21cc72b77e5d2c9e2536980ac3dc82bdcc6c85a62e324aecec9ce6a7cead04c7cb27e970a5d3638c7380bdbd34fd541281dd9248804f776f9a4775c4d1d1f2b09fce2f3112374fc708e45892e72b6931d3f8fc135", 0x86, 0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x20, 0x140f, 0x1, 0x70bd27, 0x4, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x4004044) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x184) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') keyctl$clear(0x7, r0) 1m55.431821037s ago: executing program 1 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80000) recvmsg(r2, &(0x7f0000001480)={0x0, 0x58, 0x0, 0x1a}, 0x10041) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 1m40.39529157s ago: executing program 33 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80000) recvmsg(r2, &(0x7f0000001480)={0x0, 0x58, 0x0, 0x1a}, 0x10041) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 53.951963761s ago: executing program 4 (id=1333): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x41}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xfd, "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"}, &(0x7f00000001c0)=0x105) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x8}, &(0x7f0000000280)=0x8) 53.88213641s ago: executing program 4 (id=1334): gettid() timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aa"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44810) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000180)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x20400) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701fefeffff00000000017c0000040042801400018006000600800a000008000300", @ANYRES32=0x0, @ANYBLOB="000087e0"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 53.878802453s ago: executing program 4 (id=1335): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x400300) 53.271804386s ago: executing program 4 (id=1342): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt(r1, 0x0, 0x7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x1, 0x401, 0x1, r3}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000300)={r3, 0x2, 0x82, "26042bdfc65621d7b7cf3af32d2edaf5c44d13e91c71ce083e6f5a22ade39b96aeab0dab4dc6adb2e74172666c840edfe1370d77a2294abf6c06b40a2e594a3fa28aba5ce25e5fbeb5e57a00ab49e668db0ee3d5b1694439fd212680e7c57bb9430ddd33d207813e18e2613f92dcc2197c3ffef008c3f9f531af672f5215a8f257ff"}, 0x8a) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x8, @sdr={0x3432564e, 0xfffff001}}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000000141201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2e80) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) r8 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r10 = syz_open_procfs(r8, &(0x7f0000000540)='projid_map\x00') pread64(r10, 0x0, 0x0, 0x1000000000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x6d, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000013140100"], 0xfdb0}}, 0x8000) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r12, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 53.222040343s ago: executing program 4 (id=1345): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0xfffffffffffffffd, {{0x41}, 0x1}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, &(0x7f0000000540)=ANY=[@ANYBLOB="6d706f010064656661756c74f5f6685a8c23aa0433d48a342cd0cb19269dfa162b3d"]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) writev(r5, &(0x7f0000000280)=[{&(0x7f0000002040)="18a4", 0x2}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a8"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f00000002c0), &(0x7f0000000240)=@tcp6=r5}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x1001) readv(r8, &(0x7f0000000e40), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000440)={0x10000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000001040)=""/4096, 0x1000, &(0x7f0000002080)=""/4096, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x5, {r2}}, 0x58) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000003c0)=r9) syz_io_uring_setup(0x7444, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 53.140458668s ago: executing program 4 (id=1347): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000ffc900", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 53.038652217s ago: executing program 34 (id=1347): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000ffc900", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 3.33197505s ago: executing program 5 (id=2065): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000003fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r2], 0x50}}, 0x2) 2.681717995s ago: executing program 5 (id=2077): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x86ddffffffffffff}, 0x40004010) 2.621159108s ago: executing program 5 (id=2078): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0xf4240) (async) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0xf4240) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000040)=0x3) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000100)={0xa68f, 0x0, '\x00', {0x0, @bt={0x5ee524d9, 0x9, 0x1, 0x1, 0x3, 0x1, 0x5, 0x10, 0xfffffffe, 0x68df, 0x2, 0xcb, 0x4df, 0x1000, 0x10, 0x28, {0xfff, 0x7}, 0x5, 0x1}}}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000080)) writev(r3, &(0x7f00000017c0)=[{&(0x7f00000001c0)="9dc8b98b5ed9a6347bfe2ceab2311df50f6b5b8a2f5c8af1d62c918551e42b6ace003fc288afcb2f95e0f1cd25aa6896cce3fec088d65802bb110cc04453bc0a7ebf5c4fa8b441f88e4623746e4b2a5f2e7a5e4c4ce85905f47a6e38c9d846c33c3478debd3a94a5b80635f28da9f6eb26d9369a14ff11850d67600e1ef84e063f596777b80158c9f0190791016585144a0e78beb8d941317e7e70ea756635b26ffe3949c37a83c44f309d37b8375af554c2c57656fa7b34ec12238eae6c9571214519af990d619a3fb7d12ec4ffaec0cee545c95b470cf1c18429d3f60f246f995a1a953c43052a", 0xe8}, {&(0x7f00000002c0)="d1a4c000dc0342d80737dd6761ad56ce6e77b9d4e50a115efe88a2b4c720e76d0a55d1ce6199", 0x26}, {&(0x7f0000000300)="b2d8e0e404fd2776fd31598eb49cd350969591059f875db4db9c1bff35e534a38fa072b504046c45c5a996ce1320fc094353e09cafacdd0c31f07aaa7b96f0ccad65d296c071dd90a81f055b912ebcec2d7fc463863993959e19bf4c042a9ea39a3ecaf719dc5d161475a301cdcf62d8a7d12bb92ec0808b14d7826a11f6171afe49fd53185afa3d0b457183a261ebacde5d7f579a16f0fc31d6030e51a93671c3d2db8f6d46e2ea8f313266318836622fc5e19b81293ddb26b4eaa42fbd32ff19ed813b8ee529cf375d15af69de", 0xce}, {&(0x7f0000000400)="4065a7ddd219733f0e55129765dc44d2a7bc9ff431643e9a93edc2de10dbbfb54b4267179dfd3153b6d44dcacd76360beb30c88bc475b812d3be24b2c9", 0x3d}, {&(0x7f0000000440)="ec7157d0a77461cf85862add5a7f947346b51a40cf5cb612e15a4d4062160bf14758502f519b6aa4087ad1180761ebe295602d4672361c7d59d8177334224fa6539a4e95ec5c90c1c51415c7ecb9ec48b8709b9017bee57aca838d4c43ed2652656e5fd80aaa83c07c0b6fe4cc8feaae00d4e6cb3a81c4dfd1e100296e46c0cf3f418c993bce698835a49ffd01ae3894376274d2094fbad477993f42ca87f4ab57779396a3397094861c584068234a62404aef03e1385cd374bb2afd9734ea0172", 0xc1}, {&(0x7f0000000540)="96762a34bc7260bde19c7d7b7f72e3264ebc8eda74c0c410d0af9fbe556b0bcf92681c75f4884184a48632ba307f2f7a3b2cab9de928f692e37d0f446c8570805df339b8c1948d09f8938403cede32dcf97a6a70", 0x54}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="aadd3dd92a1b625450224e6205a7d70fd6ecccf3c275b35484890d3e4b425c7f52b3b22881276675052b2c226135ec3ad3f0e77b8e10948b8121cb", 0x3b}, {&(0x7f0000001600)="fb62a7da83e30d988bec9a84cf15bd1c3071829ee063e0740464bbf5549d70ca69b2e50df02024345134f55e80321e18cc8414a2b3247bd667a7a9ece91fa28b3263092546ee63d3c8d32c02d4857b823a631990b1f2408a36744210389c8d64f23c1ea537d7f689a7230228bb8d913120a5671a4b6f100af1abba3d23d6e51e747e80", 0x83}, {&(0x7f00000016c0)="58a483fbc07fe5b136ae86fbccf04fff140e4b77baca714cd2b118c16d75a7fcded3152ed37532ff5ae2deb583f18a29af942749362d2b4f32c27fb3a26969f3575fac628d7274d9d4f515210dee9c33880aa844f08fdd7e274bc8725496268017a4e6eb31b72cd05728320ea04f1d3e00b92da3ece5c4d80b9e5b8dddb985ce45b127da675669464b3a235c32104df7940bfb7ef76c4e3a5814ecf71087cf97b91520c6df44f5916ec9cc7280970581027d776f6c3ba16f806b7f9026e810faca877286d916317f93ff58d4eb9840f047e26a0e4d013b01d8e92b7f3459817d67366969106351", 0xe7}], 0xa) (async) writev(r3, &(0x7f00000017c0)=[{&(0x7f00000001c0)="9dc8b98b5ed9a6347bfe2ceab2311df50f6b5b8a2f5c8af1d62c918551e42b6ace003fc288afcb2f95e0f1cd25aa6896cce3fec088d65802bb110cc04453bc0a7ebf5c4fa8b441f88e4623746e4b2a5f2e7a5e4c4ce85905f47a6e38c9d846c33c3478debd3a94a5b80635f28da9f6eb26d9369a14ff11850d67600e1ef84e063f596777b80158c9f0190791016585144a0e78beb8d941317e7e70ea756635b26ffe3949c37a83c44f309d37b8375af554c2c57656fa7b34ec12238eae6c9571214519af990d619a3fb7d12ec4ffaec0cee545c95b470cf1c18429d3f60f246f995a1a953c43052a", 0xe8}, {&(0x7f00000002c0)="d1a4c000dc0342d80737dd6761ad56ce6e77b9d4e50a115efe88a2b4c720e76d0a55d1ce6199", 0x26}, {&(0x7f0000000300)="b2d8e0e404fd2776fd31598eb49cd350969591059f875db4db9c1bff35e534a38fa072b504046c45c5a996ce1320fc094353e09cafacdd0c31f07aaa7b96f0ccad65d296c071dd90a81f055b912ebcec2d7fc463863993959e19bf4c042a9ea39a3ecaf719dc5d161475a301cdcf62d8a7d12bb92ec0808b14d7826a11f6171afe49fd53185afa3d0b457183a261ebacde5d7f579a16f0fc31d6030e51a93671c3d2db8f6d46e2ea8f313266318836622fc5e19b81293ddb26b4eaa42fbd32ff19ed813b8ee529cf375d15af69de", 0xce}, {&(0x7f0000000400)="4065a7ddd219733f0e55129765dc44d2a7bc9ff431643e9a93edc2de10dbbfb54b4267179dfd3153b6d44dcacd76360beb30c88bc475b812d3be24b2c9", 0x3d}, {&(0x7f0000000440)="ec7157d0a77461cf85862add5a7f947346b51a40cf5cb612e15a4d4062160bf14758502f519b6aa4087ad1180761ebe295602d4672361c7d59d8177334224fa6539a4e95ec5c90c1c51415c7ecb9ec48b8709b9017bee57aca838d4c43ed2652656e5fd80aaa83c07c0b6fe4cc8feaae00d4e6cb3a81c4dfd1e100296e46c0cf3f418c993bce698835a49ffd01ae3894376274d2094fbad477993f42ca87f4ab57779396a3397094861c584068234a62404aef03e1385cd374bb2afd9734ea0172", 0xc1}, {&(0x7f0000000540)="96762a34bc7260bde19c7d7b7f72e3264ebc8eda74c0c410d0af9fbe556b0bcf92681c75f4884184a48632ba307f2f7a3b2cab9de928f692e37d0f446c8570805df339b8c1948d09f8938403cede32dcf97a6a70", 0x54}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="aadd3dd92a1b625450224e6205a7d70fd6ecccf3c275b35484890d3e4b425c7f52b3b22881276675052b2c226135ec3ad3f0e77b8e10948b8121cb", 0x3b}, {&(0x7f0000001600)="fb62a7da83e30d988bec9a84cf15bd1c3071829ee063e0740464bbf5549d70ca69b2e50df02024345134f55e80321e18cc8414a2b3247bd667a7a9ece91fa28b3263092546ee63d3c8d32c02d4857b823a631990b1f2408a36744210389c8d64f23c1ea537d7f689a7230228bb8d913120a5671a4b6f100af1abba3d23d6e51e747e80", 0x83}, {&(0x7f00000016c0)="58a483fbc07fe5b136ae86fbccf04fff140e4b77baca714cd2b118c16d75a7fcded3152ed37532ff5ae2deb583f18a29af942749362d2b4f32c27fb3a26969f3575fac628d7274d9d4f515210dee9c33880aa844f08fdd7e274bc8725496268017a4e6eb31b72cd05728320ea04f1d3e00b92da3ece5c4d80b9e5b8dddb985ce45b127da675669464b3a235c32104df7940bfb7ef76c4e3a5814ecf71087cf97b91520c6df44f5916ec9cc7280970581027d776f6c3ba16f806b7f9026e810faca877286d916317f93ff58d4eb9840f047e26a0e4d013b01d8e92b7f3459817d67366969106351", 0xe7}], 0xa) 2.548589219s ago: executing program 5 (id=2081): r0 = socket(0x15, 0x800, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.491170429s ago: executing program 5 (id=2082): unshare(0x66000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002401300000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0xc010}, 0x40) 2.417490863s ago: executing program 5 (id=2084): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x71) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) io_setup(0xe00a, &(0x7f0000000100)=0x0) io_submit(r4, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/94) 1.720835777s ago: executing program 2 (id=2094): unshare(0x66000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002401600000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0xc010}, 0x40) 1.640824249s ago: executing program 2 (id=2095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d00010075"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 1.64020545s ago: executing program 2 (id=2096): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x80010, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000008642f8701f0a9a5c100000001000000e0eba0de4ced68d40eb8914baa12d57cd1519b0000000000", @ANYRES32=r0, @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB='\v\x00\x00\x00'], 0x30, 0x40000}, 0x40001) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) mprotect(&(0x7f0000841000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b0}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, 0x0) ftruncate(r2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdc00, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r6}, 0x18) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$RTC_AIE_OFF(r7, 0x7002) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@deltclass={0x34, 0x29, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1ffe6, 0x10}, {0xffe0}, {0x0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x38, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9c}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300bbf7c76f4a3ad905ca98b1d8596ae8f06a85901c7f14fe5c053c49d96928c7cb23fdc0806fe6e77ae520c23793050000000000000000823c14d7d80e1a119dfc5eb3ba797eea8ba8fe07cead89308eea5afbe296f62e5cc0ceda87bbba08cd119baad10fcab796287453e33274bbd355ad6683e60bd08dc09f2350055a984841e23efc4f993239f4", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.561272062s ago: executing program 2 (id=2098): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.4789731s ago: executing program 2 (id=2099): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2, 0x3, {0x1, 0x6d4625b9ce666e0c, 0x4}}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@multicast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x8, r5, r6}, {0x7, 0x7d5cb64, 0x6, 0x9, 0x9, 0xffffffffffffd7d6, 0xd88, 0x200}, {0x0, 0x7fff, 0x0, 0x8}, 0x4, 0x6e6bb7, 0x0, 0x1, 0x4, 0x2}, {{@in6=@remote, 0x4d2, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x2, 0x3, 0xe, 0xc, 0x2}}, 0xe8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000480)={0x2020}, 0x2020) syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) socket$inet(0x2, 0x800, 0xe) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000100), 0x1004) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRES16=r4, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 1.421105189s ago: executing program 0 (id=2100): mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) getpid() r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) openat$dsp(0xffffff9c, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x0, 0x400f5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x20, 0xffffffff, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xb3) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.420352203s ago: executing program 2 (id=2101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r2, 0x0, 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) mlockall(0x7) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x1c, 0x5f, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}, @generic="04"]}, 0x1c}], 0x1}, 0x0) 1.419683632s ago: executing program 0 (id=2102): gettid() timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6erspan0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aa"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44810) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000180)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x20400) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r8, 0xc, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701fefeffff00000000017c0000040042801400018006000600800a000008000300", @ANYRES32=0x0, @ANYBLOB="000087e0"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r9, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 1.350916751s ago: executing program 0 (id=2104): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x3, 0x7, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x44) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0xea, 0x0, &(0x7f00000000c0)={0x23, 0x2, 0x0, 0x3}, 0x10) listen(0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) pwrite64(0xffffffffffffffff, &(0x7f00000004c0)="3cc5", 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xa0, 0x6, 0x72, @dev={0xfe, 0x80, '\x00', 0x24}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x10, 0x0, 0x7fffffff}}) 1.281826152s ago: executing program 0 (id=2107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="50000000100021040000ff8cfedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r2], 0x50}}, 0x2) 1.210803622s ago: executing program 6 (id=2108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000180)={r1}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0xffffffffffffffb2, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7, 0x200000], [0x8, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x0, 0x2, 0x806}) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x40141}, 0x8000) accept$ax25(r8, 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r10, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000001100)={0x28, 0x4, r10, 0x0, &(0x7f0000000200)='r', 0x1, 0x100000000}) ioctl$IOMMU_IOAS_COPY(r9, 0x3b83, &(0x7f0000000380)={0x28, 0x4, r10, r10, 0x11000, 0x5, 0x9}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="e4836d513bcab6b90efd3ebcdfc597b9a7e727a3ece8daadf4b04a69b21dfd745934e8870086d4dcd91c1c9a69f5d303d175b4bcc0da016fb4be47336b3557b59b09b0bce1bace8b3eb86e9f3e3b4244a7bd9bad12f2ae80c3f5a6a08634b6f70ef4d694f97312f4", 0x68}], 0x1, 0x0, 0x0, 0x40054}, 0x4040884) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) 1.101713931s ago: executing program 6 (id=2109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.041794301s ago: executing program 6 (id=2110): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000000000000000000000ffef", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 901.601317ms ago: executing program 6 (id=2111): mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) getpid() r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) openat$dsp(0xffffff9c, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x0, 0x400f5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x20, 