last executing test programs: 1.817716973s ago: executing program 2 (id=866): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x100009, 0x76, 0x80000}, 0x20) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000380)={0x0, 0x7734, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf, 0x6, [0x5, 0x3, 0x9, 0x7, 0x8, 0x5]}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x9, 0x2004, @fd, 0x8, 0x1, 0x2, 0xb}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x100009, 0x76, 0x80000}, 0x20) (async) syz_io_uring_setup(0x10d2, &(0x7f0000000380)={0x0, 0x7734, 0x80, 0x1, 0x34f}, &(0x7f00000000c0), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) (async) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf, 0x6, [0x5, 0x3, 0x9, 0x7, 0x8, 0x5]}, 0x14) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x9, 0x2004, @fd, 0x8, 0x1, 0x2, 0xb}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) (async) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) 1.711743394s ago: executing program 2 (id=869): r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x20000, 0x1000004}) fcntl$addseals(r0, 0x409, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000f80)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xce}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) 1.365704784s ago: executing program 2 (id=876): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000efffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="9c2c64df7fd88a02b814013c8062dd1582311f852d8b421ab962d73443f1f103c81023b2f91c4dd5da46824a3901f2e9f6d6566d8654a8f2a54c984e646362be05871188450d6e52f5b26442494bf9922a356625fe8cfed24f0b3ed2b73720c008d3c08bed7f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r1, 0x11, &(0x7f00000002c0)={0x1, 0x0, 0x380000000000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4800003e, r3, 0x0) r5 = inotify_init() inotify_add_watch(r5, 0x0, 0x4a9) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x8500017e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) 1.36295326s ago: executing program 2 (id=879): r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x20000001}) poll(&(0x7f0000000080)=[{r3, 0x80}], 0x1, 0xe32000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xa000201e}) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000140)={0x3, 0x0, @auto=[0x13, 0x27, 0x37, 0x12, 0x35, 0x25, 0x22, 0x10, 0x3b]}, 0x11, 0xfffffffffffffff9) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001680)={&(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001600)=[0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x2, 0x3}) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r0, r0}, &(0x7f0000000340)=""/4096, 0x1000, &(0x7f0000000240)={&(0x7f00000001c0)={'blake2s-128-generic\x00'}, &(0x7f0000000200)="9892c4756c833bddafc61d6d44591970ea0bdcc90c878f7686dabe04eeaf843ea84dc88e164824f8f37b4e349d322e9185e669527494cbb20356c91205", 0x3d}) keyctl$chown(0x4, r4, 0xee01, 0x0) 1.038687652s ago: executing program 3 (id=886): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x9, 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='befs\x00', 0x284006, 0x0) 1.03620373s ago: executing program 1 (id=888): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x98}}, './file0\x00'}) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x4}) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000080)=0x85) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x1, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) statx(r0, &(0x7f0000000540)='./file0\x00', 0x1000, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0}, &(0x7f0000000800)=0xc) r9 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0x0}}, './file0\x00'}) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000002ac0)='./file0\x00', 0x6000, 0x201, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000002c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000002c40)={{}, {0x1, 0x3}, [{0x2, 0x2, 0xee01}, {0x2, 0x1, r2}, {0x2, 0x4, r3}, {0x2, 0x6, r4}, {0x2, 0x1, r5}, {0x2, 0x1, r6}, {0x2, 0x4, r7}, {0x2, 0x3, r8}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x4, r9}, {0x8, 0x4, r11}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x3, r12}, {0x8, 0x1, r13}, {0x8, 0x4, r14}, {0x8, 0x0, r15}, {0x8, 0x1, r16}, {0x8, 0x1, r17}], {0x10, 0x4}, {0x20, 0x4}}, 0xb4, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$TIOCSIG(r10, 0x40045436, 0x38) syz_open_pts(r10, 0x480042) ioctl$TCSBRKP(r10, 0x5425, 0xffffffff) write$P9_RSETATTR(r10, &(0x7f0000002d00)={0x7, 0x1b, 0x2}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002d40)={{{@in=@initdev, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000002e40)=0xe8) write$cgroup_freezer_state(r10, &(0x7f0000002e80)='FROZEN\x00', 0x7) syz_open_dev$sndctrl(&(0x7f0000002ec0), 0x9, 0x40000) 985.217451ms ago: executing program 1 (id=890): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) inotify_init1(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd40700001000000095000000000000002ba72804605789bfbc7174159805d30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc162619b3af8a4e825d922c65e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bf3d6b2e28f90c52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d350100c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64dc4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a7e008f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d054c744fd06a57f7bcb8fb58c512d0884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637c335892b420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072da00f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce6459200000067c38a656d326cff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b52f79a3f7306436762dd1a08ce023e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac3ffff1ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d0dbaec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f6eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032bd2649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a604e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b0104000000000000a4c0a1d44d9dfd82896f5623e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f330a5e05b59db781cf9cf33752836fff6fcbf379332357c47f3597e084d0779b3cbfb312925a8151e338eca2c80600000000ac5992a4c7ec0b741f117f628562c3b27483ad6d733ffcbfca0ba805af95f8985901b0b8f918efa139e984fe872f22f5f094e3fbdf45ec2076710d8c787156b3e05774ac977c3db6288d252b2a73c84a07d73f9721e52f5b5d331ebb7db0a03be93fd96d7355405e954b8d6d0efcd6c37d869086efe15e30b7b6b2b37647e265a62fccfeb16f12f109dc5e405b53d1737b7a2620943affaa2eb07585e23e0513df2f83218f9f3ed9ba3026bcfbe5e9b36ab5b052886227827b983c0fe8da495f1ea7b5c35e42ff83f6e5e5a71ba3000000000000000000f73ffcd0c92a30304d5142441978012e2e6e1c45c28713fa5354f1fd124598688dffa0890dc8c6b4d9732347896d17d4efe12c20c706dcd4601135c553713cc4000a6690a2eed2e680db50589a659a240afc2c1eaa381a4135933a8d7abff2a7882ff50eabbe493ae54f71473eb65fe8e850f36d096a9c7dfd8fd2a35234bef2ba4755e10489b2508e4a9d911135b6c802e16e23fc7a3c3c0f5939b842bca82db931e5ba180f1eed5f539371105aee1d06af045892e18eb5dfd361f6d89fff0b82da98fa7aa90fe92b59887fda0ed8d375ba13fe3f63e69e417c89e31fdf55b9c2e9e0398c661d4c4ce0804971f3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x200000) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0xffff, 0x4) setuid(0xee00) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 983.09497ms ago: executing program 3 (id=893): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x4, 0xffff7017}, {0x6, 0x0, 0x0, 0xfffffffa}]}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ustat(0x5, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x2b023}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0xa}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x4c}}, 0x8000) 982.867162ms ago: executing program 1 (id=894): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0x3, 0x2, 0xeb3, 0x6}, 0x2f, [0xdc, 0x7, 0x4000000, 0x2, 0x3, 0x8, 0x18, 0x3, 0x4, 0x1c5, 0x20000000, 0x5, 0x8000, 0xfffffffb, 0xffff, 0x3, 0x7f, 0x8, 0x101, 0x2, 0x3, 0x3ff, 0x4, 0xff, 0x5, 0x7210000, 0xc2a, 0x3, 0x2, 0x8, 0xe9a, 0xe, 0x2, 0x4, 0x7, 0x1, 0x8, 0x4, 0x5, 0x9, 0xf, 0x800, 0x9, 0x54, 0x1, 0xa, 0x80000000, 0xc7ff, 0x1, 0x3, 0x400, 0x9, 0x3, 0x7fffffff, 0x2, 0x3, 0x1000, 0x6, 0x3, 0x1, 0x1, 0x200, 0xe, 0x1], [0x6, 0x9, 0x2, 0x3, 0x2, 0x5, 0x8e63, 0x7, 0x0, 0xfffffffe, 0x578, 0x4, 0x6, 0x2, 0x40, 0x9, 0x8, 0x5f, 0x2, 0xfff, 0xffff19c9, 0x81, 0x3, 0x800, 0x3, 0x0, 0x2, 0x7, 0xf4, 0x9, 0x9e, 0x254, 0x6, 0x1, 0x8001, 0x5, 0x62, 0xe, 0x7fffffff, 0x2a9b, 0x7fffffff, 0x7, 0x0, 0x9, 0x0, 0x502, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x3, 0x2, 0x9, 0x8f6, 0x100, 0x5, 0x5, 0x7, 0x101, 0x8, 0x8, 0x81], [0x5, 0x9, 0x3, 0x10, 0x7fffffff, 0x2, 0x3, 0x4, 0xfffffe01, 0x2, 0x41, 0x5, 0xf, 0xe, 0x9, 0x8a, 0x5, 0x4, 0x7fffffff, 0x9, 0x80000000, 0x7fff, 0x2, 0xaa0, 0x5a, 0x80, 0x4, 0x1, 0x0, 0xffffffff, 0x400, 0x6, 0x1d, 0x80000001, 0x4, 0x4, 0x6, 0xffff, 0xba3a, 0x4, 0x81, 0x1, 0x2, 0x7, 0xa1, 0x4, 0x7, 0x6, 0x1000, 0x6, 0x800, 0x2, 0x0, 0x0, 0x7, 0x8, 0x6, 0x3, 0x3, 0x9, 0x1, 0x73, 0x4180000, 0x8], [0x2, 0xd, 0x9, 0x200, 0x7, 0xdb8, 0x4, 0x9, 0x1000, 0x80000001, 0x6, 0x4, 0xfffffff9, 0x8001, 0x2, 0x4, 0x7, 0xffffff15, 0x0, 0x9, 0x8, 0xfffffffd, 0x0, 0x9, 0x1, 0x7, 0x8, 0xa, 0x0, 0xffff45b4, 0x3, 0x0, 0x6, 0x9, 0x1771e9ce, 0x8, 0x8, 0x9, 0xa, 0x8, 0x71a, 0x7f, 0x8, 0x7, 0x4, 0xffff, 0x8, 0x0, 0x7fff, 0x3, 0x7, 0x7, 0x80000001, 0x4000005, 0x6, 0x8, 0x80000000, 0x5, 0x9, 0xffff, 0xe574, 0x5a5, 0x9a01, 0x9]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 910.117768ms ago: executing program 3 (id=895): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000022000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffff808001c851f8576f0c0870d40b1ca000008000840000000000800044000000002140018001100010000000000000000000100000a6e9b67948d45e32155d66c962a44508b8d858dbc70a88f3474690de3ba84258d797a3c579b08c34885"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') fcntl$notify(r2, 0x402, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d6174fdff000000380002800e0001007374617469737469630000001c0003004cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xa0}}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200), 0x4, 0x102c0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000400)}, 0x20) r6 = syz_open_dev$vcsu(&(0x7f0000001600), 0xbc, 0x100) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x10) fcntl$setstatus(r7, 0x4, 0x0) r8 = dup(r7) copy_file_range(r7, 0x0, r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x24, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0x1, 0x3, 0xe, 0x5, 0xb}, @jmp={0x5, 0x1, 0xa, 0x2, 0x6, 0x100, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x3, 0xa, 0x4, 0xc, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001640)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001680)={0x2, 0xf, 0xffff, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[r7], &(0x7f0000001700)=[{0x2, 0x3, 0x9, 0xa}, {0x3, 0x5, 0xb, 0xb}], 0x10, 0x8}, 0x94) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r11 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x40049366, 0x0) 908.813323ms ago: executing program 1 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000019000100000000000000000080200000001100050000000014000f"], 0x30}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r3) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="9884e8cc7dc5"}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, 0x28, 0x9, 0x70bd2b, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x844) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = eventfd(0xfffffc6f) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000000)={0x3, r8}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) 908.609461ms ago: executing program 1 (id=897): openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESOCT=r2], 0x17) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000501000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) open(&(0x7f0000000080)='./file0\x00', 0x40800, 0x100) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 845.044594ms ago: executing program 0 (id=898): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x40, @remote, 0x100}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 844.721482ms ago: executing program 1 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x44000) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 843.879665ms ago: executing program 3 (id=900): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x18, 0x20ec, 0x0, 0x100000, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000080)={0x20, r2, 0x2, 0x0, &(0x7f00000000c0)=[{}, {}]}) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000140)=0xf, 0x4) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000300)={0x4efa, 0x7, [{0xb, 0x1}, {0xc}, {}, {0xd}, {0x9, 0x1}, {0x5}, {0x3}]}) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') read$msr(r4, &(0x7f0000000180)=""/174, 0xae) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f00000002c0)=""/48) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x140e, 0x300, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0xb0) (async) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) (async) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0xfffb, @local}, 0x10) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x1, &(0x7f00000000c0), 0x4) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000080), 0x4) (async) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x2000, 0x4, 0x67, 