0xffffffff, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xb3) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 731.734314ms ago: executing program 0 (id=2112): gettid() timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6erspan0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aa"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44810) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000180)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x20400) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r8, 0xc, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701fefeffff00000000017c0000040042801400018006000600800a000008000300", @ANYRES32=0x0, @ANYBLOB="000087e0"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r9, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 670.639753ms ago: executing program 0 (id=2113): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200000d) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=0xffffbf7f) 411.265µs ago: executing program 6 (id=2114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000900000c"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 0s ago: executing program 6 (id=2115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000300)=0xced) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000c80)=""/231, 0xd5, 0x0, 0x3, 0x2}}, 0x60) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000340)={0x1, 0x5, 0xfffffffd, 0xc6cf, 0xfd, "002094b4000001f6150000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x8) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0x6}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_open_dev$usbfs(&(0x7f00000002c0), 0xf59, 0x10800) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018027fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fe7206d2383656d4d2449155037", 0x55}], 0x1}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000300)=0xced) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000c80)=""/231, 0xd5, 0x0, 0x3, 0x2}}, 0x60) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x29) (async) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000340)={0x1, 0x5, 0xfffffffd, 0xc6cf, 0xfd, "002094b4000001f6150000000100", 0x240000, 0x1fd}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x8) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0x6}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000002c0), 0xf59, 0x10800) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018027fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fe7206d2383656d4d2449155037", 0x55}], 0x1}, 0x40000) (async) kernel console output (not intermixed with test programs): netlink: 'syz.2.1083': attribute type 27 has an invalid length. [ 167.717257][ T9203] syz_tun: left promiscuous mode [ 167.788691][ T9203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.895745][ T9203] geneve2: left allmulticast mode [ 167.913557][ T9204] bridge0: port 3(gretap0) entered blocking state [ 167.915920][ T9204] bridge0: port 3(gretap0) entered forwarding state [ 167.920340][ T9204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.923183][ T9204] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.927564][ T9204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.935199][ T80] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.940002][ T80] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.943840][ T80] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.947628][ T80] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.460086][ T40] audit: type=1400 audit(1764147031.982:798): avc: denied { map } for pid=9220 comm="syz.4.1087" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 168.470712][ T40] audit: type=1400 audit(1764147031.992:799): avc: denied { execute } for pid=9220 comm="syz.4.1087" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.076599][ T9230] FAULT_INJECTION: forcing a failure. [ 169.076599][ T9230] name failslab, interval 1, probability 0, space 0, times 0 [ 169.080712][ T9230] CPU: 0 UID: 0 PID: 9230 Comm: syz.2.1090 Not tainted syzkaller #0 PREEMPT(full) [ 169.080727][ T9230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.080733][ T9230] Call Trace: [ 169.080737][ T9230] [ 169.080743][ T9230] dump_stack_lvl+0x16c/0x1f0 [ 169.080757][ T9230] should_fail_ex+0x512/0x640 [ 169.080770][ T9230] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 169.080784][ T9230] should_failslab+0xc2/0x120 [ 169.080796][ T9230] __kvmalloc_node_noprof+0x141/0x9c0 [ 169.080806][ T9230] ? __pfx_dev_addr_init+0x10/0x10 [ 169.080819][ T9230] ? lockdep_init_map_type+0x5c/0x280 [ 169.080830][ T9230] ? alloc_netdev_mqs+0xaef/0x1550 [ 169.080847][ T9230] ? alloc_netdev_mqs+0xaef/0x1550 [ 169.080860][ T9230] alloc_netdev_mqs+0xaef/0x1550 [ 169.080881][ T9230] rtnl_create_link+0xc08/0xf90 [ 169.080897][ T9230] rtnl_newlink+0xb69/0x2000 [ 169.080916][ T9230] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.080930][ T9230] ? find_held_lock+0x2b/0x80 [ 169.080944][ T9230] ? avc_has_perm_noaudit+0x117/0x3b0 [ 169.080961][ T9230] ? avc_has_perm_noaudit+0x149/0x3b0 [ 169.080986][ T9230] ? find_held_lock+0x2b/0x80 [ 169.080999][ T9230] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.081013][ T9230] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.081026][ T9230] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 169.081042][ T9230] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.081057][ T9230] rtnetlink_rcv_msg+0x95e/0xe90 [ 169.081075][ T9230] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.081094][ T9230] ? ref_tracker_free+0x37c/0x830 [ 169.081109][ T9230] netlink_rcv_skb+0x158/0x420 [ 169.081125][ T9230] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.081141][ T9230] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.081161][ T9230] ? netlink_deliver_tap+0x1ae/0xd30 [ 169.081178][ T9230] netlink_unicast+0x5aa/0x870 [ 169.081195][ T9230] ? __pfx_netlink_unicast+0x10/0x10 [ 169.081216][ T9230] netlink_sendmsg+0x8c8/0xdd0 [ 169.081233][ T9230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.081253][ T9230] ____sys_sendmsg+0xa98/0xc70 [ 169.081264][ T9230] ? copy_msghdr_from_user+0x10a/0x160 [ 169.081279][ T9230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.081309][ T9230] ___sys_sendmsg+0x134/0x1d0 [ 169.081323][ T9230] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.081336][ T9230] ? __lock_acquire+0x622/0x1c90 [ 169.081362][ T9230] __sys_sendmsg+0x16d/0x220 [ 169.081377][ T9230] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.081399][ T9230] do_syscall_64+0xcd/0xfa0 [ 169.081411][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.081422][ T9230] RIP: 0033:0x7f3a60f8f749 [ 169.081431][ T9230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.081441][ T9230] RSP: 002b:00007f3a61dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.081451][ T9230] RAX: ffffffffffffffda RBX: 00007f3a611e5fa0 RCX: 00007f3a60f8f749 [ 169.081458][ T9230] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000008 [ 169.081464][ T9230] RBP: 00007f3a61dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.081470][ T9230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.081476][ T9230] R13: 00007f3a611e6038 R14: 00007f3a611e5fa0 R15: 00007fff555eef38 [ 169.081489][ T9230] [ 169.221493][ T9232] binder_alloc: 9231: binder_alloc_buf, no vma [ 169.327080][ T9234] loop9: detected capacity change from 0 to 7 [ 169.330197][ T6026] Dev loop9: unable to read RDB block 7 [ 169.332021][ T6026] loop9: unable to read partition table [ 169.333897][ T6026] loop9: partition table beyond EOD, truncated [ 169.340067][ T9234] Dev loop9: unable to read RDB block 7 [ 169.341829][ T9234] loop9: unable to read partition table [ 169.343702][ T9234] loop9: partition table beyond EOD, truncated [ 169.345816][ T9234] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.450761][ T40] audit: type=1326 audit(1764147032.982:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.4.1094" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabaaf8f749 code=0x0 [ 169.949139][ T9252] binder: 9251:9252 ioctl c0306201 0 returned -14 [ 170.457040][ T9261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1101'. [ 170.818970][ T9272] 9p: Unknown access argument : -22 [ 171.204152][ T9279] netlink: 'syz.2.1107': attribute type 17 has an invalid length. [ 171.206766][ T9279] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1107'. [ 171.209957][ T9279] macvtap0: entered allmulticast mode [ 171.211683][ T9279] veth0_macvtap: entered allmulticast mode [ 171.214187][ T9279] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 171.253314][ T40] audit: type=1326 audit(1764147034.782:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.2.1108" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a60f8f749 code=0x0 [ 172.179912][ T40] audit: type=1400 audit(1764147035.712:802): avc: denied { read write } for pid=9303 comm="syz.2.1116" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.261184][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 172.626318][ T9327] netlink: 'syz.4.1123': attribute type 3 has an invalid length. [ 172.705832][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 172.705850][ T40] audit: type=1400 audit(1764147036.232:805): avc: denied { mount } for pid=9331 comm="syz.4.1125" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 172.708330][ T9333] overlayfs: failed to resolve '/ ö©]ó$-ʯ;Ä?»Æ': -2 [ 172.906894][ T9346] veth3: entered promiscuous mode [ 172.912536][ T9346] team0: Port device veth3 added [ 172.920938][ T9350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.946441][ T9346] veth5: entered promiscuous mode [ 172.950999][ T9346] team0: Port device veth5 added [ 172.976057][ T9350] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 172.985732][ T9350] CIFS mount error: No usable UNC path provided in device string! [ 172.985732][ T9350] [ 172.990668][ T9350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 172.994996][ T9350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.001802][ T9350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.047178][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 173.108459][ T9363] syzkaller0: entered promiscuous mode [ 173.110923][ T9363] syzkaller0: entered allmulticast mode [ 174.023382][ T9391] netlink: 'syz.5.1144': attribute type 1 has an invalid length. [ 174.109916][ T9393] loop9: detected capacity change from 0 to 7 [ 174.112988][ T6026] Dev loop9: unable to read RDB block 7 [ 174.114894][ T6026] loop9: unable to read partition table [ 174.116832][ T6026] loop9: partition table beyond EOD, truncated [ 174.120770][ T9393] Dev loop9: unable to read RDB block 7 [ 174.122656][ T9393] loop9: unable to read partition table [ 174.124587][ T9393] loop9: partition table beyond EOD, truncated [ 174.128853][ T9393] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.499490][ T40] audit: type=1400 audit(1764147038.022:806): avc: denied { firmware_load } for pid=9404 comm="syz.2.1148" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 174.524144][ T9405] syz.2.1148 (9405) used greatest stack depth: 17928 bytes left [ 174.548291][ T40] audit: type=1400 audit(1764147038.072:807): avc: denied { map } for pid=9410 comm="syz.2.1150" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.645872][ T40] audit: type=1400 audit(1764147038.172:808): avc: denied { getopt } for pid=9418 comm="syz.5.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 174.722442][ T9411] netlink: 'syz.2.1150': attribute type 10 has an invalid length. [ 174.747944][ T40] audit: type=1400 audit(1764147038.272:809): avc: denied { append } for pid=9424 comm="syz.0.1155" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 174.754095][ T9411] syz_tun: entered promiscuous mode [ 174.900570][ T9428] loop9: detected capacity change from 0 to 7 [ 174.906421][ T9428] Dev loop9: unable to read RDB block 7 [ 174.908798][ T9428] loop9: unable to read partition table [ 174.913594][ T9428] loop9: partition table beyond EOD, truncated [ 174.916470][ T9428] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.975341][ T40] audit: type=1400 audit(1764147038.502:810): avc: denied { read } for pid=9441 comm="syz.5.1161" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 175.044174][ T40] audit: type=1400 audit(1764147038.572:811): avc: denied { watch } for pid=9443 comm="syz.2.1162" path="/342" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 175.759074][ T40] audit: type=1400 audit(1764147039.282:812): avc: denied { write } for pid=9470 comm="syz.2.1171" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.767119][ T40] audit: type=1400 audit(1764147039.282:813): avc: denied { open } for pid=9470 comm="syz.2.1171" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.806479][ T9442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.810623][ T9442] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.820402][ T9442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.822323][ T9442] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.826463][ T9442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.828472][ T9442] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.833254][ T9442] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.837609][ T9442] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.840356][ T9442] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 175.843971][ T9442] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 175.886481][ T9477] overlayfs: missing 'lowerdir' [ 175.889992][ T9479] Cannot find del_set index 4 as target [ 175.897524][ T9479] netlink: 'syz.5.1173': attribute type 10 has an invalid length. [ 175.948997][ T9485] binder: 9483:9485 ioctl c0306201 0 returned -14 [ 175.966614][ T9481] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 175.975614][ T9481] bond1: (slave lo): speed changed to 0 on port 1 [ 175.979685][ T9481] bond1: (slave lo): Enslaving as a backup interface with an up link [ 175.984292][ T9481] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 176.220308][ T6006] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 176.258764][ T9504] overlayfs: missing 'lowerdir' [ 176.274068][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1180'. [ 176.313626][ T9506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9506 comm=syz.0.1180 [ 176.372217][ T6006] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.376982][ T6006] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.381726][ T6006] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.381825][ T40] audit: type=1400 audit(1764147039.922:814): avc: denied { map } for pid=9509 comm="syz.0.1186" path="socket:[31967]" dev="sockfs" ino=31967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.387588][ T6006] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.400326][ T6006] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.409890][ T6006] usb 10-1: config 0 descriptor?? [ 176.620158][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.624172][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.696582][ T9514] hugetlbfs: Unknown parameter 'sÿÿÿÿ5%' [ 176.833463][ T6006] hid_parser_main: 5 callbacks suppressed [ 176.833482][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.839185][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.842845][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.845950][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.849094][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.852598][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.855892][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.858996][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.862305][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.865763][ T6006] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 176.878396][ T6006] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 176.922935][ T9522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1190'. [ 176.927692][ T9522] netlink: 'syz.4.1190': attribute type 10 has an invalid length. [ 177.079806][ T5937] Bluetooth: hci2: command 0x0406 tx timeout [ 177.101959][ T6020] usb 10-1: USB disconnect, device number 6 [ 177.347293][ T9526] overlayfs: upper fs does not support file handles, falling back to index=off. [ 177.447870][ T9534] overlayfs: missing 'lowerdir' [ 177.879547][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.880159][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.880208][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.217143][ T9545] binder: 9544:9545 ioctl c0306201 0 returned -14 [ 178.281799][ T9547] netlink: 'syz.5.1200': attribute type 7 has an invalid length. [ 178.598701][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 178.598716][ T40] audit: type=1400 audit(1764147042.122:821): avc: denied { read } for pid=9555 comm="syz.5.1203" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.609833][ T40] audit: type=1400 audit(1764147042.122:822): avc: denied { open } for pid=9555 comm="syz.5.1203" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.619524][ T40] audit: type=1400 audit(1764147042.132:823): avc: denied { ioctl } for pid=9555 comm="syz.5.1203" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xaec7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.628504][ T40] audit: type=1400 audit(1764147042.132:824): avc: denied { lock } for pid=9555 comm="syz.5.1203" path="socket:[32019]" dev="sockfs" ino=32019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.637046][ T9558] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 178.641729][ T9558] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.799548][ T9564] kvm: kvm [9562]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 178.804279][ T9564] kvm: kvm [9562]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 179.150806][ T5947] Bluetooth: hci2: command 0x0406 tx timeout [ 179.168363][ T40] audit: type=1326 audit(1764147042.692:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1210" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa49838f749 code=0x0 [ 179.949405][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 179.949813][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.951641][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.970098][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 180.033797][ T9582] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 180.036648][ T9582] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 180.065405][ T9584] netlink: 'syz.5.1214': attribute type 4 has an invalid length. [ 180.425107][ T9596] binder: 9594:9596 ioctl c0285629 200000000100 returned -22 [ 180.523944][ T9602] vlan2: entered allmulticast mode [ 180.526012][ T9602] bond0: entered allmulticast mode [ 180.528138][ T9602] bond_slave_0: entered allmulticast mode [ 180.531215][ T9602] bond_slave_1: entered allmulticast mode [ 180.545225][ T9599] loop9: detected capacity change from 0 to 7 [ 180.552172][ T9599] Dev loop9: unable to read RDB block 7 [ 180.554638][ T9599] loop9: unable to read partition table [ 180.557253][ T9599] loop9: partition table beyond EOD, truncated [ 180.560514][ T9599] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.591887][ T40] audit: type=1326 audit(1764147044.122:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.4.1221" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabaaf8f749 code=0x0 [ 180.728912][ T9613] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 180.732135][ T9613] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 180.921891][ T40] audit: type=1400 audit(1764147044.452:827): avc: denied { unlink } for pid=9616 comm="syz.0.1225" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 181.195238][ T40] audit: type=1400 audit(1764147044.722:828): avc: denied { create } for pid=9620 comm="syz.0.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 181.202288][ T9622] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1226'. [ 181.203149][ T40] audit: type=1400 audit(1764147044.732:829): avc: denied { write } for pid=9620 comm="syz.0.1226" path="socket:[32147]" dev="sockfs" ino=32147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 181.410718][ T9634] xt_bpf: check failed: parse error [ 181.415860][ T40] audit: type=1400 audit(1764147044.942:830): avc: denied { setopt } for pid=9633 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.450126][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 181.596273][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 181.605209][ T9648] bridge0: port 3(gretap0) entered disabled state [ 181.653131][ T9652] tipc: Enabling of bearer rejected, already enabled [ 181.658620][ T9651] netlink: 'syz.4.1236': attribute type 10 has an invalid length. [ 181.830586][ T9664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=9664 comm=syz.4.1240 [ 182.029399][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.029447][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.099323][ T9679] overlayfs: missing 'lowerdir' [ 182.140945][ T9676] loop9: detected capacity change from 0 to 7 [ 182.143692][ T9676] Dev loop9: unable to read RDB block 7 [ 182.145496][ T9676] loop9: unable to read partition table [ 182.147339][ T9676] loop9: partition table beyond EOD, truncated [ 182.150089][ T9676] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.422955][ T9708] overlayfs: missing 'lowerdir' [ 182.435097][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 182.531943][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1257'. [ 182.535168][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1257'. [ 182.630300][ T9718] loop9: detected capacity change from 0 to 7 [ 182.634547][ T6026] Dev loop9: unable to read RDB block 7 [ 182.636367][ T6026] loop9: unable to read partition table [ 182.638218][ T6026] loop9: partition table beyond EOD, truncated [ 182.645820][ T9718] Dev loop9: unable to read RDB block 7 [ 182.647629][ T9718] loop9: unable to read partition table [ 182.650843][ T9718] loop9: partition table beyond EOD, truncated [ 182.656323][ T9718] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.726440][ T9730] overlayfs: missing 'workdir' [ 182.804410][ T9737] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 182.807110][ T9737] tipc: Enabled bearer , priority 10 [ 183.006608][ T9748] overlayfs: failed to clone upperpath [ 183.252616][ T9763] fuse: Bad value for 'fd' [ 183.378641][ T9776] overlayfs: failed to clone upperpath [ 183.394161][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 183.815655][ T9786] loop9: detected capacity change from 0 to 7 [ 183.820091][ T6026] Dev loop9: unable to read RDB block 7 [ 183.822448][ T6026] loop9: unable to read partition table [ 183.824999][ T6026] loop9: partition table beyond EOD, truncated [ 183.829905][ T9786] Dev loop9: unable to read RDB block 7 [ 183.831756][ T9786] loop9: unable to read partition table [ 183.833733][ T9786] loop9: partition table beyond EOD, truncated [ 183.835877][ T9786] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.902638][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1283'. [ 183.906289][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1283'. [ 183.910051][ T9789] netlink: 'syz.5.1283': attribute type 19 has an invalid length. [ 184.005997][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 184.006011][ T40] audit: type=1400 audit(1764147047.532:834): avc: denied { getopt } for pid=9794 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.011561][ T9795] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 184.023009][ T40] audit: type=1400 audit(1764147047.562:835): avc: denied { relabelto } for pid=9794 comm="syz.2.1286" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 184.035607][ T40] audit: type=1400 audit(1764147047.562:836): avc: denied { associate } for pid=9794 comm="syz.2.1286" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 184.340224][ T9813] loop9: detected capacity change from 0 to 7 [ 184.344903][ T6026] Dev loop9: unable to read RDB block 7 [ 184.347477][ T6026] loop9: unable to read partition table [ 184.350152][ T6026] loop9: partition table beyond EOD, truncated [ 184.354364][ T9813] Dev loop9: unable to read RDB block 7 [ 184.356271][ T9813] loop9: unable to read partition table [ 184.358143][ T9813] loop9: partition table beyond EOD, truncated [ 184.360415][ T9813] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.363721][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 184.609484][ T9833] qnx4: no qnx4 filesystem (no root dir). [ 184.615420][ T40] audit: type=1400 audit(1764147048.142:837): avc: denied { mounton } for pid=9832 comm="syz.2.1299" path="/375/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 184.637867][ T40] audit: type=1400 audit(1764147048.162:838): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 184.705906][ T9837] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1301'. [ 184.816758][ T40] audit: type=1326 audit(1764147048.342:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.2.1302" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a60f8f749 code=0x0 [ 184.914778][ T40] audit: type=1400 audit(1764147048.442:840): avc: denied { execute } for pid=9843 comm="syz.4.1303" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.925142][ T40] audit: type=1400 audit(1764147048.442:841): avc: denied { bind } for pid=9843 comm="syz.4.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.085702][ T9854] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 185.093568][ T9854] tmpfs: Bad value for 'mpol' [ 185.093675][ T40] audit: type=1400 audit(1764147048.622:842): avc: denied { mounton } for pid=9853 comm="syz.0.1307" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 185.105650][ T40] audit: type=1400 audit(1764147048.622:843): avc: denied { connect } for pid=9853 comm="syz.0.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.231788][ T9874] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 185.253334][ T9874] bond2: entered promiscuous mode [ 185.255368][ T9874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.266892][ T9874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.269609][ T9874] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 185.273104][ T9874] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 185.277997][ T9874] bond2: (slave ip6gre1): making interface the new active one [ 185.280826][ T9874] ip6gre1: entered promiscuous mode [ 185.283118][ T9874] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 185.346858][ T9874] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 185.349621][ T9874] ip6gre1: left promiscuous mode [ 185.352366][ T9874] bond2 (unregistering): Released all slaves [ 185.869413][ T9907] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 185.872655][ T9907] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 186.901138][ T9949] __nla_validate_parse: 6 callbacks suppressed [ 186.901156][ T9949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1342'. [ 186.999356][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 187.167562][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 187.173255][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.176656][ T9] usb 7-1: Product: syz [ 187.178426][ T9] usb 7-1: Manufacturer: syz [ 187.189545][ T9] usb 7-1: SerialNumber: syz [ 187.193903][ T9] usb 7-1: config 0 descriptor?? [ 187.257393][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.260910][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.264147][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.267060][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.273893][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.274035][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1353'. [ 187.308757][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.314124][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.401408][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.404831][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.428385][ T9941] 9pnet: Could not find request transport: Irtio [ 187.436843][ T5939] usb 7-1: USB disconnect, device number 12 [ 187.487841][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.492515][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.504705][ T9978] chnl_net:caif_netlink_parms(): no params data found [ 187.562711][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.566018][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.615097][ T9978] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.617962][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.621210][ T9978] bridge_slave_0: entered allmulticast mode [ 187.624866][ T9978] bridge_slave_0: entered promiscuous mode [ 187.629484][ T9978] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.632498][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.635502][ T9978] bridge_slave_1: entered allmulticast mode [ 187.639108][ T9978] bridge_slave_1: entered promiscuous mode [ 187.680562][ T9978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.684854][ T9978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.721349][ T9978] team0: Port device team_slave_0 added [ 187.728698][ T9978] team0: Port device team_slave_1 added [ 187.782914][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.785356][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.793667][ T9978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.801124][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.804075][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.813623][ T9978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.894797][ T9978] hsr_slave_0: entered promiscuous mode [ 187.898097][ T9978] hsr_slave_1: entered promiscuous mode [ 187.900911][ T9978] debugfs: 'hsr0' already exists in 'hsr' [ 187.903329][ T9978] Cannot create hsr debugfs directory [ 187.945811][T10018] loop9: detected capacity change from 0 to 7 [ 187.950046][T10018] Dev loop9: unable to read RDB block 7 [ 187.951862][T10018] loop9: unable to read partition table [ 187.954068][T10018] loop9: partition table beyond EOD, truncated [ 187.975547][T10018] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.011332][ T13] bridge_slave_1: left allmulticast mode [ 188.013876][ T13] bridge_slave_1: left promiscuous mode [ 188.016473][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.029398][ T13] bridge_slave_0: left allmulticast mode [ 188.031207][ T13] bridge_slave_0: left promiscuous mode [ 188.033091][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.570046][ T1346] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 188.628305][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.631518][ T13] bond_slave_0: left allmulticast mode [ 188.635105][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.638683][ T13] bond_slave_1: left allmulticast mode [ 188.642544][ T13] bond0 (unregistering): Released all slaves [ 188.652509][ T13] bond1 (unregistering): Released all slaves [ 188.740563][ T1346] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 188.744469][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.747451][ T1346] usb 5-1: Product: syz [ 188.749045][ T1346] usb 5-1: Manufacturer: syz [ 188.757598][ T13] tipc: Disabling bearer [ 188.758065][ T1346] usb 5-1: SerialNumber: syz [ 188.760695][ T13] tipc: Left network mode [ 188.765262][ T1346] usb 5-1: config 0 descriptor?? [ 188.880607][ T9978] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.908588][ T9978] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 188.922362][ T9978] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 188.926858][ T9978] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 188.935560][T10060] loop9: detected capacity change from 0 to 7 [ 188.939400][ T6026] Dev loop9: unable to read RDB block 7 [ 188.941960][ T6026] loop9: unable to read partition table [ 188.945113][ T6026] loop9: partition table beyond EOD, truncated [ 188.955057][T10060] Dev loop9: unable to read RDB block 7 [ 188.957502][T10060] loop9: unable to read partition table [ 188.960473][T10060] loop9: partition table beyond EOD, truncated [ 188.963165][T10060] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.972604][ T13] hsr_slave_0: left promiscuous mode [ 188.975534][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.978801][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.982667][ T34] usb 5-1: USB disconnect, device number 12 [ 188.986370][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.990645][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.023856][ T13] veth1_macvtap: left promiscuous mode [ 189.026052][ T13] veth0_macvtap: left promiscuous mode [ 189.027956][ T13] veth1_vlan: left promiscuous mode [ 189.032001][ T13] veth0_vlan: left promiscuous mode [ 189.319545][ T5947] Bluetooth: hci0: command tx timeout [ 189.517297][T10082] SELinux: policydb string does not match my string SE Linux [ 189.520591][T10082] SELinux: failed to load policy [ 189.526985][T10082] raw_sendmsg: syz.0.1377 forgot to set AF_INET. Fix it! [ 189.553459][ T13] team0 (unregistering): Port device team_slave_1 removed [ 189.623756][ T13] team0 (unregistering): Port device team_slave_0 removed [ 190.196609][ T9978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.203825][T10094] autofs4:pid:10094:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 190.214563][ T9978] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.220274][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.223281][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.233204][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.235410][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.266390][T10094] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1382'. [ 190.383720][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 190.394789][T10101] loop9: detected capacity change from 0 to 7 [ 190.401257][T10101] Dev loop9: unable to read RDB block 7 [ 190.403210][T10101] loop9: unable to read partition table [ 190.405052][T10101] loop9: partition table beyond EOD, truncated [ 190.406947][T10101] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.422887][T10120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10120 comm=syz.5.1387 [ 190.455025][ T9978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.703064][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 190.703075][ T40] audit: type=1400 audit(1764147054.242:848): avc: denied { lock } for pid=10161 comm="syz.2.1396" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.745135][ T9978] veth0_vlan: entered promiscuous mode [ 190.750784][ T9978] veth1_vlan: entered promiscuous mode [ 190.767531][ T9978] veth0_macvtap: entered promiscuous mode [ 190.775594][ T9978] veth1_macvtap: entered promiscuous mode [ 190.789028][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.811865][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.823883][ T80] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.827051][ T80] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.836488][ T80] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.839552][ T80] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.882621][T10176] binder: 10175:10176 ioctl c018937b 200000000180 returned -22 [ 190.892203][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.895674][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.914103][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.917249][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.992096][ T40] audit: type=1326 audit(1764147054.532:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.6.1348" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d8678f749 code=0x0 [ 191.042553][T10196] netlink: 'syz.0.1408': attribute type 9 has an invalid length. [ 191.045098][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 191.095099][T10202] tipc: Started in network mode [ 191.097413][T10202] tipc: Node identity 4, cluster identity 4711 [ 191.100446][T10202] tipc: Node number set to 4 [ 191.255157][ T40] audit: type=1400 audit(1764147054.782:850): avc: denied { write } for pid=10209 comm="syz.0.1412" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.389993][ T5947] Bluetooth: hci0: command tx timeout [ 191.587780][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 191.950748][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1421'. [ 191.986856][T10237] can: request_module (can-proto-0) failed. [ 192.204384][ T40] audit: type=1326 audit(1764147055.732:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10256 comm="syz.6.1428" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d8678f749 code=0x0 [ 192.588122][ T40] audit: type=1400 audit(1764147056.112:852): avc: denied { create } for pid=10264 comm="syz.2.