0x2, @vifc_lcl_addr=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 782.327761ms ago: executing program 3 (id=901): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') pread64(r2, &(0x7f0000001880)=""/4111, 0x100f, 0xa96) 782.107901ms ago: executing program 3 (id=902): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x40000, 0x7) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1, 0x4}]) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = dup(r3) write(r4, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, 0x0, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x3020c0, 0x0) ioctl$CDROMREADAUDIO(r6, 0x5392, &(0x7f0000000000)={@lba=0x8, 0x2, 0x0, 0x0}) 696.267178ms ago: executing program 0 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x9, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x280000, 0x9, 0x7fffffff, 0x5b2b, 0xbb58, 0x0, 0xffff, 0x8, 0x7f}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0xc, 0x7}, {0x0, 0xffe0}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44048001}, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r5, 0x640f) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYRES16=r2]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x1, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r10, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x34004080) socket$nl_generic(0x10, 0x3, 0x10) 546.935456ms ago: executing program 0 (id=904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000380)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x6, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f98530fddefda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x2, 0xa]}}) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f00000001c0)='a', 0x1, 0x5}]) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 418.357049ms ago: executing program 0 (id=905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d400000000000000000000000001"], 0x4b0}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r4 = socket$kcm(0x23, 0x5, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000640)) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x6, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_proto_private(r9, 0x89ec, &(0x7f00000004c0)="3f33a2f205722b30f989aebbded51a026bcddb7e369ba6b6190ddda0e2006860b918c3c5c76aab96111af732f866717e714df73b8227e074c11648000f378b34b741be55f2a25fd79e77793829795adabe48d865c0e61558a23a8376f354e1306fa8a90486493c08c7b9b14796b9af855cd77a84b26f93cd2b2212f78a9558143739df088d6b4dc415c4") 417.96561ms ago: executing program 2 (id=906): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f7215b6d68e34d537"], 0x32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) close_range(r3, r3, 0x2) socket$inet6(0x2d, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="99bd4a0add70e768ec9bb9207d4595129dc2fa308bd181f547e437621a1c90c9d27cc05b014ba8ae6eee1151d84e719b7271e03a9a02ddfcb8a4d2b581d54a0c6e18113ce0956395a4b83d06c7031226d63e113a684c85a749a4d2b897d007e0d3d43878849a1f806e4c6b2861a29253d057b34cd2aaf13fec07f41cf0a0ec555758a42e4f0b381cc7d87babcca94d15ec78f2bb222b59818d773a1b2ce21a5e179c709ef67810410cb74588bed364cddafc2023e66aa4b64da4"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24004890) 311.755968ms ago: executing program 2 (id=907): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6a6, 0x20400) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7ff}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc0106442, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x4000010, r2, 0x100000000) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0xd, 0x1, 0x3, "872290ee01689bee266d8c7a6aa6995c1937025a4754aa9610c55ae1146141bb", 0x5ac79482}) r4 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x141a80, 0xb5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r6, 0x400454ce, 0x6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000500)='./file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x266) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000040)=0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r8}, 0x18) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000), 0x305000, 0x1800, 0x0, 0x5}, 0x20) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r11, 0x8004510b, &(0x7f0000000180)) ioctl$sock_qrtr_TIOCOUTQ(r10, 0x5411, &(0x7f00000003c0)) 1.308203ms ago: executing program 0 (id=908): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000000)={0x28, 0x1, 0x5}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x1}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x22, '\x00', r6}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) io_uring_enter(r2, 0x6322, 0x9a06, 0x42, &(0x7f0000000080)={[0x68]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 0s ago: executing program 0 (id=909): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2, 'lblcr\x00'}, 0x2c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0xfffe, 0x0, 'lc\x00', 0x1, 0x0, 0x68}, 0x2c) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xc4040, 0x70, 0x28}, 0x18) move_mount(r1, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000180)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="740000000007000c0000000000000000010000052400078008000140000000000800024000000001080002400000000808000240000000060c0006f85226c34000000000000000080c00034000000000000000100c00064000000000000000000c00024000000000000000000c00034000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40005) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c93012000e000500154c0a"], 0x17) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000180)={&(0x7f00000000c0)=[r2], 0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r2], &(0x7f00000001c0), 0x1, 0x1}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) kernel console output (not intermixed with test programs): " dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.964349][ T40] audit: type=1400 audit(1756096467.611:85): avc: denied { ioctl } for pid=5966 comm="syz-executor" path="socket:[7279]" dev="sockfs" ino=7279 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.972206][ T40] audit: type=1400 audit(1756096467.611:86): avc: denied { ioctl } for pid=5967 comm="syz-executor" path="socket:[5960]" dev="sockfs" ino=5960 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.973699][ T5971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.983470][ T5981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.984420][ T5973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.986220][ T5981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.989207][ T5973] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.990693][ T5981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.993100][ T5973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.995417][ T5981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.997136][ T5973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.999599][ T5979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.000110][ T5981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.000620][ T5981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.002779][ T5973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.005895][ T5979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.006572][ T5982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.007545][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.007823][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.009651][ T5973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.010456][ T40] audit: type=1400 audit(1756096467.681:87): avc: denied { read } for pid=5966 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.013702][ T5330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.014844][ T40] audit: type=1400 audit(1756096467.681:88): avc: denied { open } for pid=5966 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.018035][ T5982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.019150][ T40] audit: type=1400 audit(1756096467.681:89): avc: denied { mounton } for pid=5966 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.251250][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 51.366133][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 51.371029][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 51.413847][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.418456][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.421241][ T5966] bridge_slave_0: entered allmulticast mode [ 51.423958][ T5966] bridge_slave_0: entered promiscuous mode [ 51.431113][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.433373][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.435991][ T5966] bridge_slave_1: entered allmulticast mode [ 51.438589][ T5966] bridge_slave_1: entered promiscuous mode [ 51.484592][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 51.504661][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.532116][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.646657][ T5966] team0: Port device team_slave_0 added [ 51.651904][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.654354][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.656711][ T5975] bridge_slave_0: entered allmulticast mode [ 51.659301][ T5975] bridge_slave_0: entered promiscuous mode [ 51.662292][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.664566][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.667288][ T5975] bridge_slave_1: entered allmulticast mode [ 51.669879][ T5975] bridge_slave_1: entered promiscuous mode [ 51.672307][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.674592][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.676941][ T5967] bridge_slave_0: entered allmulticast mode [ 51.679544][ T5967] bridge_slave_0: entered promiscuous mode [ 51.682667][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.685186][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.687480][ T5967] bridge_slave_1: entered allmulticast mode [ 51.690476][ T5967] bridge_slave_1: entered promiscuous mode [ 51.693620][ T5966] team0: Port device team_slave_1 added [ 51.781195][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.799654][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.801851][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.809872][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.828111][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.830420][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.832685][ T5976] bridge_slave_0: entered allmulticast mode [ 51.835744][ T5976] bridge_slave_0: entered promiscuous mode [ 51.839818][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.843945][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.860472][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.862663][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.871926][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.879508][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.881763][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.884043][ T5976] bridge_slave_1: entered allmulticast mode [ 51.886877][ T5976] bridge_slave_1: entered promiscuous mode [ 51.903410][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.960009][ T5967] team0: Port device team_slave_0 added [ 51.979182][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.997117][ T5967] team0: Port device team_slave_1 added [ 52.001628][ T5966] hsr_slave_0: entered promiscuous mode [ 52.003933][ T5966] hsr_slave_1: entered promiscuous mode [ 52.007762][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.011579][ T5975] team0: Port device team_slave_0 added [ 52.055134][ T5975] team0: Port device team_slave_1 added [ 52.070691][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.072909][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.080892][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.099365][ T5976] team0: Port device team_slave_0 added [ 52.128070][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.130299][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.138535][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.142334][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.144595][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.152732][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.157353][ T5976] team0: Port device team_slave_1 added [ 52.176066][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.178237][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.186230][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.225630][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.227832][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.236890][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.241454][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.243632][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.251548][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.310865][ T5967] hsr_slave_0: entered promiscuous mode [ 52.313102][ T5967] hsr_slave_1: entered promiscuous mode [ 52.315261][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 52.317114][ T5967] Cannot create hsr debugfs directory [ 52.355184][ T5975] hsr_slave_0: entered promiscuous mode [ 52.357456][ T5975] hsr_slave_1: entered promiscuous mode [ 52.359531][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 52.361343][ T5975] Cannot create hsr debugfs directory [ 52.404132][ T5976] hsr_slave_0: entered promiscuous mode [ 52.406466][ T5976] hsr_slave_1: entered promiscuous mode [ 52.408528][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 52.410350][ T5976] Cannot create hsr debugfs directory [ 52.676931][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.685625][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.692034][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.696301][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.736317][ T5967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.741982][ T5967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.746629][ T5967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.751196][ T5967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.797493][ T5976] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.802449][ T5976] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.806838][ T5976] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.812307][ T5976] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.843294][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.882907][ T5975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.887411][ T5975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.892211][ T5975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.897578][ T5975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.902527][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.909149][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.911605][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.924522][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.926922][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.956592][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.003884][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.021497][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.023800][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.029895][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.032929][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.049104][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.055392][ T5982] Bluetooth: hci3: command tx timeout [ 53.065111][ T5982] Bluetooth: hci2: command tx timeout [ 53.065331][ T5974] Bluetooth: hci1: command tx timeout [ 53.065357][ T5330] Bluetooth: hci0: command tx timeout [ 53.074982][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.086403][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.091538][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.093815][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.112092][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.114405][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.133559][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.141712][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.144020][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.159624][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.161861][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.184377][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.223081][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.227883][ T5966] veth0_vlan: entered promiscuous mode [ 53.234087][ T5966] veth1_vlan: entered promiscuous mode [ 53.259974][ T5966] veth0_macvtap: entered promiscuous mode [ 53.266700][ T5966] veth1_macvtap: entered promiscuous mode [ 53.282386][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.286671][ T5967] veth0_vlan: entered promiscuous mode [ 53.292755][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.307707][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.310337][ T5967] veth1_vlan: entered promiscuous mode [ 53.323405][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.326295][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.330299][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.335566][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.338330][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.356666][ T5976] veth0_vlan: entered promiscuous mode [ 53.364671][ T5967] veth0_macvtap: entered promiscuous mode [ 53.372514][ T5976] veth1_vlan: entered promiscuous mode [ 53.395939][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.398504][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.399914][ T5967] veth1_macvtap: entered promiscuous mode [ 53.420256][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.420715][ T5975] veth0_vlan: entered promiscuous mode [ 53.422858][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.431090][ T5975] veth1_vlan: entered promiscuous mode [ 53.435780][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.445042][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.453128][ T5976] veth0_macvtap: entered promiscuous mode [ 53.456301][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.459190][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.464316][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.466365][ T5966] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.467805][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.476414][ T5976] veth1_macvtap: entered promiscuous mode [ 53.496764][ T5975] veth0_macvtap: entered promiscuous mode [ 53.501912][ T5975] veth1_macvtap: entered promiscuous mode [ 53.510662][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.525785][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.534929][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.540851][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.547743][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.551496][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.555937][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.563368][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.563594][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.566295][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.570587][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.586297][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.589526][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.598687][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.607939][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.610650][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.643959][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.647420][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.660067][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.662623][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.671641][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.674108][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.688009][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.690628][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.787311][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 53.847918][ T6085] xt_time: unknown flags 0xf4 [ 53.850551][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 53.980995][ T6096] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.15'. [ 54.019567][ T6098] batman_adv: batadv0: Adding interface: gretap1 [ 54.021680][ T6098] batman_adv: batadv0: Interface activated: gretap1 [ 54.027875][ T6098] netlink: 'syz.3.16': attribute type 4 has an invalid length. [ 54.154488][ T6100] mkiss: ax0: crc mode is auto. [ 54.165896][ T1332] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.315003][ T1332] usb 7-1: Using ep0 maxpacket: 8 [ 54.318105][ T1332] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.320184][ T1332] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 54.322969][ T1332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.328192][ T1332] usb 7-1: config 0 descriptor?? [ 54.418871][ T6113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2564 sclass=netlink_tcpdiag_socket pid=6113 comm=syz.3.21 [ 54.742077][ T1332] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 54.755889][ T6141] cgroup: No subsys list or none specified [ 54.940418][ T6032] usb 7-1: USB disconnect, device number 2 [ 55.004897][ T6173] process 'syz.0.36' launched '/dev/fd/4' with NULL argv: empty string added [ 55.037279][ T6178] capability: warning: `syz.0.37' uses 32-bit capabilities (legacy support in use) [ 55.118212][ T6186] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 55.135055][ T5974] Bluetooth: hci2: command tx timeout [ 55.135801][ T5982] Bluetooth: hci0: command tx timeout [ 55.135825][ T5330] Bluetooth: hci1: command tx timeout [ 55.135849][ T5330] Bluetooth: hci3: command tx timeout [ 55.174709][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 55.531669][ T6210] netem: incorrect ge model size [ 55.533351][ T6210] netem: change failed [ 55.686758][ T6223] tipc: Enabling of bearer rejected, failed to enable media [ 55.689667][ T6223] syzkaller0: entered promiscuous mode [ 55.691279][ T6223] syzkaller0: entered allmulticast mode [ 55.852655][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 55.852666][ T40] audit: type=1400 audit(1756096472.521:219): avc: denied { nlmsg_write } for pid=6232 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 55.862826][ T40] audit: type=1107 audit(1756096472.531:220): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 56.033932][ T40] audit: type=1400 audit(1756096472.701:221): avc: denied { read write } for pid=6239 comm="syz.1.56" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 56.068407][ T40] audit: type=1400 audit(1756096472.701:222): avc: denied { open } for pid=6239 comm="syz.1.56" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 56.105664][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.108969][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.111927][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.115261][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.117950][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.120677][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.123334][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.126038][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.128776][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.131495][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.134174][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.137563][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.140439][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.143149][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.145957][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.148621][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.151821][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.154472][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.157221][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.159913][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.162535][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.165749][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.168453][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.171073][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.173751][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.176452][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.179110][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.181761][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.184391][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.187146][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.189767][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.192386][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.195117][ T6242] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 56.356822][ T40] audit: type=1400 audit(1756096473.031:223): avc: denied { ioctl } for pid=6245 comm="syz.1.58" path="socket:[11380]" dev="sockfs" ino=11380 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.365363][ T40] audit: type=1400 audit(1756096473.031:224): avc: denied { read } for pid=6245 comm="syz.1.58" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 56.372920][ T40] audit: type=1400 audit(1756096473.031:225): avc: denied { open } for pid=6245 comm="syz.1.58" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 56.380418][ T40] audit: type=1400 audit(1756096473.041:226): avc: denied { read } for pid=6245 comm="syz.1.58" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 56.388291][ T40] audit: type=1400 audit(1756096473.041:227): avc: denied { open } for pid=6245 comm="syz.1.58" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 56.414183][ T40] audit: type=1400 audit(1756096473.081:228): avc: denied { setopt } for pid=6247 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.442967][ T6250] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 56.583679][ T6268] erspan0: entered promiscuous mode [ 56.592227][ T6265] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 56.596417][ T6265] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 56.721628][ T6281] Zero length message leads to an empty skb [ 56.797558][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 57.214981][ T5982] Bluetooth: hci0: command tx timeout [ 57.216112][ T5978] Bluetooth: hci3: command tx timeout [ 57.216912][ T5330] Bluetooth: hci1: command tx timeout [ 57.218085][ T5974] Bluetooth: hci2: command tx timeout [ 57.356207][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'. [ 57.359618][ T6320] netlink: 60 bytes leftover after parsing attributes in process `syz.0.82'. [ 57.623799][ T6349] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 57.625917][ T6349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.629654][ T6349] vhci_hcd vhci_hcd.0: Device attached [ 57.632052][ T6350] vhci_hcd: unknown pdu 2 [ 57.634749][ T46] vhci_hcd: stop threads [ 57.637483][ T46] vhci_hcd: release socket [ 57.639371][ T46] vhci_hcd: disconnect device [ 57.828754][ T6377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.133084][ T6385] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 58.137757][ T6385] netlink: 27 bytes leftover after parsing attributes in process `syz.0.101'. [ 58.148810][ T6395] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.184652][ T6385] bond1 (unregistering): Released all slaves [ 58.210006][ T6403] netlink: 68 bytes leftover after parsing attributes in process `syz.3.105'. [ 58.234336][ T6403] netlink: zone id is out of range [ 58.237257][ T6403] netlink: zone id is out of range [ 58.239345][ T6403] netlink: zone id is out of range [ 58.254046][ T6403] netlink: set zone limit has 4 unknown bytes [ 58.303449][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.107'. [ 58.385480][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.585627][ T59] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.589889][ T6437] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 58.653250][ T6444] random: crng reseeded on system resumption [ 58.664076][ T6444] Restarting kernel threads ... [ 58.668062][ T6444] Done restarting kernel threads. [ 58.728806][ T6446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.741724][ T59] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 58.745410][ T59] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 58.748884][ T59] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 58.753114][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.760407][ T59] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.763339][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.767181][ T59] usb 8-1: Product: syz [ 58.769348][ T59] usb 8-1: Manufacturer: ᡇ℄ᥗℕ쵖뢚⽜欖객쫊덹浻瞄苓᭏쌺犻麇薇榈ᝬ꿸玗੘ꌧ旂ꔇ蚠ꪀꏽؠ≍尠Ḛᰄ䒥龬繳ԭ哖檓쩪變ᒃ㳦䄥設ᓳ䶱呃ꇍ뵖ٻ迭ஐ㞑䖚ⓢꂹ鸆츢篨粹쨍♩銎墓≌῿뙨沵᪖욪ﬥ맂ﳬ揊⦬듞笶駕준ﬣꢜ퍸秉静昙ᐁꮶƇ✴庬ﶯ憞霿죩꽿 [ 58.786091][ T59] usb 8-1: SerialNumber: syz [ 58.787953][ T6452] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 58.807565][ T6452] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 58.868103][ T6452] __nla_validate_parse: 2 callbacks suppressed [ 58.868116][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 58.999263][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 59.007894][ T6422] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 59.024047][ T6477] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 59.029778][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 59.032033][ T6467] infiniband syz2: set active [ 59.034546][ T6467] infiniband syz2: added batadv_slave_0 [ 59.037703][ T59] usb 8-1: 0:2 : does not exist [ 59.039586][ T6467] syz2: rxe_create_cq: returned err = -12 [ 59.041727][ T6467] infiniband syz2: Couldn't create ib_mad CQ [ 59.043769][ T6467] infiniband syz2: Couldn't open port 1 [ 59.053939][ T59] usb 8-1: USB disconnect, device number 2 [ 59.067363][ T6467] RDS/IB: syz2: added [ 59.069315][ T6467] smc: adding ib device syz2 with port count 1 [ 59.071350][ T6467] smc: ib device syz2 port 1 has pnetid [ 59.100722][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 59.109855][ T6485] tipc: Started in network mode [ 59.111418][ T6485] tipc: Node identity de5f9b6acbc8, cluster identity 4711 [ 59.113770][ T6485] tipc: Enabled bearer , priority 0 [ 59.117407][ T6485] syzkaller0: entered promiscuous mode [ 59.119123][ T6485] syzkaller0: entered allmulticast mode [ 59.129540][ T6485] tipc: Resetting bearer [ 59.138025][ T6484] tipc: Resetting bearer [ 59.143813][ T6484] tipc: Disabling bearer [ 59.295016][ T5330] Bluetooth: hci2: command tx timeout [ 59.295452][ T5982] Bluetooth: hci0: command tx timeout [ 59.296871][ T5978] Bluetooth: hci1: command tx timeout [ 59.296909][ T5330] Bluetooth: hci3: command tx timeout [ 59.518960][ T6500] netlink: 596 bytes leftover after parsing attributes in process `syz.1.133'. [ 59.527327][ T6500] pimreg: entered allmulticast mode [ 59.667157][ T6511] netlink: 32 bytes leftover after parsing attributes in process `syz.3.137'. [ 59.743511][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.745157][ T6526] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 59.746867][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.751159][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.753550][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.757522][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.759978][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.762380][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.764909][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.767582][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.769963][ T6524] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 59.775917][ T6524] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 59.824826][ T6534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.144'. [ 59.921003][ T6545] capability: warning: `syz.0.148' uses deprecated v2 capabilities in a way that may be insecure [ 59.923940][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 60.045006][ T6056] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.195792][ T6056] usb 7-1: Using ep0 maxpacket: 32 [ 60.204893][ T6056] usb 7-1: no configurations [ 60.206923][ T6056] usb 7-1: can't read configurations, error -22 [ 60.298835][ T6567] netlink: 108 bytes leftover after parsing attributes in process `syz.0.153'. [ 60.323349][ T6569] 8021q: VLANs not supported on wg1 [ 60.334965][ T6056] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 60.362365][ T5982] Bluetooth: unknown link type 126 [ 60.364641][ T5982] Bluetooth: hci0: connection err: -111 [ 60.394551][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 60.469525][ T6578] "syz.0.157" (6578) uses obsolete ecb(arc4) skcipher [ 60.485684][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 60.494978][ T6056] usb 7-1: Using ep0 maxpacket: 32 [ 60.497242][ T6056] usb 7-1: no configurations [ 60.498915][ T6056] usb 7-1: can't read configurations, error -22 [ 60.501504][ T6056] usb usb7-port1: attempt power cycle [ 60.550941][ T6585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6585 comm=syz.1.158 [ 60.579509][ T6588] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47298 sclass=netlink_xfrm_socket pid=6588 comm=syz.3.159 [ 60.700688][ T6600] vivid-002: disconnect [ 60.704243][ T6600] openvswitch: netlink: Duplicate or invalid key (type 0). [ 60.709328][ T6600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.713916][ T6599] vivid-002: reconnect [ 60.836838][ T6611] bridge1: entered promiscuous mode [ 60.865319][ T6056] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.886712][ T6056] usb 7-1: Using ep0 maxpacket: 32 [ 60.889242][ T6056] usb 7-1: no configurations [ 60.890960][ T6056] usb 7-1: can't read configurations, error -22 [ 60.903427][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 60.903438][ T40] audit: type=1326 audit(1756096477.571:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6623 comm="syz.0.171" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa397b8ebe9 code=0x0 [ 61.014961][ T6056] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 61.035542][ T6056] usb 7-1: Using ep0 maxpacket: 32 [ 61.039050][ T6056] usb 7-1: no configurations [ 61.040998][ T6056] usb 7-1: can't read configurations, error -22 [ 61.045025][ T6056] usb usb7-port1: unable to enumerate USB device [ 61.251374][ T6637] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 61.253941][ T6639] syz.1.175 uses obsolete (PF_INET,SOCK_PACKET) [ 61.270385][ T6637] loop7: detected capacity change from 0 to 7 [ 61.276342][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.279406][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.282026][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.284944][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.288101][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.290990][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.294702][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.298593][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.302139][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.305631][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.308394][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.311596][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.315301][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.318471][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.321256][ T6147] ldm_validate_partition_table(): Disk read failed. [ 61.323701][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.326803][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.330189][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.333178][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.336136][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.339047][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.341809][ T6147] Dev loop7: unable to read RDB block 0 [ 61.344762][ T6147] loop7: unable to read partition table [ 61.348097][ T6147] loop7: partition table beyond EOD, truncated [ 61.354498][ T6637] ldm_validate_partition_table(): Disk read failed. [ 61.357468][ T6637] Dev loop7: unable to read RDB block 0 [ 61.359739][ T6637] loop7: unable to read partition table [ 61.361660][ T6637] loop7: partition table beyond EOD, truncated [ 61.363870][ T6637] loop_reread_partitions: partition scan of loop7 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 61.387022][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 61.389181][ T1114] ata1: failed to read log page 10h (errno=-5) [ 61.391168][ T1114] ata1.00: exception Emask 0x1 SAct 0x200 SErr 0x0 action 0x0 [ 61.393534][ T1114] ata1.00: irq_stat 0x40000008 [ 61.395518][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 61.397468][ T1114] ata1.00: cmd 61/08:48:46:05:00/00:00:00:00:00/40 tag 9 ncq dma 4096 out [ 61.397468][ T1114] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 61.402711][ T1114] ata1.00: status: { DRDY } [ 61.404180][ T1114] ata1.00: error: { ABRT } [ 61.407782][ T1114] ata1.00: configured for UDMA/100 [ 61.409640][ T1114] ata1: EH complete [ 61.538197][ T40] audit: type=1400 audit(1756096478.211:337): avc: denied { ioctl } for pid=6640 comm="syz.1.176" path="socket:[11047]" dev="sockfs" ino=11047 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.699854][ T6654] ======================================================= [ 61.699854][ T6654] WARNING: The mand mount option has been deprecated and [ 61.699854][ T6654] and is ignored by this kernel. Remove the mand [ 61.699854][ T6654] option from the mount to silence this warning. [ 61.699854][ T6654] ======================================================= [ 61.701430][ T6655] overlayfs: overlapping lowerdir path [ 61.714212][ T40] audit: type=1400 audit(1756096478.381:338): avc: denied { mount } for pid=6653 comm="syz.3.179" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 61.768168][ T40] audit: type=1400 audit(1756096478.441:339): avc: denied { bind } for pid=6659 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.794705][ T6665] vivid-001: disconnect [ 61.797994][ T6665] mmap: syz.0.182 (6665) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.803587][ T40] audit: type=1400 audit(1756096478.471:340): avc: denied { unmount } for pid=5976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 61.810346][ T6664] vivid-001: reconnect [ 61.813195][ T40] audit: type=1400 audit(1756096478.481:341): avc: denied { mount } for pid=6664 comm="syz.0.182" name="/" dev="ramfs" ino=11053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 61.843333][ T40] audit: type=1400 audit(1756096478.511:342): avc: denied { mount } for pid=6666 comm="syz.3.180" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.847896][ T6667] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.856480][ T40] audit: type=1400 audit(1756096478.531:343): avc: denied { mount } for pid=6666 comm="syz.3.180" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.877670][ T40] audit: type=1400 audit(1756096478.541:344): avc: denied { read } for pid=5682 comm="dhcpcd" name="n104" dev="tmpfs" ino=2851 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.884594][ T40] audit: type=1400 audit(1756096478.541:345): avc: denied { open } for pid=5682 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=2851 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.903343][ T6671] fuse: Invalid rootmode [ 62.548179][ T6693] binder: 6692:6693 ioctl c0306201 200000000380 returned -22 [ 62.922172][ T6721] usb usb4: usbfs: process 6721 (syz.1.197) did not claim interface 0 before use [ 63.122302][ T6747] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 63.127511][ T6749] block device autoloading is deprecated and will be removed. [ 63.134582][ T6747] can0: slcan on ttyS3. [ 63.137933][ T6749] syzkaller0: entered promiscuous mode [ 63.139788][ T6749] syzkaller0: entered allmulticast mode [ 63.210722][ T6755] team0: Port device geneve0 added [ 63.375591][ T6014] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.524906][ T6014] usb 5-1: Using ep0 maxpacket: 16 [ 63.527849][ T6014] usb 5-1: config 0 has no interfaces? [ 63.531127][ T6014] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 63.533890][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.537541][ T6014] usb 5-1: Product: syz [ 63.538898][ T6014] usb 5-1: Manufacturer: syz [ 63.540368][ T6014] usb 5-1: SerialNumber: syz [ 63.543760][ T6014] usb 5-1: config 0 descriptor?? [ 63.835760][ T6747] can0 (unregistered): slcan off ttyS3. [ 63.845696][ T6014] usb 5-1: USB disconnect, device number 