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 192.595060][ T40] audit: type=1400 audit(1764147056.122:853): avc: denied { bind } for pid=10264 comm="syz.2.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 193.052011][ T5947] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 193.052253][T10289] ceph: No source [ 193.058342][T10289] QAT: Invalid ioctl -2144835806 [ 193.064272][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1440'. [ 193.144680][T10291] hsr_slave_1 (unregistering): left promiscuous mode [ 193.387313][ T40] audit: type=1400 audit(1764147056.912:854): avc: denied { listen } for pid=10307 comm="syz.0.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.469959][ T5947] Bluetooth: hci0: command tx timeout [ 193.598428][T10313] loop9: detected capacity change from 0 to 7 [ 193.602627][ T6026] Dev loop9: unable to read RDB block 7 [ 193.604550][ T6026] loop9: unable to read partition table [ 193.606857][ T6026] loop9: partition table beyond EOD, truncated [ 193.614752][T10313] Dev loop9: unable to read RDB block 7 [ 193.616691][T10313] loop9: unable to read partition table [ 193.619525][T10313] loop9: partition table beyond EOD, truncated [ 193.622213][T10313] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.688778][ T40] audit: type=1326 audit(1764147057.212:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1450" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b6818f749 code=0x0 [ 194.074048][T10340] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1458'. [ 194.077442][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1458'. [ 194.081438][T10340] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1458'. [ 194.084857][T10340] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1458'. [ 194.111777][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.113845][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.169742][T10354] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.174210][T10354] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 194.177928][T10354] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 194.303772][T10364] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1465'. [ 194.357007][T10368] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 194.363853][T10368] tipc: Enabled bearer , priority 10 [ 194.573245][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1473'. [ 194.609434][T10387] overlayfs: missing 'workdir' [ 194.616791][ T40] audit: type=1400 audit(1764147058.142:856): avc: denied { write } for pid=10377 comm="syz.0.1472" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 194.625968][ T40] audit: type=1400 audit(1764147058.142:857): avc: denied { ioctl } for pid=10377 comm="syz.0.1472" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 194.627989][T10388] input: syz1 as /devices/virtual/input/input9 [ 194.654765][T10388] netlink: 'syz.0.1472': attribute type 21 has an invalid length. [ 194.658384][T10388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1472'. [ 194.675973][T10388] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 194.678436][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1477'. [ 194.679076][T10388] overlayfs: failed to set xattr on upper [ 194.684932][T10388] overlayfs: ...falling back to redirect_dir=nofollow. [ 194.688755][T10388] overlayfs: ...falling back to index=off. [ 194.691747][T10388] overlayfs: ...falling back to uuid=null. [ 194.744628][T10394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.784934][T10396] overlayfs: failed to clone upperpath [ 194.801488][T10394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.807296][T10394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.818269][T10398] tipc: Enabling of bearer rejected, already enabled [ 194.869529][T10402] veth1_to_batadv: entered promiscuous mode [ 194.873457][T10402] batadv_slave_0: entered promiscuous mode [ 194.876040][T10402] batadv_slave_0: left promiscuous mode [ 194.878698][T10402] veth1_to_batadv: left promiscuous mode [ 195.371618][T10412] overlayfs: missing 'workdir' [ 195.549772][ T5947] Bluetooth: hci0: command tx timeout [ 195.809339][ T6019] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 195.953180][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 195.953196][ T40] audit: type=1400 audit(1764147059.492:862): avc: denied { read write } for pid=10430 comm="syz.5.1493" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 195.966633][ T40] audit: type=1400 audit(1764147059.492:863): avc: denied { open } for pid=10430 comm="syz.5.1493" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 195.977448][ T6019] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 195.980582][ T6019] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.984687][ T6019] usb 11-1: config 0 interface 0 has no altsetting 0 [ 195.988904][ T6019] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.994684][ T6019] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 195.997414][ T6019] usb 11-1: Product: syz [ 195.998787][ T6019] usb 11-1: Manufacturer: syz [ 196.000500][ T6019] usb 11-1: SerialNumber: syz [ 196.004004][ T6019] usb 11-1: config 0 descriptor?? [ 196.008627][ T6019] hub 11-1:0.0: bad descriptor, ignoring hub [ 196.011717][ T6019] hub 11-1:0.0: probe with driver hub failed with error -5 [ 196.016571][ T6019] usb 11-1: selecting invalid altsetting 0 [ 196.062535][T10436] netlink: 'syz.2.1495': attribute type 1 has an invalid length. [ 196.066135][T10432] netlink: 'syz.5.1493': attribute type 1 has an invalid length. [ 196.069722][T10432] netlink: 'syz.5.1493': attribute type 2 has an invalid length. [ 196.086184][T10436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.091930][T10431] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 196.096141][ T40] audit: type=1400 audit(1764147059.622:864): avc: denied { relabelto } for pid=10430 comm="syz.5.1493" name="148" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 196.104275][ T40] audit: type=1400 audit(1764147059.622:865): avc: denied { associate } for pid=10430 comm="syz.5.1493" name="148" dev="tmpfs" ino=853 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 196.114259][ T40] audit: type=1400 audit(1764147059.622:866): avc: denied { add_name } for pid=10430 comm="syz.5.1493" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 196.138546][T10443] overlayfs: failed to clone upperpath [ 196.139454][ T40] audit: type=1400 audit(1764147059.662:867): avc: denied { remove_name } for pid=8377 comm="syz-executor" name="file0" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 196.149209][ T40] audit: type=1400 audit(1764147059.672:868): avc: denied { rmdir } for pid=8377 comm="syz-executor" name="148" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 196.188562][T10447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.212476][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.217256][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.227732][T10429] (syz.6.1492,10429,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 196.231786][T10429] (syz.6.1492,10429,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 196.234898][T10429] (syz.6.1492,10429,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 196.238617][T10429] (syz.6.1492,10429,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 196.245484][T10447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.250767][T10447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.255847][ T40] audit: type=1400 audit(1764147059.782:869): avc: denied { name_connect } for pid=10446 comm="syz.2.1498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 196.264577][ T40] audit: type=1400 audit(1764147059.792:870): avc: denied { setopt } for pid=10446 comm="syz.2.1498" lport=52603 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 196.281545][ T40] audit: type=1400 audit(1764147059.812:871): avc: denied { ioctl } for pid=10448 comm="syz.5.1499" path="socket:[38301]" dev="sockfs" ino=38301 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.349844][ T53] usb 11-1: USB disconnect, device number 2 [ 196.699411][ T53] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 196.829370][ T53] usb 11-1: device descriptor read/64, error -71 [ 197.069427][ T53] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 197.209335][ T53] usb 11-1: device descriptor read/64, error -71 [ 197.325731][ T53] usb usb11-port1: attempt power cycle [ 197.357665][T10476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35856 sclass=netlink_route_socket pid=10476 comm=syz.2.1504 [ 197.489518][T10478] input: syz1 as /devices/virtual/input/input10 [ 197.555610][T10478] afs: Unknown parameter 'FAž' [ 197.680324][ T53] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 197.700217][ T53] usb 11-1: device descriptor read/8, error -71 [ 197.902385][T10483] overlayfs: failed to clone upperpath [ 197.966697][ T53] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 197.990027][ T53] usb 11-1: device descriptor read/8, error -71 [ 198.109503][ T53] usb usb11-port1: unable to enumerate USB device [ 198.215824][T10506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=10506 comm=syz.2.1515 [ 198.261404][T10504] loop9: detected capacity change from 0 to 7 [ 198.266774][T10504] Dev loop9: unable to read RDB block 7 [ 198.269057][T10504] loop9: unable to read partition table [ 198.271819][T10504] loop9: partition table beyond EOD, truncated [ 198.279531][T10504] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.721249][T10527] binder: 10526:10527 ioctl c0487c04 200000000440 returned -22 [ 199.011258][T10551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.066976][T10551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.072638][T10551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.171999][T10577] overlayfs: failed to clone upperpath [ 199.308647][T10587] __nla_validate_parse: 3 callbacks suppressed [ 199.308662][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 199.636459][T10603] syzkaller0: entered promiscuous mode [ 199.638846][T10603] syzkaller0: entered allmulticast mode [ 199.745034][T10621] overlayfs: failed to clone upperpath [ 199.929396][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 199.975905][T10643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.005178][T10645] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 200.022992][T10645] bond3: entered promiscuous mode [ 200.024857][T10645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.033761][T10648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.038593][T10643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.041014][T10645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.045763][T10645] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 200.050164][T10645] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 200.056406][T10645] bond3: (slave ip6gre1): making interface the new active one [ 200.059809][T10645] ip6gre1: entered promiscuous mode [ 200.062591][T10645] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 200.066354][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 200.092645][ T34] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 200.095594][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.097984][ T34] usb 5-1: Product: syz [ 200.099391][ T34] usb 5-1: Manufacturer: syz [ 200.100898][ T34] usb 5-1: SerialNumber: syz [ 200.104795][ T34] usb 5-1: config 0 descriptor?? [ 200.142185][T10645] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 200.145122][T10645] ip6gre1: left promiscuous mode [ 200.150008][T10645] bond3 (unregistering): Released all slaves [ 200.248923][T10653] overlayfs: failed to clone upperpath [ 200.310821][ T1346] usb 5-1: USB disconnect, device number 13 [ 200.449567][T10664] overlayfs: failed to clone upperpath [ 200.493876][T10666] 9pnet_fd: Insufficient options for proto=fd [ 200.500670][T10666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1566'. [ 200.801755][T10685] program syz.5.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.851953][T10688] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1574'. [ 200.856230][T10688] overlay: Unknown parameter 'obj_role' [ 200.865823][T10692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.888485][T10695] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 200.924425][T10692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.928724][T10692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.934353][T10695] binder: 10694:10695 ioctl c0306201 200000000040 returned -14 [ 200.938566][T10695] binder: 10694:10695 ioctl c0306201 200000000640 returned -22 [ 200.999127][T10706] trusted_key: encrypted_key: key trusted:syz not found [ 201.002227][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 201.002241][ T40] audit: type=1400 audit(1764147064.532:882): avc: denied { mounton } for pid=10705 comm="syz.5.1581" path="/176/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 201.088673][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1582'. [ 201.095960][T10711] openvswitch: netlink: Flow actions attr not present in new flow. [ 201.099757][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1582'. [ 201.103918][T10711] openvswitch: netlink: Flow actions attr not present in new flow. [ 201.147593][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1583'. [ 201.244453][ T40] audit: type=1400 audit(1764147064.772:883): avc: denied { map } for pid=10722 comm="syz.5.1586" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 201.284052][ T40] audit: type=1400 audit(1764147064.782:884): avc: denied { execute } for pid=10722 comm="syz.5.1586" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 201.317341][T10732] overlayfs: missing 'workdir' [ 201.327974][T10732] Bluetooth: MGMT ver 1.23 [ 201.330554][T10732] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 201.411661][ T40] audit: type=1400 audit(1764147064.932:885): avc: denied { view } for pid=10735 comm="syz.5.1589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 201.529469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 201.589073][T10746] loop9: detected capacity change from 0 to 7 [ 201.591998][ T6026] Dev loop9: unable to read RDB block 7 [ 201.594093][ T6026] loop9: unable to read partition table [ 201.596618][ T6026] loop9: partition table beyond EOD, truncated [ 201.602080][T10746] Dev loop9: unable to read RDB block 7 [ 201.604044][T10746] loop9: unable to read partition table [ 201.606004][T10746] loop9: partition table beyond EOD, truncated [ 201.608103][T10746] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.854864][T10769] evm: overlay not supported [ 201.891222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 201.895310][T10774] tipc: Enabling of bearer rejected, failed to enable media [ 201.908679][T10774] syzkaller0: entered promiscuous mode [ 201.910776][T10774] syzkaller0: entered allmulticast mode [ 201.949085][T10780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.004155][T10780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.008254][T10780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.013524][T10780] overlay: Unknown parameter 'dont_measure' [ 202.016204][T10780] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.032744][T10780] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 202.036236][T10780] overlayfs: failed to look up (tracing) for ino (-66) [ 202.571948][ T40] audit: type=1400 audit(1764147066.102:886): avc: denied { write } for pid=10817 comm="syz.0.1610" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 202.596046][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1611'. [ 202.637054][T10829] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 202.640987][T10829] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 202.643806][T10829] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 202.646336][T10829] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 202.761232][T10833] loop9: detected capacity change from 0 to 7 [ 202.763862][T10833] Dev loop9: unable to read RDB block 7 [ 202.765848][T10833] loop9: unable to read partition table [ 202.767961][T10833] loop9: partition table beyond EOD, truncated [ 202.771963][T10833] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.988773][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 203.070167][ T6006] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 203.071738][T10851] overlayfs: failed to resolve './file1/file0': -2 [ 203.154908][T10855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.210979][T10855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.215652][T10855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.233170][ T6006] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 203.237032][ T6006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.240694][ T6006] usb 10-1: Product: syz [ 203.242079][ T6006] usb 10-1: Manufacturer: syz [ 203.243615][ T6006] usb 10-1: SerialNumber: syz [ 203.246307][ T6006] usb 10-1: config 0 descriptor?? [ 203.451783][ T840] usb 10-1: USB disconnect, device number 7 [ 203.798917][T10859] netlink: 'syz.2.1623': attribute type 10 has an invalid length. [ 203.806211][T10859] bridge_slave_1: left allmulticast mode [ 203.808301][T10859] bridge_slave_1: left promiscuous mode [ 203.810524][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.816767][T10859] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 203.998456][T10866] overlayfs: missing 'workdir' [ 204.072986][T10871] overlay: Unknown parameter 'obj_type' [ 204.165668][T10875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.221178][T10881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.226558][T10875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.231811][ T40] audit: type=1400 audit(1764147067.762:887): avc: denied { execute } for pid=10874 comm="syz.2.1630" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 204.736560][T10887] loop9: detected capacity change from 0 to 7 [ 204.740599][ T6026] Dev loop9: unable to read RDB block 7 [ 204.742961][ T6026] loop9: unable to read partition table [ 204.745506][ T6026] loop9: partition table beyond EOD, truncated [ 204.750212][T10887] Dev loop9: unable to read RDB block 7 [ 204.752587][T10887] loop9: unable to read partition table [ 204.754503][T10887] loop9: partition table beyond EOD, truncated [ 204.757013][T10887] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 204.851347][T10894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1636'. [ 205.023875][T10904] IPVS: persistence engine module ip_vs_pe_s not found [ 205.028025][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1639'. [ 205.059333][T10904] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1639'. [ 205.090331][T10907] overlayfs: failed to clone upperpath [ 205.095755][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 205.113120][T10907] macvlan3: entered promiscuous mode [ 205.114947][T10907] macvlan3: entered allmulticast mode [ 205.117650][T10907] bond3: entered promiscuous mode [ 205.119690][T10907] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 205.125803][T10907] bond3: left promiscuous mode [ 205.346154][ T40] audit: type=1400 audit(1764147068.872:888): avc: denied { create } for pid=10916 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 205.348085][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1643'. [ 205.355481][ T40] audit: type=1400 audit(1764147068.872:889): avc: denied { write } for pid=10916 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 205.391131][T10921] openvswitch: netlink: Key type 31 is not supported [ 205.401289][T10921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.432877][ T6141] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 205.436791][ T6141] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 205.455968][ T12] wlan1: authenticated [ 205.456212][T10921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.459918][ T12] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 205.465884][T10921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.650372][T10939] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1653'. [ 205.761658][T10948] loop9: detected capacity change from 0 to 7 [ 205.765319][T10948] Dev loop9: unable to read RDB block 7 [ 205.767882][T10948] loop9: unable to read partition table [ 205.770135][T10948] loop9: partition table beyond EOD, truncated [ 205.772258][T10948] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.824295][T10951] nbd: must specify a device to reconfigure [ 205.865759][ T40] audit: type=1400 audit(1764147069.392:890): avc: denied { connect } for pid=10955 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.225908][T10972] overlayfs: failed to clone upperpath [ 206.433026][T10979] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 206.445875][T10979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.452168][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1664'. [ 206.456668][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 206.464963][T10979] vlan2: entered allmulticast mode [ 206.466664][T10979] bond4: entered allmulticast mode [ 206.551948][T10984] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1666'. [ 206.557168][T10984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.599500][ T12] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 206.717378][ T80] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 206.793301][T10998] 9p: Unknown access argument 18446744073709551615: -34 [ 206.839625][ T1190] wlan1: association with 08:02:11:00:00:00 timed out [ 206.952614][ T40] audit: type=1400 audit(1764147070.482:891): avc: denied { watch watch_reads } for pid=11000 comm="syz.0.1672" path="pipe:[39630]" dev="pipefs" ino=39630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 207.070780][T11003] loop9: detected capacity change from 0 to 7 [ 207.073944][ T6026] Dev loop9: unable to read RDB block 7 [ 207.075787][ T6026] loop9: unable to read partition table [ 207.077629][ T6026] loop9: partition table beyond EOD, truncated [ 207.082758][T11003] Dev loop9: unable to read RDB block 7 [ 207.085262][T11003] loop9: unable to read partition table [ 207.087138][T11003] loop9: partition table beyond EOD, truncated [ 207.089430][T11003] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.220537][T11022] netlink: 'syz.0.1676': attribute type 12 has an invalid length. [ 207.230839][T11022] netlink: 'syz.0.1676': attribute type 10 has an invalid length. [ 207.237068][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.240774][T11022] bridge_slave_1: left allmulticast mode [ 207.242586][T11022] bridge_slave_1: left promiscuous mode [ 207.244749][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.256635][T11022] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 207.260632][ T1190] bond0: (slave bridge_slave_1): interface is now down [ 207.265119][ T1190] bond0: now running without any active interface! [ 207.268525][T11013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=11013 comm=syz.0.1676 [ 207.275094][T11013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=11013 comm=syz.0.1676 [ 207.280526][T11013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=11013 comm=syz.0.1676 [ 207.285683][T11013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=11013 comm=syz.0.1676 [ 207.306431][ T40] audit: type=1400 audit(1764147070.832:892): avc: denied { map } for pid=11027 comm="syz.2.1681" path="socket:[40329]" dev="sockfs" ino=40329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 207.338673][T11032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.394105][T11032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.399121][T11032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.510351][ T5939] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 207.661415][ T5939] usb 11-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x7A, changing to 0xA [ 207.666008][ T5939] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0xA has invalid maxpacket 55020, setting to 64 [ 207.670447][ T5939] usb 11-1: config 0 interface 0 has no altsetting 0 [ 207.675526][ T5939] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.679481][ T5939] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 207.682869][ T5939] usb 11-1: Product: syz [ 207.684672][ T5939] usb 11-1: Manufacturer: syz [ 207.686616][ T5939] usb 11-1: SerialNumber: syz [ 207.690270][ T5939] usb 11-1: config 0 descriptor?? [ 207.695698][ T5939] usb 11-1: selecting invalid altsetting 0 [ 207.910501][ T6141] usb 11-1: USB disconnect, device number 7 [ 208.699377][ T34] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 208.722853][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1691'. [ 208.782027][ T40] audit: type=1400 audit(1764147072.312:893): avc: denied { read append } for pid=11058 comm="syz.6.1692" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 208.790278][ T40] audit: type=1400 audit(1764147072.312:894): avc: denied { open } for pid=11058 comm="syz.6.1692" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 208.803054][T11059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.839503][ T34] usb 10-1: device descriptor read/64, error -71 [ 208.860041][T11059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.880777][T11059] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 208.888080][T11059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.081613][ T34] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 209.093786][T11071] loop9: detected capacity change from 0 to 7 [ 209.097996][T11071] Dev loop9: unable to read RDB block 7 [ 209.101211][T11071] loop9: unable to read partition table [ 209.103815][T11071] loop9: partition table beyond EOD, truncated [ 209.109472][T11071] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.209418][ T34] usb 10-1: device descriptor read/64, error -71 [ 209.269333][T11077] overlayfs: failed to clone upperpath [ 209.320611][ T34] usb usb10-port1: attempt power cycle [ 209.355933][T11079] xt_bpf: check failed: parse error [ 209.359933][T11079] No source specified [ 209.669499][ T34] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 209.689918][ T34] usb 10-1: device descriptor read/8, error -71 [ 209.697905][T11101] overlayfs: failed to clone upperpath [ 209.929477][ T34] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 209.960994][ T34] usb 10-1: device descriptor read/8, error -71 [ 210.069623][ T34] usb usb10-port1: unable to enumerate USB device [ 210.224559][T11117] __nla_validate_parse: 5 callbacks suppressed [ 210.224577][T11117] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1712'. [ 210.264988][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1713'. [ 210.476063][T11123] loop9: detected capacity change from 0 to 7 [ 210.479579][T11123] Dev loop9: unable to read RDB block 7 [ 210.481395][T11123] loop9: unable to read partition table [ 210.483660][T11123] loop9: partition table beyond EOD, truncated [ 210.485701][T11123] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.645059][T11132] overlay: Unknown parameter 'fsuuid' [ 210.731735][T11137] bond1: entered promiscuous mode [ 210.825415][T11142] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1721'. [ 211.040596][T11148] loop9: detected capacity change from 0 to 7 [ 211.044090][T11148] Dev loop9: unable to read RDB block 7 [ 211.046478][T11148] loop9: unable to read partition table [ 211.049024][T11148] loop9: partition table beyond EOD, truncated [ 211.051758][T11148] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.120454][T11151] syzkaller0: entered promiscuous mode [ 211.122347][T11151] syzkaller0: entered allmulticast mode [ 211.179743][ T5947] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 211.181949][T11153] netlink: 'syz.2.1725': attribute type 21 has an invalid length. [ 211.184862][T11153] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1725'. [ 211.216719][T11155] overlay: Unknown parameter 'subj_user' [ 211.376458][T11165] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1730'. [ 211.492619][T11171] loop9: detected capacity change from 0 to 7 [ 211.495302][T11171] Dev loop9: unable to read RDB block 7 [ 211.497206][T11171] loop9: unable to read partition table [ 211.499135][T11171] loop9: partition table beyond EOD, truncated [ 211.502687][T11171] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.553308][ T40] audit: type=1400 audit(1764147075.082:895): avc: denied { bind } for pid=11176 comm="syz.6.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.553913][T11177] netlink: 'syz.6.1734': attribute type 10 has an invalid length. [ 211.568082][T11177] team0: Port device dummy0 added [ 211.573273][T11177] netlink: 'syz.6.1734': attribute type 10 has an invalid length. [ 211.576227][T11177] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 211.582930][T11177] team0: Failed to send options change via netlink (err -105) [ 211.585592][T11177] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 211.589036][T11177] team0: Port device dummy0 removed [ 211.593512][T11177] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 211.597797][T11177] Bluetooth: MGMT ver 1.23 [ 211.603658][ T40] audit: type=1400 audit(1764147075.132:896): avc: denied { setattr } for pid=11176 comm="syz.6.1734" name="HCI" dev="sockfs" ino=41357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.673524][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1738'. [ 211.998335][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1740'. [ 212.007089][T11195] syzkaller0: entered promiscuous mode [ 212.009826][T11195] syzkaller0: entered allmulticast mode [ 212.223897][T11199] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1742'. [ 212.264545][ T40] audit: type=1400 audit(1764147075.792:897): avc: denied { setattr } for pid=11203 comm="syz.5.1744" name="/" dev="9p" ino=72095487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.379533][ T839] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 212.435848][ T40] audit: type=1400 audit(1764147075.962:898): avc: denied { setcheckreqprot } for pid=11210 comm="syz.5.1745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 212.536631][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 212.539372][ T839] usb 11-1: device descriptor read/64, error -71 [ 212.609309][T11222] cgroup: none used incorrectly [ 212.613676][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1751'. [ 212.626258][T11222] SELinux: failed to load policy [ 212.789786][ T839] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 212.829672][ T53] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.919477][ T839] usb 11-1: device descriptor read/64, error -71 [ 212.941076][T11230] loop9: detected capacity change from 0 to 7 [ 212.946026][ T6026] Dev loop9: unable to read RDB block 7 [ 212.948406][ T6026] loop9: unable to read partition table [ 212.951096][ T6026] loop9: partition table beyond EOD, truncated [ 212.954740][T11230] Dev loop9: unable to read RDB block 7 [ 212.957207][T11230] loop9: unable to read partition table [ 212.959384][T11230] loop9: partition table beyond EOD, truncated [ 212.961302][T11230] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.002946][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 213.006669][ T53] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 213.010276][ T53] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.014144][ T53] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.018157][ T53] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.022483][ T53] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.026524][ T53] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.030513][ T839] usb usb11-port1: attempt power cycle [ 213.030513][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.034058][T11233] netlink: 'syz.5.1755': attribute type 1 has an invalid length. [ 213.037035][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 213.050038][T11233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.077142][T11233] bond1: (slave veth3): Enslaving as an active interface with a down link [ 213.108166][T11234] bond1: (slave veth5): Enslaving as an active interface with a down link [ 213.369485][ T839] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 213.400010][ T839] usb 11-1: device descriptor read/8, error -71 [ 213.404376][T11239] cgroup: none used incorrectly [ 213.445268][ T40] audit: type=1400 audit(1764147076.972:899): avc: denied { shutdown } for pid=11219 comm="syz.0.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.453183][ T40] audit: type=1400 audit(1764147076.972:900): avc: denied { read } for pid=11219 comm="syz.0.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.477637][ T40] audit: type=1400 audit(1764147077.002:901): avc: denied { read } for pid=11242 comm="syz.2.1759" path="socket:[43146]" dev="sockfs" ino=43146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 213.589162][T11248] overlayfs: failed to resolve './file0': -2 [ 213.639494][ T839] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 213.660204][ T839] usb 11-1: device descriptor read/8, error -71 [ 213.774978][ T839] usb usb11-port1: unable to enumerate USB device [ 213.873295][T11244] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 214.076397][ T839] usb 5-1: USB disconnect, device number 14 [ 214.312731][T11263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11263 comm=syz.2.1767 [ 214.424061][ T40] audit: type=1400 audit(1764147077.952:902): avc: denied { create } for pid=11271 comm="syz.2.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 214.432120][ T40] audit: type=1400 audit(1764147077.952:903): avc: denied { ioctl } for pid=11271 comm="syz.2.1770" path="socket:[40838]" dev="sockfs" ino=40838 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 214.467159][ T40] audit: type=1326 audit(1764147077.992:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.2.1771" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a60f8f749 code=0x0 [ 214.623936][T11278] overlayfs: failed to clone upperpath [ 214.718875][ T40] audit: type=1400 audit(1764147078.242:905): avc: denied { connect } for pid=11281 comm="syz.0.