2 [ 63.949022][ T6758] __nla_validate_parse: 9 callbacks suppressed [ 63.949036][ T6758] netlink: 244 bytes leftover after parsing attributes in process `syz.1.208'. [ 64.056084][ T6773] use of bytesused == 0 is deprecated and will be removed in the future, [ 64.058947][ T6773] use the actual size instead. [ 64.753624][ T6806] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.217' sets config #1 [ 65.017932][ T6820] input: syz0 as /devices/virtual/input/input5 [ 65.189969][ T6831] team0 (unregistering): Port device team_slave_0 removed [ 65.194946][ T6831] team0 (unregistering): Port device team_slave_1 removed [ 65.232320][ T6839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.265932][ T6841] warning: `syz.3.230' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.275070][ T46] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 65.306127][ T6848] netlink: 68 bytes leftover after parsing attributes in process `syz.3.232'. [ 65.306960][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.465999][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 65.469673][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.473723][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 65.487374][ T24] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 65.490766][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.493396][ T24] usb 5-1: Product: syz [ 65.494691][ T24] usb 5-1: Manufacturer: syz [ 65.496412][ T24] usb 5-1: SerialNumber: syz [ 65.500661][ T24] usb 5-1: config 0 descriptor?? [ 65.509960][ T6870] sp0: Synchronizing with TNC [ 65.811207][ T34] usb 5-1: USB disconnect, device number 3 [ 65.864214][ T6886] sctp: [Deprecated]: syz.1.241 (pid 6886) Use of int in max_burst socket option deprecated. [ 65.864214][ T6886] Use struct sctp_assoc_value instead [ 66.424928][ T5330] Bluetooth: hci4: command 0xfc11 tx timeout [ 66.428611][ T5982] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 66.465968][ T6901] program syz.2.247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.544403][ T6905] validate_nla: 47 callbacks suppressed [ 66.544414][ T6905] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 66.564719][ T6905] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 66.568617][ T6905] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 66.616409][ T6909] gretap1: entered promiscuous mode [ 66.619872][ T6909] bond1: (slave gretap1): making interface the new active one [ 66.622981][ T6909] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 66.627212][ T40] kauditd_printk_skb: 1007 callbacks suppressed [ 66.627222][ T40] audit: type=1400 audit(1756096483.301:1353): avc: denied { mounton } for pid=6904 comm="syz.2.249" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 66.629287][ T6909] hpfs: Bad magic ... probably not HPFS [ 66.820098][ T6929] bridge0: entered promiscuous mode [ 66.822218][ T6929] macsec1: entered promiscuous mode [ 66.825580][ T6929] bridge0: port 3(macsec1) entered blocking state [ 66.827753][ T6929] bridge0: port 3(macsec1) entered disabled state [ 66.829966][ T6929] macsec1: entered allmulticast mode [ 66.831618][ T6929] bridge0: entered allmulticast mode [ 66.834576][ T6929] macsec1: left allmulticast mode [ 66.837964][ T6929] bridge0: left allmulticast mode [ 66.840395][ T6929] bridge0: left promiscuous mode [ 67.027294][ T40] audit: type=1400 audit(1756096483.701:1354): avc: denied { ioctl } for pid=6941 comm="syz.2.261" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x2103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.059367][ T40] audit: type=1400 audit(1756096483.731:1355): avc: denied { append } for pid=6941 comm="syz.2.261" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.118045][ T40] audit: type=1400 audit(1756096483.791:1356): avc: denied { setopt } for pid=6946 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 67.124011][ T40] audit: type=1400 audit(1756096483.791:1357): avc: denied { create } for pid=6946 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.171198][ T40] audit: type=1400 audit(1756096483.841:1358): avc: denied { getopt } for pid=6948 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.179367][ T6949] ipvlan1: entered promiscuous mode [ 67.182959][ T6949] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 67.186411][ T6949] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 67.233840][ T6954] netlink: 83 bytes leftover after parsing attributes in process `syz.2.265'. [ 67.337040][ T6960] binder: 6959:6960 ioctl c0306201 200000000080 returned -14 [ 67.340662][ T40] audit: type=1400 audit(1756096484.011:1359): avc: denied { write } for pid=6959 comm="syz.1.268" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.342208][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 67.348634][ T40] audit: type=1400 audit(1756096484.011:1360): avc: denied { map } for pid=6959 comm="syz.1.268" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.351848][ T6960] binder: 6959:6960 ioctl c0306201 200000000180 returned -14 [ 67.357551][ T40] audit: type=1400 audit(1756096484.011:1361): avc: denied { accept } for pid=6961 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.357574][ T40] audit: type=1400 audit(1756096484.011:1362): avc: denied { read } for pid=6961 comm="syz.3.269" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 67.525764][ T6972] IPVS: Unknown mcast interface: ipvlan1 [ 67.554275][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880542c7800: rx timeout, send abort [ 67.559012][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880542c7400: rx timeout, send abort [ 67.562556][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880542c7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 67.568803][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880542c7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 67.590617][ T6982] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.276' resets device [ 67.633091][ T6984] bond1: entered allmulticast mode [ 67.654183][ T6990] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 67.705602][ T6991] fuse: Unknown parameter '' [ 67.897599][ T7016] netlink: 27 bytes leftover after parsing attributes in process `syz.0.288'. [ 68.061701][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 68.061738][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 68.122887][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 68.142963][ T7027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.235070][ T59] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.387101][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.391704][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.395002][ T59] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 68.398622][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.404392][ T59] usb 5-1: config 0 descriptor?? [ 68.613006][ T7023] openvswitch: netlink: IPv4 tun info is not correct [ 68.621519][ T59] usbhid 5-1:0.0: can't add hid device: -71 [ 68.624198][ T59] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 68.629027][ T59] usb 5-1: USB disconnect, device number 4 [ 68.706898][ T7042] tmpfs: Unknown parameter 'usrquota0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.706898][ T7042] 0 [ 68.749865][ T7019] orangefs_mount: mount request failed with -4 [ 68.810092][ T7045] bond2 (unregistering): Released all slaves [ 68.828974][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 68.853736][ T7057] netlink: 80 bytes leftover after parsing attributes in process `syz.3.300'. [ 68.985161][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 69.227463][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 69.277658][ T7094] SELinux: Context system_u:object_r:devlog_t:s0 is not valid (left unmapped). [ 69.313242][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 69.522548][ T7112] tipc: Enabled bearer , priority 0 [ 69.528050][ T7111] tipc: Resetting bearer [ 69.612605][ T7118] fuse: Unknown parameter 'fd ' [ 70.004611][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 70.280637][ T7111] tipc: Disabling bearer [ 70.290402][ T7120] netlink: 340 bytes leftover after parsing attributes in process `syz.1.320'. [ 70.319418][ T7133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.322'. [ 70.463341][ T7150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.327'. [ 70.501491][ T7158] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 70.618902][ T7173] openvswitch: netlink: IPv4 tunnel dst address is zero [ 70.619119][ T7174] openvswitch: netlink: IPv4 tunnel dst address is zero [ 70.684307][ T7185] tap0: tun_chr_ioctl cmd 1074025675 [ 70.687215][ T7185] tap0: persist enabled [ 70.689246][ T7185] tap0: tun_chr_ioctl cmd 1074025675 [ 70.691197][ T7185] tap0: persist enabled [ 70.760317][ T7191] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 70.765227][ T7191] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 70.890208][ T7227] netlink: 'syz.1.343': attribute type 11 has an invalid length. [ 70.893439][ T7227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.343'. [ 70.973899][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'. [ 70.977625][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'. [ 70.982066][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'. [ 71.199232][ T7247] syz.1.351 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.231854][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.235175][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.442022][ T7272] fuse: Unknown parameter '|ܱ]QX33|7' [ 71.442359][ T7273] overlay: filesystem on ./bus not supported as upperdir [ 71.447281][ T6036] Process accounting resumed [ 71.463465][ T7277] Process accounting resumed [ 71.473876][ T7273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=7273 comm=syz.3.356 [ 71.477807][ T7267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=7267 comm=syz.3.356 [ 71.551234][ T7295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.553778][ T7295] IPv6: NLM_F_CREATE should be set when creating new route [ 71.556262][ T7295] IPv6: NLM_F_CREATE should be set when creating new route [ 71.583085][ T7301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7301 comm=syz.3.363 [ 71.589772][ T7295] bond2: entered allmulticast mode [ 71.591676][ T7295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.592257][ T7305] netlink: 'syz.1.368': attribute type 4 has an invalid length. [ 71.592704][ T7304] netlink: 'syz.1.368': attribute type 4 has an invalid length. [ 71.627394][ T7310] netlink: 'syz.2.369': attribute type 21 has an invalid length. [ 71.629859][ T7310] netlink: 'syz.2.369': attribute type 6 has an invalid length. [ 71.803214][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 71.803224][ T40] audit: type=1400 audit(1756096488.471:1419): avc: denied { create } for pid=7322 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 71.824922][ T6357] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 71.874357][ T40] audit: type=1400 audit(1756096488.541:1420): avc: denied { unmount } for pid=5975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.894506][ T40] audit: type=1400 audit(1756096488.561:1421): avc: denied { name_bind } for pid=7325 comm="syz.2.375" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 71.894617][ T7326] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 71.912371][ T7330] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.950711][ T40] audit: type=1400 audit(1756096488.621:1422): avc: denied { nlmsg_read } for pid=7333 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.958078][ T40] audit: type=1326 audit(1756096488.621:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.1.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ffc0000 [ 71.965828][ T40] audit: type=1326 audit(1756096488.621:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.1.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ffc0000 [ 71.974163][ T40] audit: type=1326 audit(1756096488.621:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.1.378" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f1132b8ebe9 code=0x7ffc0000 [ 71.981875][ T40] audit: type=1326 audit(1756096488.621:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.1.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ffc0000 [ 71.989876][ T40] audit: type=1326 audit(1756096488.631:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.1.378" exe="/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f1132b8ebe9 code=0x7ffc0000 [ 71.997126][ T6357] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.997207][ T40] audit: type=1326 audit(1756096488.631:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.1.