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.069922][ T5937] Bluetooth: hci1: command 0x1003 tx timeout [ 215.073232][ T5947] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 215.160981][T11290] netlink: 'syz.6.1776': attribute type 1 has an invalid length. [ 215.218734][T11288] loop9: detected capacity change from 0 to 7 [ 215.221826][T11288] Dev loop9: unable to read RDB block 7 [ 215.224504][T11288] loop9: unable to read partition table [ 215.227023][T11288] loop9: partition table beyond EOD, truncated [ 215.229856][T11288] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 215.417600][T11304] __nla_validate_parse: 5 callbacks suppressed [ 215.417619][T11304] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1781'. [ 215.483946][T11313] kvm: user requested TSC rate below hardware speed [ 215.486907][T11313] kvm: user requested TSC rate below hardware speed [ 215.502464][T11317] can: request_module (can-proto-0) failed. [ 215.514904][ T839] IPVS: starting estimator thread 0... [ 215.545667][ T40] audit: type=1400 audit(1764147079.072:906): avc: denied { read } for pid=11319 comm="syz.6.1783" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 215.546590][T11320] sd 0:0:0:0: PR command failed: 1026 [ 215.555621][T11320] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 215.558192][T11320] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 215.564781][T11320] Cannot find add_set index 65532 as target [ 215.612081][T11322] IPVS: using max 27 ests per chain, 64800 per kthread [ 215.672281][T11328] loop9: detected capacity change from 0 to 7 [ 215.676548][ T6026] Dev loop9: unable to read RDB block 7 [ 215.678416][ T6026] loop9: unable to read partition table [ 215.682155][ T6026] loop9: partition table beyond EOD, truncated [ 215.686679][T11328] Dev loop9: unable to read RDB block 7 [ 215.688627][T11328] loop9: unable to read partition table [ 215.691198][T11328] loop9: partition table beyond EOD, truncated [ 215.693846][T11328] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 215.753974][T11334] tmpfs: Unknown parameter 'mprelative' [ 215.901711][ T53] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 216.042320][T11342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1791'. [ 216.051558][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.056259][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 216.060866][ T53] usb 11-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 216.064468][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.073572][ T53] usb 11-1: config 0 descriptor?? [ 216.076383][T11331] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 216.154782][T11354] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1796'. [ 216.290827][ T53] usbhid 11-1:0.0: can't add hid device: -71 [ 216.292881][ T53] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 216.301833][ T53] usb 11-1: USB disconnect, device number 12 [ 216.422190][T11367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1801'. [ 216.489395][T11370] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1802'. [ 216.493518][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 216.640866][T11381] overlayfs: failed to clone upperpath [ 216.719441][ T5939] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 216.807417][T11386] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.811081][T11386] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 216.859397][ T5939] usb 10-1: device descriptor read/64, error -71 [ 216.893372][T11390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1811'. [ 216.958222][T11399] cgroup: Unknown subsys name 'cpuset' [ 216.996459][T11402] overlayfs: failed to resolve './file2': -2 [ 217.099427][ T5939] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 217.173575][T11409] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 217.177901][T11409] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 217.229533][ T5939] usb 10-1: device descriptor read/64, error -71 [ 217.339615][ T5939] usb usb10-port1: attempt power cycle [ 217.680305][ T5939] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 217.700099][ T5939] usb 10-1: device descriptor read/8, error -71 [ 217.841316][T11415] pim6reg9: entered allmulticast mode [ 217.949399][ T5939] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 217.969730][ T5939] usb 10-1: device descriptor read/8, error -71 [ 218.079557][ T5939] usb usb10-port1: unable to enumerate USB device [ 218.127869][T11421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1823'. [ 218.324590][T11430] loop9: detected capacity change from 0 to 7 [ 218.327659][T11430] Dev loop9: unable to read RDB block 7 [ 218.330138][T11430] loop9: unable to read partition table [ 218.332357][T11430] loop9: partition table beyond EOD, truncated [ 218.335694][T11430] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 218.386374][T11441] fuse: Unknown parameter 'appraise_type' [ 218.495640][T11452] program syz.0.1834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.495811][T11451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1832'. [ 218.563958][T11457] program syz.0.1834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.704312][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1837'. [ 218.784515][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 218.784531][ T40] audit: type=1400 audit(1764147082.312:912): avc: denied { write } for pid=11470 comm="syz.2.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 218.793986][T11465] loop9: detected capacity change from 0 to 7 [ 218.798395][ T40] audit: type=1400 audit(1764147082.322:913): avc: denied { write } for pid=11470 comm="syz.2.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.799412][ T6026] Dev loop9: unable to read RDB block 7 [ 218.808574][ T6026] loop9: unable to read partition table [ 218.812246][ T6026] loop9: partition table beyond EOD, truncated [ 218.819932][T11465] Dev loop9: unable to read RDB block 7 [ 218.821790][T11465] loop9: unable to read partition table [ 218.823605][T11465] loop9: partition table beyond EOD, truncated [ 218.825564][T11465] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.066516][T11498] sctp: [Deprecated]: syz.6.1849 (pid 11498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.066516][T11498] Use struct sctp_sack_info instead [ 219.267306][T11504] loop9: detected capacity change from 0 to 7 [ 219.271026][T11504] Dev loop9: unable to read RDB block 7 [ 219.273425][T11504] loop9: unable to read partition table [ 219.276107][T11504] loop9: partition table beyond EOD, truncated [ 219.279513][T11504] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.497060][T11520] netlink: 'syz.6.1857': attribute type 11 has an invalid length. [ 219.501998][T11520] netlink: 'syz.6.1857': attribute type 25 has an invalid length. [ 219.505503][T11519] netlink: 'syz.6.1857': attribute type 25 has an invalid length. [ 219.523185][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.538991][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.554541][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.559083][ T7856] bond0: (slave syz_tun): Releasing backup interface [ 219.564390][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.567945][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.652873][ T40] audit: type=1400 audit(1764147083.182:914): avc: denied { append } for pid=11531 comm="syz.5.1860" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 219.656347][T11532] netlink: 'syz.5.1860': attribute type 1 has an invalid length. [ 219.700736][T11532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.759006][ T40] audit: type=1400 audit(1764147083.282:915): avc: denied { ioctl } for pid=11537 comm="syz.5.1862" path="socket:[43535]" dev="sockfs" ino=43535 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 219.858730][T11522] chnl_net:caif_netlink_parms(): no params data found [ 219.865542][T11541] loop9: detected capacity change from 0 to 7 [ 219.868755][T11541] Dev loop9: unable to read RDB block 7 [ 219.871160][T11541] loop9: unable to read partition table [ 219.873525][T11541] loop9: partition table beyond EOD, truncated [ 219.875919][T11541] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.974102][ T40] audit: type=1400 audit(1764147083.502:916): avc: denied { getopt } for pid=11553 comm="syz.6.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.991825][T11522] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.994735][T11522] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.997292][T11522] bridge_slave_0: entered allmulticast mode [ 220.003430][T11522] bridge_slave_0: entered promiscuous mode [ 220.020460][T11522] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.022584][T11522] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.024977][T11522] bridge_slave_1: entered allmulticast mode [ 220.027615][T11522] bridge_slave_1: entered promiscuous mode [ 220.089900][T11522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.096729][T11522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.119439][ T840] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 220.142854][T11522] team0: Port device team_slave_0 added [ 220.143749][ T40] audit: type=1400 audit(1764147083.672:917): avc: denied { remount } for pid=11565 comm="syz.6.1871" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 220.146796][T11522] team0: Port device team_slave_1 added [ 220.190987][T11522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.193508][T11522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.202881][T11522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.216554][T11522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.219173][T11522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.228177][T11522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.249352][ T840] usb 10-1: device descriptor read/64, error -71 [ 220.302854][T11522] hsr_slave_0: entered promiscuous mode [ 220.306094][T11522] hsr_slave_1: entered promiscuous mode [ 220.308973][T11522] debugfs: 'hsr0' already exists in 'hsr' [ 220.311420][T11522] Cannot create hsr debugfs directory [ 220.314116][ T80] gretap0: left allmulticast mode [ 220.316120][ T80] gretap0: left promiscuous mode [ 220.318241][ T80] bridge0: port 3(gretap0) entered disabled state [ 220.324036][ T80] bridge_slave_0: left allmulticast mode [ 220.326206][ T80] bridge_slave_0: left promiscuous mode [ 220.328574][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.519414][ T840] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 220.649389][ T840] usb 10-1: device descriptor read/64, error -71 [ 220.761392][ T840] usb usb10-port1: attempt power cycle [ 220.793535][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.798849][ T80] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 220.804003][ T80] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 220.807654][ T80] bond0 (unregistering): Released all slaves [ 220.814556][ T80] bond1 (unregistering): (slave lo): Releasing backup interface [ 220.817469][ T80] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 220.821668][ T80] bond1 (unregistering): Released all slaves [ 220.895822][ T80] bond2 (unregistering): Released all slaves [ 220.905982][ T80] bond3 (unregistering): Released all slaves [ 220.987254][ T80] bond4 (unregistering): Released all slaves [ 221.087899][ T80] tipc: Disabling bearer [ 221.090947][ T80] tipc: Left network mode [ 221.119367][ T840] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 221.150975][ T840] usb 10-1: device descriptor read/8, error -71 [ 221.206299][T11573] loop9: detected capacity change from 0 to 7 [ 221.210845][T11573] Dev loop9: unable to read RDB block 7 [ 221.213419][T11573] loop9: unable to read partition table [ 221.215892][T11573] loop9: partition table beyond EOD, truncated [ 221.218501][T11573] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.265958][ T80] hsr_slave_0: left promiscuous mode [ 221.268082][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.276210][ T80] veth0_macvtap: left allmulticast mode [ 221.334516][ T80] team0 (unregistering): Port device veth5 removed [ 221.378673][ T80] team0 (unregistering): Port device veth3 removed [ 221.399346][ T840] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 221.430116][ T840] usb 10-1: device descriptor read/8, error -71 [ 221.551820][ T840] usb usb10-port1: unable to enumerate USB device [ 221.630020][ T5947] Bluetooth: hci1: command tx timeout [ 221.815588][ T80] team0 (unregistering): Port device team_slave_1 removed [ 221.901361][ T80] team0 (unregistering): Port device team_slave_0 removed [ 222.194517][T11584] nbd: socks must be embedded in a SOCK_ITEM attr [ 222.248232][T11589] tmpfs: Bad value for 'mpol' [ 222.583222][ T40] audit: type=1326 audit(1764147086.112:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11614 comm="syz.0.1884" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b6818f749 code=0x0 [ 222.943791][ T40] audit: type=1400 audit(1764147086.472:919): avc: denied { map } for pid=11641 comm="syz.6.1888" path="socket:[42690]" dev="sockfs" ino=42690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.977890][ T40] audit: type=1400 audit(1764147086.472:920): avc: denied { accept } for pid=11641 comm="syz.6.1888" path="socket:[42690]" dev="sockfs" ino=42690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.017063][T11522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.027716][T11522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.052808][T11522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.062137][T11522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.068787][T11642] syzkaller1: entered promiscuous mode [ 223.070966][T11642] syzkaller1: entered allmulticast mode [ 223.079697][ T80] IPVS: stop unused estimator thread 0... [ 223.135701][T11522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.146624][T11522] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.156649][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.159688][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.170887][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.173992][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.318860][T11522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.344393][T11522] veth0_vlan: entered promiscuous mode [ 223.351643][T11522] veth1_vlan: entered promiscuous mode [ 223.375084][T11522] veth0_macvtap: entered promiscuous mode [ 223.381446][T11522] veth1_macvtap: entered promiscuous mode [ 223.393661][T11522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.401338][T11522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.408563][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.411887][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.418052][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.422043][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.454157][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.456728][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.475510][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.478777][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.496169][T11670] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 223.501742][ T40] audit: type=1400 audit(1764147087.042:921): avc: denied { write } for pid=11522 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 223.709689][ T5947] Bluetooth: hci1: command tx timeout [ 223.718764][T11684] loop9: detected capacity change from 0 to 7 [ 223.722484][T11684] Dev loop9: unable to read RDB block 7 [ 223.724804][T11684] loop9: unable to read partition table [ 223.726925][T11684] loop9: partition table beyond EOD, truncated [ 223.729909][T11684] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 223.800534][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 223.800549][ T40] audit: type=1326 audit(1764147087.332:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.6.1898" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d8678f749 code=0x0 [ 223.959427][ T839] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 224.089507][ T839] usb 5-1: device descriptor read/64, error -71 [ 224.339599][ T839] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 224.469683][ T839] usb 5-1: device descriptor read/64, error -71 [ 224.497558][T11725] __nla_validate_parse: 8 callbacks suppressed [ 224.497571][T11725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 224.579633][ T839] usb usb5-port1: attempt power cycle [ 224.624524][T11728] loop9: detected capacity change from 0 to 7 [ 224.628688][ T6026] Dev loop9: unable to read RDB block 7 [ 224.631401][ T6026] loop9: unable to read partition table [ 224.633356][ T6026] loop9: partition table beyond EOD, truncated [ 224.637529][T11728] Dev loop9: unable to read RDB block 7 [ 224.640390][T11728] loop9: unable to read partition table [ 224.642868][T11728] loop9: partition table beyond EOD, truncated [ 224.645698][T11728] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.949739][ T839] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 224.991462][ T839] usb 5-1: device descriptor read/8, error -71 [ 225.148076][ T40] audit: type=1326 audit(1764147088.672:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.6.1917" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d8678f749 code=0x0 [ 225.239379][ T839] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 225.260117][ T839] usb 5-1: device descriptor read/8, error -71 [ 225.379674][ T839] usb usb5-port1: unable to enumerate USB device [ 225.473120][T11769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1921'. [ 225.696435][T11779] overlayfs: workdir and upperdir must reside under the same mount [ 225.789421][ T5947] Bluetooth: hci1: command tx timeout [ 225.971752][T11782] loop9: detected capacity change from 0 to 7 [ 225.975442][T11782] Dev loop9: unable to read RDB block 7 [ 225.978113][T11782] loop9: unable to read partition table [ 225.982359][T11782] loop9: partition table beyond EOD, truncated [ 225.985074][T11782] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.061390][ T40] audit: type=1400 audit(1764147089.592:925): avc: denied { setattr } for pid=11786 comm="syz.2.1926" name="seq" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 226.070994][ T40] audit: type=1400 audit(1764147089.592:926): avc: denied { kexec_image_load } for pid=11786 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 226.079513][ T40] audit: type=1400 audit(1764147089.592:927): avc: denied { bind } for pid=11786 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 226.187763][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 226.195488][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1930'. [ 226.199576][T11796] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 226.202986][T11796] nbd: error processing sock list [ 226.349378][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 226.422965][ T40] audit: type=1326 audit(1764147089.952:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.5.1933" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa49838f749 code=0x0 [ 226.499374][ T24] usb 5-1: device descriptor read/64, error -71 [ 226.708069][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1934'. [ 226.746141][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 226.843046][T11816] loop9: detected capacity change from 0 to 7 [ 226.847394][ T6026] Dev loop9: unable to read RDB block 7 [ 226.850123][ T6026] loop9: unable to read partition table [ 226.852723][ T6026] loop9: partition table beyond EOD, truncated [ 226.857476][T11816] Dev loop9: unable to read RDB block 7 [ 226.860037][T11816] loop9: unable to read partition table [ 226.862729][T11816] loop9: partition table beyond EOD, truncated [ 226.865453][T11816] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.288839][ T40] audit: type=1400 audit(1764147090.812:929): avc: denied { validate_trans } for pid=11839 comm="syz.5.1944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 227.297467][ T40] audit: type=1400 audit(1764147090.822:930): avc: denied { ioctl } for pid=11839 comm="syz.5.1944" path="socket:[43988]" dev="sockfs" ino=43988 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 227.343899][ T40] audit: type=1400 audit(1764147090.872:931): avc: denied { map } for pid=11841 comm="syz.5.1945" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 227.344832][T11842] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 227.355390][T11843] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 227.599375][ T24] usb 5-1: device descriptor read/64, error -71 [ 227.710014][ T24] usb usb5-port1: attempt power cycle [ 227.879457][ T5947] Bluetooth: hci1: command tx timeout [ 228.059485][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 228.080432][ T24] usb 5-1: no configurations [ 228.081980][ T24] usb 5-1: can't read configurations, error -22 [ 228.219377][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 228.240218][ T24] usb 5-1: no configurations [ 228.241799][ T24] usb 5-1: can't read configurations, error -22 [ 228.244057][ T24] usb usb5-port1: unable to enumerate USB device [ 228.276310][ T40] audit: type=1326 audit(1764147091.802:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.2.1952" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86bf58f749 code=0x0 [ 228.293952][T11862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1951'. [ 228.381717][T11866] tipc: Started in network mode [ 228.383409][T11866] tipc: Node identity 4, cluster identity 4711 [ 228.385365][T11866] tipc: Node number set to 4 [ 228.417663][T11865] loop9: detected capacity change from 0 to 7 [ 228.421588][ T6026] Dev loop9: unable to read RDB block 7 [ 228.423916][ T6026] loop9: unable to read partition table [ 228.426500][ T6026] loop9: partition table beyond EOD, truncated [ 228.431384][T11865] Dev loop9: unable to read RDB block 7 [ 228.433594][T11865] loop9: unable to read partition table [ 228.435572][T11865] loop9: partition table beyond EOD, truncated [ 228.437971][T11865] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.263930][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 229.263946][ T40] audit: type=1400 audit(1764147092.792:934): avc: denied { bind } for pid=11890 comm="syz.2.