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ffc0000 [ 72.001125][ T6357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.001694][ T7332] overlayfs: failed to set uuid (75/file1, err=-1); falling back to uuid=null. [ 72.001719][ T7332] overlayfs: failed to verify upper root origin [ 72.016834][ T6357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.019962][ T6357] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.024213][ T6357] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.030846][ T6357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.036068][ T6357] usb 5-1: config 0 descriptor?? [ 72.204885][ T7341] batman_adv: batadv0: Adding interface: gretap1 [ 72.207137][ T7341] batman_adv: batadv0: Interface activated: gretap1 [ 72.319511][ T7354] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.322043][ T7354] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 72.326691][ T7354] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 72.330149][ T7354] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 72.350668][ T7356] hub 9-0:1.0: USB hub found [ 72.352855][ T7356] hub 9-0:1.0: 1 port detected [ 72.359222][ T7356] netlink: 'syz.3.386': attribute type 3 has an invalid length. [ 72.362202][ T7356] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 72.400833][ T7363] syzkaller0: entered promiscuous mode [ 72.403045][ T7363] syzkaller0: entered allmulticast mode [ 72.440488][ T7366] binder: 7360:7366 ioctl c0306201 200000000640 returned -22 [ 72.448110][ T6357] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 72.459972][ T6357] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 72.561738][ T7210] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.564531][ T7210] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.567279][ T7210] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.569910][ T7210] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.613317][ T7380] mmap: syz.3.395 (7380): VmData 29339648 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 72.949923][ T7392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7392 comm=syz.3.398 [ 72.953770][ T7392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7392 comm=syz.3.398 [ 72.957762][ T7392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7392 comm=syz.3.398 [ 72.961575][ T7392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7392 comm=syz.3.398 [ 72.973283][ T7392] macvlan2: entered promiscuous mode [ 72.975210][ T7392] macvlan2: entered allmulticast mode [ 72.977491][ T7392] bond2: entered promiscuous mode [ 72.979441][ T7392] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.984059][ T7392] bond2: left promiscuous mode [ 73.018512][ T7394] program syz.3.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.322775][ T7404] binder: 7401:7404 ioctl c018620c 200000000280 returned -1 [ 73.797912][ T5998] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 73.915012][ T59] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.935431][ T5998] usb 5-1: device descriptor read/64, error -32 [ 74.002594][ T7464] overlayfs: failed to resolve './file1': -2 [ 74.069458][ T59] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.073257][ T59] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.077411][ T59] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.080901][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.088332][ T7441] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 74.093593][ T59] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.194994][ T5998] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 74.293435][ T7473] nfs: Unknown parameter 'Ո8' [ 74.298092][ T59] usb 6-1: USB disconnect, device number 2 [ 74.330064][ T7473] pimreg: entered allmulticast mode [ 74.587158][ T7483] __nla_validate_parse: 90 callbacks suppressed [ 74.587174][ T7483] netlink: 556 bytes leftover after parsing attributes in process `syz.0.419'. [ 74.633611][ T7488] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=7488 comm=syz.0.420 [ 74.725003][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'. [ 74.733709][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 74.737700][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 74.746181][ T7212] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.748931][ T7212] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.756689][ T7212] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.759469][ T7212] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.903726][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.907080][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.910036][ T7504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.960729][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 74.964586][ T7517] evm: overlay not supported [ 74.971788][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 74.999224][ T34] usb 5-1: USB disconnect, device number 5 [ 75.121013][ T7546] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.439'. [ 75.142469][ T7549] cgroup: Need name or subsystem set [ 75.182136][ T7554] afs: Unknown parameter 'dLs [ 75.182136][ T7554] t' [ 75.193892][ T7554] loop6: detected capacity change from 0 to 7 [ 75.204214][ T7554] Dev loop6: unable to read RDB block 7 [ 75.210865][ T7554] loop6: unable to read partition table [ 75.212676][ T7554] loop6: partition table beyond EOD, truncated [ 75.214759][ T7554] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 75.237925][ T7565] program syz.1.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.301124][ T7558] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 75.353166][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.448'. [ 75.486693][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 75.491897][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.453'. [ 75.968810][ T7655] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.058386][ T7655] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.139286][ T7655] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.215499][ T7655] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.339642][ T7214] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.346937][ T7214] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.355306][ T7212] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.363873][ T7212] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.515709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.524905][ T7701] kvm: kvm [7699]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000050) = 0x0 [ 76.535097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.611737][ T7712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7712 comm=syz.0.489 [ 76.801803][ T7732] netlink: zone id is out of range [ 76.803620][ T7732] netlink: get zone limit has 8 unknown bytes [ 76.805051][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 76.805061][ T40] audit: type=1400 audit(1756096493.481:1483): avc: denied { write } for pid=7733 comm="syz.1.495" path="socket:[17358]" dev="sockfs" ino=17358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.806719][ T7734] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.862170][ T40] audit: type=1400 audit(1756096493.531:1484): avc: denied { write } for pid=7742 comm="syz.1.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.868388][ T40] audit: type=1400 audit(1756096493.541:1485): avc: denied { bind } for pid=7742 comm="syz.1.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 76.993368][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 77.009181][ T7758] tipc: Started in network mode [ 77.011373][ T7758] tipc: Node identity c, cluster identity 4711 [ 77.013655][ T7758] tipc: Node number set to 12 [ 77.217874][ T840] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 77.378214][ T840] usb 7-1: Using ep0 maxpacket: 16 [ 77.382259][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.386045][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.391009][ T840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.395759][ T840] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.398644][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.403555][ T840] usb 7-1: config 0 descriptor?? [ 77.431450][ T40] audit: type=1400 audit(1756096494.055:1486): avc: denied { ioctl } for pid=7764 comm="syz.0.505" path="socket:[20860]" dev="sockfs" ino=20860 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.498269][ T40] audit: type=1400 audit(1756096494.130:1487): avc: denied { write } for pid=7773 comm="syz.0.508" path="socket:[20886]" dev="sockfs" ino=20886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.845774][ T840] HID 045e:07da: Invalid code 65791 type 1 [ 77.850981][ T840] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0004/input/input9 [ 77.860592][ T840] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 78.075668][ T7796] netlink: 'syz.1.515': attribute type 16 has an invalid length. [ 78.079032][ T7796] netlink: 'syz.1.515': attribute type 17 has an invalid length. [ 78.111377][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.114520][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.117576][ T7754] hid-generic 0003:0627:0001.0001: pid 7754 passed too short report [ 78.135706][ T7799] openvswitch: netlink: Key type 16144 is out of range max 32 [ 78.171619][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.184745][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.269007][ T7796] bridge1: left promiscuous mode [ 78.272452][ T7796] batman_adv: batadv0: Interface deactivated: gretap1 [ 78.283468][ T7211] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.287667][ T7211] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.292752][ T1332] syz2: Port: 1 Link DOWN [ 78.292784][ T7211] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.298552][ T7210] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.303867][ T1332] usb 7-1: USB disconnect, device number 7 [ 78.463844][ T7804] (syz.0.517,7804,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.466387][ T7804] (syz.0.517,7804,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 78.554544][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 78.582251][ T40] audit: type=1400 audit(1756096495.141:1488): avc: denied { getopt } for pid=7806 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.636132][ T40] audit: type=1400 audit(1756096495.187:1489): avc: denied { ioctl } for pid=7806 comm="syz.3.518" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.728724][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 78.732596][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.736302][ T9] usb 6-1: Product: syz [ 78.737998][ T9] usb 6-1: Manufacturer: syz [ 78.739884][ T9] usb 6-1: SerialNumber: syz [ 78.743719][ T9] usb 6-1: config 0 descriptor?? [ 78.746660][ T6036] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.909346][ T6036] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.912677][ T6036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.916114][ T6036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.919594][ T6036] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 78.923674][ T6036] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 78.926502][ T6036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.930776][ T6036] usb 5-1: config 0 descriptor?? [ 78.975527][ T7802] dvmrp8: entered allmulticast mode [ 78.982511][ T7817] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 79.077413][ T7800] dvmrp8: left allmulticast mode [ 79.083587][ T6056] usb 6-1: USB disconnect, device number 3 [ 79.121338][ T5330] Bluetooth: hci3: command 0x0405 tx timeout [ 79.149718][ T6036] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 79.156657][ T6036] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input10 [ 79.233929][ T6036] keytouch 0003:0926:3333.0005: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 79.368334][ T5998] usb 5-1: USB disconnect, device number 6 [ 79.796067][ T7832] __nla_validate_parse: 11 callbacks suppressed [ 79.796078][ T7832] netlink: 88 bytes leftover after parsing attributes in process `syz.2.524'. [ 79.903118][ T40] audit: type=1400 audit(1756096496.375:1490): avc: denied { ioctl } for pid=7833 comm="syz.2.525" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 79.935635][ T7836] tmpfs: Bad value for 'mpol' [ 79.976082][ T840] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.147113][ T840] usb 8-1: Using ep0 maxpacket: 8 [ 80.153936][ T840] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 80.157334][ T840] usb 8-1: config 0 has no interface number 0 [ 80.159902][ T840] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.164352][ T840] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 80.168830][ T840] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.172365][ T840] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.177809][ T840] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 80.179158][ T5998] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 80.181700][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.189347][ T840] usb 8-1: config 0 descriptor?? [ 80.199213][ T840] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 80.350618][ T5998] usb 7-1: Using ep0 maxpacket: 32 [ 80.354228][ T5998] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 80.360904][ T5998] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 80.364404][ T5998] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 80.367806][ T5998] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 80.372100][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.376238][ T5998] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 80.376258][ T5998] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 80.376268][ T5998] usb 7-1: Product: syz [ 80.376276][ T5998] usb 7-1: Manufacturer: syz [ 80.376284][ T5998] usb 7-1: SerialNumber: syz [ 80.382732][ T5998] usb 7-1: config 0 descriptor?? [ 80.390625][ T5998] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 80.402195][ T5998] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 80.425468][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.454955][ T40] audit: type=1400 audit(1756096496.890:1491): avc: denied { write } for pid=7853 comm="syz.1.532" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.471061][ T6056] usb 8-1: USB disconnect, device number 3 [ 80.475078][ T6056] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 