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.406027][T11894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1963'. [ 229.502217][T11897] loop9: detected capacity change from 0 to 7 [ 229.504664][T11897] Dev loop9: unable to read RDB block 7 [ 229.506430][T11897] loop9: unable to read partition table [ 229.508294][T11897] loop9: partition table beyond EOD, truncated [ 229.510489][T11897] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.623322][ T40] audit: type=1326 audit(1764147093.152:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11915 comm="syz.5.1970" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa49838f749 code=0x0 [ 229.699689][T11919] 8021q: VLANs not supported on gre0 [ 229.883914][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1973'. [ 229.982904][T11928] PKCS8: Unsupported PKCS#8 version [ 229.986515][T11928] netlink: 'syz.2.1974': attribute type 17 has an invalid length. [ 230.033027][T11928] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.035625][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.115579][T11928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.127399][T11928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.248393][ T1149] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.252784][ T1149] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.258023][ T1149] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.262311][ T1149] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.344384][ T40] audit: type=1400 audit(1764147093.872:936): avc: denied { create } for pid=11936 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 230.354108][ T40] audit: type=1400 audit(1764147093.882:937): avc: denied { write } for pid=11936 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 230.365016][ T40] audit: type=1400 audit(1764147093.882:938): avc: denied { accept } for pid=11936 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.504045][T11943] loop9: detected capacity change from 0 to 7 [ 230.507600][T11943] Dev loop9: unable to read RDB block 7 [ 230.510228][T11943] loop9: unable to read partition table [ 230.518290][T11943] loop9: partition table beyond EOD, truncated [ 230.520831][T11943] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.636135][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1984'. [ 230.772390][ T40] audit: type=1326 audit(1764147094.302:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11971 comm="syz.5.1989" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa49838f749 code=0x0 [ 230.859364][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 231.023648][ T24] usb 5-1: no configurations [ 231.025735][ T24] usb 5-1: can't read configurations, error -22 [ 231.159514][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 231.330360][ T24] usb 5-1: no configurations [ 231.332385][ T24] usb 5-1: can't read configurations, error -22 [ 231.335338][ T24] usb usb5-port1: attempt power cycle [ 231.669397][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 231.700352][ T24] usb 5-1: no configurations [ 231.702047][ T24] usb 5-1: can't read configurations, error -22 [ 231.782937][T11997] geneve2: entered promiscuous mode [ 231.840405][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 231.860578][ T24] usb 5-1: no configurations [ 231.862632][ T24] usb 5-1: can't read configurations, error -22 [ 231.865734][ T24] usb usb5-port1: unable to enumerate USB device [ 231.898005][T11999] loop9: detected capacity change from 0 to 7 [ 231.902089][ T6026] Dev loop9: unable to read RDB block 7 [ 231.904119][ T6026] loop9: unable to read partition table [ 231.906031][ T6026] loop9: partition table beyond EOD, truncated [ 231.911369][T11999] Dev loop9: unable to read RDB block 7 [ 231.914012][T11999] loop9: unable to read partition table [ 231.916763][T11999] loop9: partition table beyond EOD, truncated [ 231.919918][T11999] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.030091][T12005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1999'. [ 232.075744][ T40] audit: type=1326 audit(1764147095.602:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.5.2001" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa49838f749 code=0x0 [ 232.812584][T12023] netlink: 'syz.2.2006': attribute type 1 has an invalid length. [ 232.812629][T12024] netlink: 'syz.2.2006': attribute type 1 has an invalid length. [ 232.824997][T12023] bond1: entered promiscuous mode [ 232.827557][T12023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.831224][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2006'. [ 232.832357][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2006'. [ 232.834510][T12023] bond1: entered allmulticast mode [ 232.852994][T12023] bond1: (slave bridge1): making interface the new active one [ 232.856077][T12023] bridge1: entered promiscuous mode [ 232.858463][T12023] bridge1: entered allmulticast mode [ 232.861755][T12023] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 233.027157][ T40] audit: type=1400 audit(1764147096.552:941): avc: denied { ioctl } for pid=12029 comm="syz.2.2009" path="/45/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 233.180726][T12042] loop9: detected capacity change from 0 to 7 [ 233.183652][ T6026] Dev loop9: unable to read RDB block 7 [ 233.185487][ T6026] loop9: unable to read partition table [ 233.187425][ T6026] loop9: partition table beyond EOD, truncated [ 233.191300][T12042] Dev loop9: unable to read RDB block 7 [ 233.193726][T12042] loop9: unable to read partition table [ 233.196269][T12042] loop9: partition table beyond EOD, truncated [ 233.199019][T12042] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.277987][T12045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=12045 comm=syz.2.2013 [ 233.284458][T12045] netlink: 'syz.2.2013': attribute type 11 has an invalid length. [ 233.287672][T12045] netlink: 'syz.2.2013': attribute type 11 has an invalid length. [ 233.291482][T12045] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2013'. [ 233.316433][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2012'. [ 233.720074][T12077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2024'. [ 233.736085][T12075] loop9: detected capacity change from 0 to 7 [ 233.740351][T12075] Dev loop9: unable to read RDB block 7 [ 233.742940][T12075] loop9: unable to read partition table [ 233.745709][T12075] loop9: partition table beyond EOD, truncated [ 233.748544][T12075] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.949348][ T40] audit: type=1400 audit(1764147097.472:942): avc: denied { accept } for pid=12097 comm="syz.2.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 234.092384][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2035'. [ 234.168173][T12113] loop9: detected capacity change from 0 to 7 [ 234.172374][T12113] Dev loop9: unable to read RDB block 7 [ 234.174132][T12113] loop9: unable to read partition table [ 234.175993][T12113] loop9: partition table beyond EOD, truncated [ 234.178693][T12113] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 234.182201][ T24] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 234.340121][ T24] usb 11-1: no configurations [ 234.342650][ T24] usb 11-1: can't read configurations, error -22 [ 234.469404][ T24] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 234.620223][ T24] usb 11-1: no configurations [ 234.622299][ T24] usb 11-1: can't read configurations, error -22 [ 234.625424][ T24] usb usb11-port1: attempt power cycle [ 234.861973][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'. [ 234.870700][T12127] erspan1: entered promiscuous mode [ 234.919713][T12127] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 234.923887][T12127] VFS: Can't find a romfs filesystem on dev nullb0. [ 234.923887][T12127] [ 234.959743][ T24] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 234.980267][ T24] usb 11-1: no configurations [ 234.981906][ T24] usb 11-1: can't read configurations, error -22 [ 235.129522][ T24] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 235.150625][ T24] usb 11-1: no configurations [ 235.152616][ T24] usb 11-1: can't read configurations, error -22 [ 235.155400][ T24] usb usb11-port1: unable to enumerate USB device [ 235.460102][T12155] loop9: detected capacity change from 0 to 7 [ 235.463092][ T6026] Dev loop9: unable to read RDB block 7 [ 235.464854][ T6026] loop9: unable to read partition table [ 235.466723][ T6026] loop9: partition table beyond EOD, truncated [ 235.471123][T12155] Dev loop9: unable to read RDB block 7 [ 235.473568][T12155] loop9: unable to read partition table [ 235.476007][T12155] loop9: partition table beyond EOD, truncated [ 235.478463][T12155] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.869418][ T24] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 236.030709][ T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.033581][ T24] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 236.037020][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.040044][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 236.043454][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 236.048143][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.051623][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.054257][ T24] usb 10-1: Product: syz [ 236.055638][ T24] usb 10-1: Manufacturer: syz [ 236.060705][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 236.062433][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 236.065191][ T24] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 236.067130][ T24] cdc_wdm 10-1:1.0: Unknown control protocol [ 236.262259][ T40] audit: type=1400 audit(1764147099.792:943): avc: denied { read write } for pid=12161 comm="syz.5.2054" name="cdc-wdm0" dev="devtmpfs" ino=3220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 236.270539][ T5939] usb 10-1: USB disconnect, device number 20 [ 236.271791][ T40] audit: type=1400 audit(1764147099.792:944): avc: denied { open } for pid=12161 comm="syz.5.2054" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 236.283611][ T40] audit: type=1400 audit(1764147099.792:945): avc: denied { ioctl } for pid=12161 comm="syz.5.2054" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3220 ioctlcmd=0x5b0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 236.312118][T12183] loop9: detected capacity change from 0 to 7 [ 236.315533][T12183] Dev loop9: unable to read RDB block 7 [ 236.317778][T12183] loop9: unable to read partition table [ 236.320240][T12183] loop9: partition table beyond EOD, truncated [ 236.322672][T12183] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.597224][T12195] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 237.075676][T12216] loop9: detected capacity change from 0 to 7 [ 237.087805][ T6026] Dev loop9: unable to read RDB block 7 [ 237.090085][ T6026] loop9: unable to read partition table [ 237.091972][ T6026] loop9: partition table beyond EOD, truncated [ 237.096584][T12216] Dev loop9: unable to read RDB block 7 [ 237.099081][T12216] loop9: unable to read partition table [ 237.104616][T12216] loop9: partition table beyond EOD, truncated [ 237.108716][T12216] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 237.153777][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'. [ 237.157509][T12220] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2071'. [ 237.162656][T12220] netlink: 'syz.2.2071': attribute type 3 has an invalid length. [ 237.165819][T12220] netlink: 'syz.2.2071': attribute type 2 has an invalid length. [ 237.168293][T12220] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2071'. [ 237.171914][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'. [ 237.175437][T12221] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2071'. [ 237.178953][T12221] netlink: 'syz.2.2071': attribute type 3 has an invalid length. [ 237.184610][T12221] netlink: 'syz.2.2071': attribute type 2 has an invalid length. [ 237.187691][T12221] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2071'. [ 237.210704][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2073'. [ 237.573356][T12247] syz.5.2078 (12247): drop_caches: 2 [ 237.577105][T12249] syz.5.2078 (12249): drop_caches: 2 [ 237.783236][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2085'. [ 237.849412][ T5939] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 237.891267][T12270] loop9: detected capacity change from 0 to 7 [ 237.894149][ T6026] Dev loop9: unable to read RDB block 7 [ 237.895956][ T6026] loop9: unable to read partition table [ 237.898075][ T6026] loop9: partition table beyond EOD, truncated [ 237.901264][T12270] Dev loop9: unable to read RDB block 7 [ 237.903125][T12270] loop9: unable to read partition table [ 237.905090][T12270] loop9: partition table beyond EOD, truncated [ 237.907103][T12270] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.020729][ T5939] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.024018][ T5939] usb 11-1: config 0 has no interfaces? [ 238.027921][ T5939] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 238.031019][ T5939] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.033510][ T5939] usb 11-1: Product: syz [ 238.034882][ T5939] usb 11-1: Manufacturer: syz [ 238.036432][ T5939] usb 11-1: SerialNumber: syz [ 238.039850][ T5939] usb 11-1: config 0 descriptor?? [ 238.095919][T12273] FAT-fs (nullb0): bogus number of reserved sectors [ 238.098546][T12273] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 238.247838][ T5939] usb 11-1: USB disconnect, device number 17 [ 238.262039][ T40] audit: type=1400 audit(1764147101.792:946): avc: denied { bind } for pid=12281 comm="syz.2.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 238.498812][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 238.544463][T12297] netlink: 'syz.2.2096': attribute type 21 has an invalid length. [ 238.647911][T12300] loop9: detected capacity change from 0 to 7 [ 238.651249][ T6026] Dev loop9: unable to read RDB block 7 [ 238.652659][ T6026] loop9: unable to read partition table [ 238.654209][ T6026] loop9: partition table beyond EOD, truncated [ 238.659959][T12300] Dev loop9: unable to read RDB block 7 [ 238.662035][T12300] loop9: unable to read partition table [ 238.664349][T12300] loop9: partition table beyond EOD, truncated [ 238.667096][T12300] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.708328][T12305] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2099'. [ 238.804222][T12323] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 238.807239][T12323] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 238.811155][T12323] overlayfs: conflicting lowerdir path [ 238.818057][ T40] audit: type=1400 audit(1764147102.342:947): avc: denied { write } for pid=12321 comm="syz.0.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 239.178599][T12337] loop9: detected capacity change from 0 to 7 [ 239.181778][T12337] Dev loop9: unable to read RDB block 7 [ 239.184134][T12337] loop9: unable to read partition table [ 239.186573][T12337] loop9: partition table beyond EOD, truncated [ 239.189407][T12337] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.212833][ T5348] udevd[5348]: worker [6026] terminated by signal 33 (Unknown signal 33) [ 239.216400][ T5348] udevd[5348]: worker [6026] failed while handling '/devices/virtual/block/loop9' [ 239.257915][ T40] audit: type=1326 audit(1764147102.782:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.2111" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d8678f749 code=0x0 [ 239.699347][ T1346] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 239.851281][ T1346] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.855353][ T1346] usb 5-1: config 0 has no interfaces? [ 239.859788][ T1346] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 239.863477][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.866637][ T1346] usb 5-1: Product: syz [ 239.868228][ T1346] usb 5-1: Manufacturer: syz [ 239.870567][ T1346] usb 5-1: SerialNumber: syz [ 239.874757][ T1346] usb 5-1: config 0 descriptor?? [ 240.080934][ T1346] usb 5-1: USB disconnect, device number 27 [ 240.167504][T12353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=536 sclass=netlink_route_socket pid=12353 comm=syz.6.2115 [ 240.199359][ C0] ================================================================== [ 240.202179][ C0] BUG: KASAN: slab-use-after-free in rose_send_frame+0x29a/0x2c0 [ 240.204994][ C0] Read of size 8 at addr ffff8880554c0c20 by task swapper/0/0 [ 240.208691][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 240.209434][ T40] audit: type=1400 audit(1764147103.732:949): avc: denied { write } for pid=5885 comm="syz-executor" path="pipe:[6769]" dev="pipefs" ino=6769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 240.210636][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 240.210661][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.210673][ C0] Call Trace: [ 240.210678][ C0] [ 240.210683][ C0] dump_stack_lvl+0x116/0x1f0 [ 240.210699][ C0] print_report+0xcd/0x630 [ 240.210712][ C0] ? __virt_addr_valid+0x81/0x610 [ 240.210728][ C0] ? __phys_addr+0xe8/0x180 [ 240.210743][ C0] ? rose_send_frame+0x29a/0x2c0 [ 240.210755][ C0] kasan_report+0xe0/0x110 [ 240.210768][ C0] ? rose_send_frame+0x29a/0x2c0 [ 240.210781][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.210793][ C0] rose_send_frame+0x29a/0x2c0 [ 240.210805][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.210817][ C0] rose_transmit_restart_request+0x1b8/0x240 [ 240.210831][ C0] rose_t0timer_expiry+0x1d/0x150 [ 240.210843][ C0] call_timer_fn+0x19a/0x620 [ 240.210855][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 240.210867][ C0] ? rcu_is_watching+0x12/0xc0 [ 240.210882][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.210895][ C0] __run_timers+0x6ef/0x960 [ 240.210906][ C0] ? __pfx___run_timers+0x10/0x10 [ 240.210922][ C0] run_timer_base+0x114/0x190 [ 240.210932][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 240.210969][ C0] ? rcu_is_watching+0x12/0xc0 [ 240.210984][ C0] run_timer_softirq+0x1a/0x40 [ 240.210993][ C0] handle_softirqs+0x219/0x8e0 [ 240.211009][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 240.211023][ C0] __irq_exit_rcu+0x109/0x170 [ 240.211036][ C0] irq_exit_rcu+0x9/0x30 [ 240.211049][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 240.211067][ C0] [ 240.211071][ C0] [ 240.211075][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.211088][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 240.211106][ C0] Code: a7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 55 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 240.211117][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 00000286 [ 240.211126][ C0] RAX: 00000000002b2b27 RBX: 0000000000000000 RCX: ffffffff8b60d2a9 [ 240.211134][ C0] RDX: 0000000000000000 RSI: ffffffff8da2c59c RDI: ffffffff8bf073c0 [ 240.211141][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed100d486655 [ 240.211148][ C0] R10: ffff88806a4332ab R11: 0000000000000001 R12: 0000000000000000 [ 240.211155][ C0] R13: ffffffff8e097a00 R14: ffffffff908216d0 R15: 0000000000000000 [ 240.211170][ C0] ? ct_kernel_exit+0x139/0x190 [ 240.211183][ C0] default_idle+0x13/0x20 [ 240.211196][ C0] default_idle_call+0x6c/0xb0 [ 240.211208][ C0] do_idle+0x38d/0x500 [ 240.211221][ C0] ? __pfx_do_idle+0x10/0x10 [ 240.211235][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 240.211248][ C0] cpu_startup_entry+0x4f/0x60 [ 240.211264][ C0] rest_init+0x16b/0x2b0 [ 240.211277][ C0] ? acpi_subsystem_init+0x133/0x180 [ 240.211293][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 240.211311][ C0] start_kernel+0x3f6/0x4e0 [ 240.211326][ C0] x86_64_start_reservations+0x18/0x30 [ 240.211343][ C0] x86_64_start_kernel+0x130/0x190 [ 240.211358][ C0] common_startup_64+0x13e/0x148 [ 240.211373][ C0] [ 240.211378][ C0] [ 240.335545][ C0] Allocated by task 6030: [ 240.337119][ C0] kasan_save_stack+0x33/0x60 [ 240.338840][ C0] kasan_save_track+0x14/0x30 [ 240.340564][ C0] __kasan_kmalloc+0xaa/0xb0 [ 240.342249][ C0] rose_rt_ioctl+0x880/0x2580 [ 240.343977][ C0] rose_ioctl+0x64d/0x7c0 [ 240.345550][ C0] sock_do_ioctl+0x118/0x280 [ 240.347253][ C0] sock_ioctl+0x227/0x6b0 [ 240.348839][ C0] __x64_sys_ioctl+0x18e/0x210 [ 240.350603][ C0] do_syscall_64+0xcd/0xfa0 [ 240.352276][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.354435][ C0] [ 240.355358][ C0] Freed by task 0: [ 240.356728][ C0] kasan_save_stack+0x33/0x60 [ 240.358443][ C0] kasan_save_track+0x14/0x30 [ 240.360177][ C0] __kasan_save_free_info+0x3b/0x60 [ 240.362075][ C0] __kasan_slab_free+0x5f/0x80 [ 240.363915][ C0] kfree+0x2b8/0x6d0 [ 240.365352][ C0] rose_timer_expiry+0x53f/0x630 [ 240.367163][ C0] call_timer_fn+0x19a/0x620 [ 240.368841][ C0] __run_timers+0x6ef/0x960 [ 240.370496][ C0] run_timer_base+0x114/0x190 [ 240.372219][ C0] run_timer_softirq+0x1a/0x40 [ 240.373983][ C0] handle_softirqs+0x219/0x8e0 [ 240.375745][ C0] __irq_exit_rcu+0x109/0x170 [ 240.377461][ C0] irq_exit_rcu+0x9/0x30 [ 240.378957][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 240.380953][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.383136][ C0] [ 240.384035][ C0] The buggy address belongs to the object at ffff8880554c0c00 [ 240.384035][ C0] which belongs to the cache kmalloc-512 of size 512 [ 240.388788][ C0] The buggy address is located 32 bytes inside of [ 240.388788][ C0] freed 512-byte region [ffff8880554c0c00, ffff8880554c0e00) [ 240.393418][ C0] [ 240.394244][ C0] The buggy address belongs to the physical page: [ 240.396284][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880554c1400 pfn:0x554c0 [ 240.399782][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 240.402665][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 240.405604][ C0] page_type: f5(slab) [ 240.407063][ C0] raw: 00fff00000000240 ffff88801b442c80 ffffea00011ec610 ffffea000139bc10 [ 240.409958][ C0] raw: ffff8880554c1400 000000000010000b 00000000f5000000 0000000000000000 [ 240.412905][ C0] head: 00fff00000000240 ffff88801b442c80 ffffea00011ec610 ffffea000139bc10 [ 240.415883][ C0] head: ffff8880554c1400 000000000010000b 00000000f5000000 0000000000000000 [ 240.418890][ C0] head: 00fff00000000002 ffffea0001553001 00000000ffffffff 00000000ffffffff [ 240.422028][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 240.425056][ C0] page dumped because: kasan: bad access detected [ 240.427296][ C0] page_owner tracks the page as allocated [ 240.429283][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5942, tgid 5942 (syz-executor), ts 56404381990, free_ts 56394621468 [ 240.436547][ C0] post_alloc_hook+0x1af/0x220 [ 240.438215][ C0] get_page_from_freelist+0x10a3/0x3a30 [ 240.440150][ C0] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 240.442216][ C0] alloc_pages_mpol+0x1fb/0x550 [ 240.443951][ C0] new_slab+0x24a/0x360 [ 240.445442][ C0] ___slab_alloc+0xd79/0x1a50 [ 240.447109][ C0] __slab_alloc.constprop.0+0x63/0x110 [ 240.449006][ C0] __kmalloc_cache_noprof+0x477/0x780 [ 240.450903][ C0] device_add+0xccc/0x1aa0 [ 240.452516][ C0] rfkill_register+0x1ad/0xb40 [ 240.454230][ C0] wiphy_register+0x244d/0x2b20 [ 240.456001][ C0] ieee80211_register_hw+0x253d/0x4120 [ 240.457972][ C0] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 240.460039][ C0] hwsim_new_radio_nl+0xba2/0x1330 [ 240.461912][ C0] genl_family_rcv_msg_doit+0x209/0x2f0 [ 240.463949][ C0] genl_rcv_msg+0x55c/0x800 [ 240.465600][ C0] page last free pid 6025 tgid 6024 stack trace: [ 240.467867][ C0] __free_frozen_pages+0x7df/0x1160 [ 240.469750][ C0] stack_depot_save_flags+0x352/0x9c0 [ 240.471708][ C0] kasan_save_stack+0x42/0x60 [ 240.473431][ C0] kasan_save_track+0x14/0x30 [ 240.475165][ C0] __kasan_slab_alloc+0x89/0x90 [ 240.476908][ C0] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 240.479025][ C0] alloc_vmap_area+0x648/0x29e0 [ 240.480781][ C0] __get_vm_area_node+0x1ca/0x330 [ 240.482586][ C0] __vmalloc_node_range_noprof+0x271/0x1480 [ 240.484725][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 240.486539][ C0] __vmalloc_node_range_noprof+0xb3b/0x1480 [ 240.488642][ C0] __kvmalloc_node_noprof+0x431/0x9c0 [ 240.490524][ C0] hashlimit_mt_check_common+0x8c0/0x1460 [ 240.492523][ C0] hashlimit_mt_check_v1+0x2fc/0x370 [ 240.494420][ C0] xt_check_match+0x286/0xa50 [ 240.496080][ C0] find_check_entry.constprop.0+0x317/0x9b0 [ 240.498162][ C0] [ 240.499036][ C0] Memory state around the buggy address: [ 240.500993][ C0] ffff8880554c0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 240.503825][ C0] ffff8880554c0b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 240.506567][ C0] >ffff8880554c0c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.509367][ C0] ^ [ 240.511142][ C0] ffff8880554c0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.513924][ C0] ffff8880554c0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.516706][ C0] ================================================================== [ 240.519634][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 240.522543][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 240.526065][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.530696][ C0] Call Trace: [ 240.531924][ C0] [ 240.532984][ C0] dump_stack_lvl+0x3d/0x1f0 [ 240.534677][ C0] vpanic+0x640/0x6f0 [ 240.536176][ C0] panic+0xca/0xd0 [ 240.537554][ C0] ? __pfx_panic+0x10/0x10 [ 240.539186][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 240.541033][ C0] check_panic_on_warn+0xab/0xb0 [ 240.542834][ C0] end_report+0x107/0x170 [ 240.544430][ C0] kasan_report+0xee/0x110 [ 240.546041][ C0] ? rose_send_frame+0x29a/0x2c0 [ 240.547861][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.549900][ C0] rose_send_frame+0x29a/0x2c0 [ 240.551662][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.553704][ C0] rose_transmit_restart_request+0x1b8/0x240 [ 240.555889][ C0] rose_t0timer_expiry+0x1d/0x150 [ 240.557715][ C0] call_timer_fn+0x19a/0x620 [ 240.559411][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 240.561268][ C0] ? rcu_is_watching+0x12/0xc0 [ 240.562989][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 240.565012][ C0] __run_timers+0x6ef/0x960 [ 240.566638][ C0] ? __pfx___run_timers+0x10/0x10 [ 240.568476][ C0] run_timer_base+0x114/0x190 [ 240.570226][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 240.572096][ C0] ? rcu_is_watching+0x12/0xc0 [ 240.573846][ C0] run_timer_softirq+0x1a/0x40 [ 240.575564][ C0] handle_softirqs+0x219/0x8e0 [ 240.577287][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 240.579185][ C0] __irq_exit_rcu+0x109/0x170 [ 240.580879][ C0] irq_exit_rcu+0x9/0x30 [ 240.582414][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 240.584468][ C0] [ 240.585531][ C0] [ 240.586598][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.588763][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 240.590794][ C0] Code: a7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 55 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 240.597644][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 00000286 [ 240.599832][ C0] RAX: 00000000002b2b27 RBX: 0000000000000000 RCX: ffffffff8b60d2a9 [ 240.602608][ C0] RDX: 0000000000000000 RSI: ffffffff8da2c59c RDI: ffffffff8bf073c0 [ 240.605451][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed100d486655 [ 240.608276][ C0] R10: ffff88806a4332ab R11: 0000000000000001 R12: 0000000000000000 [ 240.611108][ C0] R13: ffffffff8e097a00 R14: ffffffff908216d0 R15: 0000000000000000 [ 240.613948][ C0] ? ct_kernel_exit+0x139/0x190 [ 240.615724][ C0] default_idle+0x13/0x20 [ 240.617264][ C0] default_idle_call+0x6c/0xb0 [ 240.618999][ C0] do_idle+0x38d/0x500 [ 240.620478][ C0] ? __pfx_do_idle+0x10/0x10 [ 240.622146][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 240.624071][ C0] cpu_startup_entry+0x4f/0x60 [ 240.625819][ C0] rest_init+0x16b/0x2b0 [ 240.627379][ C0] ? acpi_subsystem_init+0x133/0x180 [ 240.629304][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 240.631330][ C0] start_kernel+0x3f6/0x4e0 [ 240.632990][ C0] x86_64_start_reservations+0x18/0x30 [ 240.635008][ C0] x86_64_start_kernel+0x130/0x190 [ 240.636873][ C0] common_startup_64+0x13e/0x148 [ 240.638681][ C0] [ 240.640497][ C0] Kernel Offset: disabled [ 240.641867][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:51:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852983d5 RDI=ffffffff9addb780 RBP=ffffffff9addb740 RSP=ffffc90000007668 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9addb740 R15=ffffffff85298370 RIP=ffffffff852983ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0d849d4f98 CR3=00000000215cf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557ee835bc40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2568df1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2568df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373260d9b479483 73732608cc8c9b59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7205c9ea67ab1e52 73737376249df02a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557bbfda644e 0000000000000021 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c2f0073656c7572 0000003374003400 317761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e3c4760 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8db1beb1 RDI=ffffffff8bf073c0 RBP=0000000000000002 RSP=ffffc90003a96ff8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012f7f R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8198cab7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc7ef117d60 CR3=0000000021413000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7ee5ba6c3 00007fc7ee5ba6c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd057aa730 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555590dd0bcb 0000555590dd0730 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7ee5bad20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555590dbef6a 0000555590dbee40 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555590dc06b8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401000002080606 0168e03ffc080018 e00300100018d003 00100018c0030210 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108808280a01000 1880040100000208 06060168e03ffc08 0018e00300100018 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d00300100018c003 02100018b0037010 0008900301002006 080bb00301000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08060ba803000002 0700000000000000 0000010056000000 3828080b80030b80 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0408800308800418 a003000800189003 0fffffffffffff04 1880030008002086 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000002 RBX=ffff88806a4426c0 RCX=ffffffff81b0db51 RDX=ffff888046494900 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000e207660 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4884d9 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81bce19c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555c865500 ffffffff 00c00000 GS =0000 ffff8880d6c05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0d875156c0 CR3=00000000482c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1004c860 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d86815050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d8681505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d86815057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d8681506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d868150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d868151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffff1100615e509 RBX=ffff888030af2848 RCX=1ffff1100572f126 RDX=0000000000000000 RSI=ffffffff845bf817 RDI=ffffc90003bb7806 RBP=ffffc90003bb7800 RSP=ffffc90003bb76d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000800 R11=0000000000000001 R12=000000000000025f R13=dffffc0000000000 R14=0000000000000234 R15=000000000000000d RIP=ffffffff845bf823 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8eaac70300 ffffffff 00c00000 GS =0000 ffff8880d6d05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000031c71000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000084a 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec00247b2401ffff fffffffffffff708 0380032c00000480 0000001500000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000810003c1000 060270cc0010000f ffffffffffff0402 8e0800049e080001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000008060a016f c40008000810003c 1000060070cc0001 08ae028004141000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 021000060158a808 0800018803000200 0186030002000184 030c040001800301 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004029003020400 0280030fffffffff ffff040010002180 1000038004080142 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03000000ffffffa6 03000000ffffff9e 03000000ffffff96 03000000ffffff8e ZMM25=7730f0e57730f0e5 7730f0e57730f0e5 7730f0e57730f0e5 7730f0e57730f0e5 7730f0e57730f0e5 7730f0e57730f0e5 7730f0e57730f0e5 7730f0e57730f0e5 ZMM26=9020325090203250 9020325090203250 9020325090203250 9020325090203250 9020325090203250 9020325090203250 9020325090203250 9020325090203250 ZMM27=081ddfdd081ddfdd 081ddfdd081ddfdd 081ddfdd081ddfdd 081ddfdd081ddfdd 081ddfdd081ddfdd 081ddfdd081ddfdd 081ddfdd081ddfdd 081ddfdd081ddfdd ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=080a0000080a0000 080a0000080a0000 080a0000080a0000 080a0000080a0000 080a0000080a0000 080a0000080a0000 080a0000080a0000 080a0000080a0000