80.604673][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 80.608685][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.610869][ T6036] usb 7-1: USB disconnect, device number 8 [ 80.614136][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.618429][ T6036] ldusb 7-1:0.0: LD USB Device #1 now disconnected [ 80.620008][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.627572][ T9] usb 5-1: config 0 descriptor?? [ 80.825593][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 80.832347][ T7834] bridge0: entered promiscuous mode [ 80.835085][ T7834] bridge0: port 3(macvlan2) entered blocking state [ 80.837218][ T7834] bridge0: port 3(macvlan2) entered disabled state [ 80.839503][ T7834] macvlan2: entered allmulticast mode [ 80.841201][ T7834] bridge0: entered allmulticast mode [ 80.844031][ T7834] macvlan2: left allmulticast mode [ 80.845661][ T7834] bridge0: left allmulticast mode [ 80.848052][ T7834] bridge0: left promiscuous mode [ 81.420297][ T40] audit: type=1400 audit(1756096497.797:1492): avc: denied { mount } for pid=7868 comm="syz.3.536" name="/" dev="9p" ino=35913909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.421113][ T7869] comedi: No check for data length of config insn id 3 is implemented [ 81.430583][ T7869] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 81.433648][ T7869] comedi: Assuming n=15 is correct [ 81.466590][ T7840] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 81.468887][ T7840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.480785][ T7840] vhci_hcd vhci_hcd.0: Device attached [ 81.494808][ T7840] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 81.497038][ T7840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.500520][ T7840] vhci_hcd vhci_hcd.0: Device attached [ 81.504315][ T7840] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 81.506436][ T7840] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.509982][ T7840] vhci_hcd vhci_hcd.0: Device attached [ 81.512161][ T7873] overlayfs: workdir and upperdir must reside under the same mount [ 81.626750][ T7880] vhci_hcd: connection closed [ 81.626939][ T7878] vhci_hcd: connection closed [ 81.628624][ T7870] vhci_hcd: connection closed [ 81.629900][ T7209] vhci_hcd: stop threads [ 81.634031][ T7209] vhci_hcd: release socket [ 81.634123][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 81.636221][ T7209] vhci_hcd: disconnect device [ 81.640895][ T7209] vhci_hcd: stop threads [ 81.642354][ T7209] vhci_hcd: release socket [ 81.644821][ T9] usb 5-1: USB disconnect, device number 7 [ 81.646851][ T7209] vhci_hcd: disconnect device [ 81.648540][ T7209] vhci_hcd: stop threads [ 81.650182][ T7209] vhci_hcd: release socket [ 81.652803][ T7209] vhci_hcd: disconnect device [ 81.664258][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.686828][ T6357] vhci_hcd: vhci_device speed not set [ 81.707273][ T7893] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 81.710660][ T7893] netlink: 'syz.1.542': attribute type 2 has an invalid length. [ 81.713656][ T7893] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.542'. [ 81.746574][ T7901] binder: BINDER_SET_CONTEXT_MGR already set [ 81.749553][ T7901] binder: 7899:7901 ioctl 4018620d 200000000280 returned -16 [ 81.754161][ T7901] binder: 7899:7901 ioctl c0306201 200000000080 returned -14 [ 81.756341][ T7900] binder: 7899:7900 ioctl c0306201 200000000080 returned -14 [ 81.763237][ T7900] binder: BINDER_SET_CONTEXT_MGR already set [ 81.765206][ T7900] binder: 7899:7900 ioctl 4018620d 200000000100 returned -16 [ 81.765239][ T7901] binder: BINDER_SET_CONTEXT_MGR already set [ 81.769664][ T7901] binder: 7899:7901 ioctl 4018620d 200000000100 returned -16 [ 81.777869][ T7900] binder: BINDER_SET_CONTEXT_MGR already set [ 81.778112][ T1219] cfg80211: failed to load regulatory.db [ 81.780048][ T7900] binder: 7899:7900 ioctl 4018620d 200000000040 returned -16 [ 81.783641][ T7900] binder: 7899:7900 ioctl c0306201 200000000180 returned -14 [ 81.921244][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 81.925313][ T7911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7911 comm=syz.2.547 [ 81.980348][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 82.024452][ T7918] bond0: (slave veth0_virt_wifi): Releasing backup interface [ 82.160628][ T7927] can0: slcan on ttyS3. [ 82.413541][ T6036] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 82.494131][ T7942] netlink: 64 bytes leftover after parsing attributes in process `syz.0.554'. [ 82.497192][ T7942] netlink: 64 bytes leftover after parsing attributes in process `syz.0.554'. [ 82.584544][ T6036] usb 7-1: Using ep0 maxpacket: 16 [ 82.588450][ T6036] usb 7-1: config 0 has no interfaces? [ 82.592598][ T6036] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 82.615097][ T6036] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.636094][ T7944] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 82.637525][ T6036] usb 7-1: Product: syz [ 82.641174][ T6036] usb 7-1: Manufacturer: syz [ 82.643130][ T6036] usb 7-1: SerialNumber: syz [ 82.654022][ T7944] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 82.658726][ T7944] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 82.659198][ T6036] usb 7-1: config 0 descriptor?? [ 82.700630][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 82.700644][ T40] audit: type=1400 audit(1756096498.985:1500): avc: denied { getopt } for pid=7948 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.725339][ T7950] gretap1: entered promiscuous mode [ 82.728384][ T40] audit: type=1400 audit(1756096499.022:1501): avc: denied { getopt } for pid=7948 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.730602][ T7950] bond1: (slave gretap1): making interface the new active one [ 82.739402][ T7950] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 82.809588][ T7944] hid-generic 0003:0627:0001.0001: pid 7944 passed too large report [ 82.817273][ T7944] macvlan2: entered promiscuous mode [ 82.819723][ T7944] macvlan2: entered allmulticast mode [ 82.822673][ T7944] bond1: entered promiscuous mode [ 82.825589][ T7944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 82.831934][ T7944] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 82.836478][ T7944] bond1: left promiscuous mode [ 82.838085][ T40] audit: type=1400 audit(1756096499.116:1502): avc: denied { mounton } for pid=7953 comm="syz.1.558" path="/163/file0" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 82.909618][ T40] audit: type=1400 audit(1756096499.191:1503): avc: denied { setopt } for pid=7926 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.024837][ T7927] can0 (unregistered): slcan off ttyS3. [ 83.028666][ T7908] usb 7-1: USB disconnect, device number 9 [ 83.118418][ T7980] 9pnet_fd: Insufficient options for proto=fd [ 83.127217][ T7983] netlink: 'syz.3.565': attribute type 21 has an invalid length. [ 83.130504][ T7983] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.158266][ T7986] netlink: ct family unspecified [ 83.160018][ T7986] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.188161][ T40] audit: type=1400 audit(1756096499.453:1504): avc: denied { shutdown } for pid=7988 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.374339][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 83.456523][ T40] audit: type=1400 audit(1756096499.696:1505): avc: denied { create } for pid=8013 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 83.463698][ T40] audit: type=1400 audit(1756096499.696:1506): avc: denied { write } for pid=8013 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 83.545483][ T8031] ksmbd: Unknown IPC event: 1, ignore. [ 83.568176][ T6036] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.585542][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'. [ 83.591925][ T40] audit: type=1400 audit(1756096499.818:1507): avc: denied { write } for pid=8036 comm="syz.2.584" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.599041][ T7908] hid-generic 0000:0004:0009.0006: unknown main item tag 0x0 [ 83.604283][ T7908] hid-generic 0000:0004:0009.0006: unknown main item tag 0x0 [ 83.606615][ T7908] hid-generic 0000:0004:0009.0006: unknown main item tag 0x0 [ 83.617114][ T7908] hid-generic 0000:0004:0009.0006: hidraw1: HID v0.04 Device [syz0] on syz1 [ 83.648865][ T8039] fido_id[8039]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.658172][ T40] audit: type=1400 audit(1756096499.892:1508): avc: denied { ioctl } for pid=8040 comm="syz.2.585" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.732754][ T6036] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.737351][ T6036] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 83.742099][ T6036] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.746298][ T6036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.752540][ T7998] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 83.762007][ T6036] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.791843][ T8051] binder: 8050:8051 ioctl c020aa04 200000000140 returned -22 [ 83.792715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.992928][ T1219] usb 6-1: USB disconnect, device number 4 [ 84.075945][ T40] audit: type=1400 audit(1756096500.276:1509): avc: denied { map } for pid=8064 comm="syz.2.593" path="/proc/334/mountinfo" dev="proc" ino=22743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 84.110726][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 84.120244][ T8067] tmpfs: Bad value for 'mpol' [ 84.263114][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 84.450558][ T9] usb 8-1: config index 0 descriptor too short (expected 4423, got 2448) [ 84.460941][ T9] usb 8-1: config 85 has too many interfaces: 62, using maximum allowed: 32 [ 84.463748][ T9] usb 8-1: config 85 has an invalid descriptor of length 0, skipping remainder of the config [ 84.468583][ T9] usb 8-1: config 85 has 0 interfaces, different from the descriptor's value: 62 [ 84.471758][ T9] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 84.474635][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.541117][ T6357] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 84.713341][ T9] usb 8-1: string descriptor 0 read error: -71 [ 84.716089][ T8095] IPv6: NLM_F_CREATE should be specified when creating new route [ 84.716694][ T9] usb 8-1: USB disconnect, device number 4 [ 84.724597][ T6357] usb 7-1: Using ep0 maxpacket: 32 [ 84.730280][ T6357] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 84.732721][ T8097] block nbd1: Attempted send on invalid socket [ 84.733935][ T6357] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.736428][ T8097] blk_print_req_error: 25 callbacks suppressed [ 84.736438][ T8097] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.739697][ T6357] usb 7-1: config 1 interface 0 has no altsetting 0 [ 84.742207][ T6357] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 84.742565][ T8097] (syz.1.604,8097,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 84.746536][ T6357] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.748360][ T8097] (syz.1.604,8097,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 84.751034][ T6357] usb 7-1: Product: syz [ 84.753420][ T8097] (syz.1.604,8097,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 84.758310][ T6357] usb 7-1: Manufacturer: 㠁 [ 84.758530][ T8097] (syz.1.604,8097,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 84.759863][ T6357] usb 7-1: SerialNumber: syz [ 84.762288][ T8074] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 84.770524][ T8074] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 84.828993][ T8102] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8102 comm=syz.0.606 [ 84.995827][ T6357] usb 7-1: USB disconnect, device number 10 [ 85.166113][ T8122] __nla_validate_parse: 1 callbacks suppressed [ 85.166123][ T8122] netlink: 84 bytes leftover after parsing attributes in process `syz.0.612'. [ 85.207126][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 85.210182][ T8074] netlink: 31 bytes leftover after parsing attributes in process `syz.2.597'. [ 85.214200][ T8074] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 85.218641][ T8074] netlink: 'syz.2.597': attribute type 2 has an invalid length. [ 85.221040][ T8074] netlink: 31 bytes leftover after parsing attributes in process `syz.2.597'. [ 85.223810][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 85.957040][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 86.178218][ T8169] bridge_slave_0: left allmulticast mode [ 86.180080][ T8169] bridge_slave_0: left promiscuous mode [ 86.208088][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.235229][ T8169] bridge_slave_1: left allmulticast mode [ 86.237780][ T8169] bridge_slave_1: left promiscuous mode [ 86.251674][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.266013][ T8169] bond0: (slave bond_slave_0): Releasing backup interface [ 86.279148][ T8169] bond0: (slave bond_slave_1): Releasing backup interface [ 86.287587][ T8169] team0: Port device team_slave_0 removed [ 86.297127][ T8169] team0: Port device team_slave_1 removed [ 86.300296][ T8169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.303498][ T8169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.309893][ T8169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.312396][ T8169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.328155][ T8169] team0: Port device geneve0 removed [ 86.331125][ T8169] bond1: (slave gretap1): Releasing active interface [ 86.363511][ T8170] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 86.504569][ T8188] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 86.513072][ T8188] CIFS: Unable to determine destination address [ 86.538834][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.626'. [ 86.779489][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 87.193654][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'. [ 87.307192][ T8236] sctp: [Deprecated]: syz.0.642 (pid 8236) Use of int in max_burst socket option deprecated. [ 87.307192][ T8236] Use struct sctp_assoc_value instead [ 87.355515][ T8238] netlink: 'syz.2.641': attribute type 6 has an invalid length. [ 87.358421][ T8238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.641'. [ 87.696666][ T8255] netlink: 'syz.2.646': attribute type 2 has an invalid length. [ 88.047395][ T40] kauditd_printk_skb: 28706 callbacks suppressed [ 88.047406][ T40] audit: type=1326 audit(1756096503.989:30216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.056603][ T40] audit: type=1326 audit(1756096503.999:30217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.064090][ T40] audit: type=1326 audit(1756096503.999:30218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.072198][ T40] audit: type=1326 audit(1756096503.999:30219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.079258][ T40] audit: type=1326 audit(1756096503.999:30220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.086522][ T40] audit: type=1326 audit(1756096503.999:30221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.093557][ T40] audit: type=1326 audit(1756096503.999:30222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.100572][ T40] audit: type=1326 audit(1756096503.999:30223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.107957][ T40] audit: type=1326 audit(1756096503.999:30224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.115362][ T40] audit: type=1326 audit(1756096503.999:30225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132b8ebe9 code=0x7ff00000 [ 88.466878][ T8302] program syz.0.657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.444369][ T8347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8347 comm=syz.1.671 [ 90.231402][ T7212] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 90.304230][ T8367] kvm: kvm [8366]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 90.307468][ T8367] kvm: kvm [8366]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 90.324226][ T8367] kvm: kvm [8366]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 90.345626][ T8367] kvm: kvm [8366]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 90.349078][ T8367] kvm: kvm [8366]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 90.365787][ T8367] kvm_intel: kvm [8366]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 90.588174][ T8403] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 90.631157][ T8405] vlan2: entered promiscuous mode [ 90.633155][ T8405] bridge0: entered promiscuous mode [ 90.635129][ T8405] vlan2: entered allmulticast mode [ 90.636772][ T8405] bridge0: entered allmulticast mode [ 90.720872][ T5998] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.822656][ T8417] mkiss: ax0: crc mode is auto. [ 90.902787][ T5998] usb 6-1: Using ep0 maxpacket: 16 [ 90.906965][ T5998] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 90.909927][ T5998] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10 [ 90.913752][ T5998] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024 [ 90.917337][ T5998] usb 6-1: config 0 interface 0 has no altsetting 0 [ 90.921415][ T5998] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 90.924613][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.927172][ T5998] usb 6-1: Product: syz [ 90.928489][ T5998] usb 6-1: Manufacturer: syz [ 90.929981][ T5998] usb 6-1: SerialNumber: syz [ 90.932878][ T5998] usb 6-1: config 0 descriptor?? [ 90.959428][ T8430] tmpfs: Unknown parameter 'dont_hash' [ 91.018955][ T8434] kvm: kvm [8433]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 91.022030][ T8434] kvm: kvm [8433]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 91.153262][ T5998] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 91.351522][ T8448] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 91.353580][ T8448] PKCS7: Only support pkcs7_signedData type [ 91.373910][ T5998] usb 6-1: USB disconnect, device number 5 [ 91.406430][ T8455] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 91.408665][ T8455] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 91.411169][ T8455] vhci_hcd vhci_hcd.0: Device attached [ 91.413767][ T8456] vhci_hcd: connection closed [ 91.413940][ T7209] vhci_hcd: stop threads [ 91.417172][ T7209] vhci_hcd: release socket [ 91.418572][ T7209] vhci_hcd: disconnect device [ 91.984152][ T8468] kvm: emulating exchange as write [ 92.213131][ T8487] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 92.217687][ T59] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.246060][ T8485] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 92.389264][ T59] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 92.391925][ T59] usb 5-1: config 1 has no interface number 0 [ 92.393867][ T59] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 92.396877][ T59] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 16 [ 92.401819][ T59] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 92.405922][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.408409][ T59] usb 5-1: Product: syz [ 92.415576][ T59] usb 5-1: Manufacturer: syz [ 92.417142][ T59] usb 5-1: SerialNumber: syz [ 92.423346][ T8466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.425709][ T8466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.432740][ T59] usb 5-1: Error in usbnet_get_endpoints (-22) [ 92.443306][ T8508] could not allocate digest TFM handle sha384-avx [ 92.467707][ T8521] BIDI support in bsg has been removed. [ 92.766324][ T8534] tmpfs: Cannot disable swap on remount [ 92.975872][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 93.136687][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 93.140495][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.145060][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.149270][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.154631][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.158673][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.164325][ T10] usb 6-1: config 0 descriptor?? [ 93.603562][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 93.609911][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0007/input/input13 [ 93.616586][ T10] microsoft 0003:045E:07DA.0007: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 93.623720][ T34] usb 6-1: USB disconnect, device number 6 [ 93.646362][ T40] kauditd_printk_skb: 517 callbacks suppressed [ 93.646377][ T40] audit: type=1400 audit(1756096509.228:30743): avc: denied { setopt } for pid=8550 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.659814][ T40] audit: type=1400 audit(1756096509.228:30744): avc: denied { bind } for pid=8550 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.672617][ T40] audit: type=1400 audit(1756096509.237:30745): avc: denied { listen } for pid=8550 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.686884][ T8549] fido_id[8549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 93.762406][ T40] audit: type=1400 audit(1756096509.340:30746): avc: denied { ioctl } for pid=8554 comm="syz.1.736" path="socket:[25477]" dev="sockfs" ino=25477 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.817330][ T8556] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 93.817337][ T8557] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 93.826478][ T8557] bond2: entered promiscuous mode [ 93.828305][ T8557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.838119][ T8555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.840401][ T8555] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 93.844218][ T8555] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 93.850026][ T8555] bond2: (slave ip6gre1): making interface the new active one [ 93.852503][ T8555] ip6gre1: entered promiscuous mode [ 93.854982][ T8555] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 93.860668][ T8555] Attempt to restore checkpoint with obsolete wellknown handles [ 93.891356][ T40] audit: type=1400 audit(1756096509.462:30747): avc: denied { write } for pid=8559 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.956445][ T8565] bridge_slave_0: left allmulticast mode [ 93.958254][ T8565] bridge_slave_0: left promiscuous mode [ 93.960397][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.964346][ T8565] bridge_slave_1: left promiscuous mode [ 93.966334][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.972471][ T8565] bond0: (slave bond_slave_0): Releasing backup interface [ 93.978492][ T8565] bond0: (slave bond_slave_1): Releasing backup interface [ 93.988602][ T8565] team0: Port device team_slave_0 removed [ 93.994090][ T8565] team0: Port device team_slave_1 removed [ 93.996351][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.999813][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.005000][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.008207][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.016656][ T8565] batman_adv: batadv0: Interface deactivated: gretap1 [ 94.018816][ T8565] batman_adv: batadv0: Removing interface: gretap1 [ 94.047421][ T8573] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 94.051259][ T8573] __nla_validate_parse: 6 callbacks suppressed [ 94.051270][ T8573] netlink: 224 bytes leftover after parsing attributes in process `syz.1.742'. [ 94.300419][ T5982] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 94.303638][ T40] audit: type=1400 audit(1756096509.854:30748): avc: denied { listen } for pid=8601 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.309917][ T40] audit: type=1400 audit(1756096509.854:30749): avc: denied { accept } for pid=8601 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.514092][ T40] audit: type=1400 audit(1756096510.041:30750): avc: denied { accept } for pid=8615 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.607825][ T40] audit: type=1326 audit(1756096510.126:30751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8624 comm="syz.2.758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a6b8ebe9 code=0x7ffc0000 [ 94.616117][ T40] audit: type=1326 audit(1756096510.126:30752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8624 comm="syz.2.758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a6b8ebe9 code=0x7ffc0000 [ 95.101274][ T8640] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 95.101274][ T8640] program syz.2.762 not setting count and/or reply_len properly [ 95.165501][ T59] usb 5-1: USB disconnect, device number 8 [ 95.287588][ T8657] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 95.297851][ T8653] team0: Mode changed to "loadbalance" [ 95.300147][ T8653] netlink: 'syz.3.767': attribute type 10 has an invalid length. [ 95.311965][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.314818][ T8653] team0: Port device bond0 added [ 95.321625][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 95.425867][ T8653] team0 (unregistering): Port device bond0 removed [ 95.474295][ T8664] kvm: kvm [8663]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 95.477688][ T8664] kvm: kvm [8663]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 95.505188][ T8664] kvm: kvm [8663]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 95.647825][ T8694] Bluetooth: MGMT ver 1.23 [ 95.649611][ T8694] Bluetooth: hci0: unsupported parameter 256 [ 95.652603][ T8694] Bluetooth: hci0: unsupported parameter 256 [ 95.745714][ T8688] netlink: 52 bytes leftover after parsing attributes in process `syz.0.780'. [ 95.804163][ T8706] netlink: 'syz.2.783': attribute type 23 has an invalid length. [ 95.878141][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 95.976691][ T8727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 96.019059][ T8715] /dev/sr0: Can't open blockdev [ 96.081074][ T8730] tmpfs: Bad value for 'mpol' [ 96.418238][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.601185][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.604933][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.608167][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 96.614704][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.631570][ T10] usb 5-1: config 0 descriptor?? [ 96.632853][ T8749] random: crng reseeded on system resumption [ 96.809108][ T8765] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 97.035001][ T8774] netlink: 9 bytes leftover after parsing attributes in process `syz.3.806'. [ 97.037962][ T8774] 0: renamed from hsr0 (while UP) [ 97.041989][ T8774] 0: entered allmulticast mode [ 97.043572][ T8774] hsr_slave_0: entered allmulticast mode [ 97.045323][ T8774] hsr_slave_1: entered allmulticast mode [ 97.047433][ T8774] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 97.068042][ T10] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 97.071876][ T10] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 97.074699][ T10] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 97.076992][ T10] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 97.079244][ T10] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 97.086145][ T10] cm6533_jd 0003:0D8C:0022.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 97.266954][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 97.294522][ T8740] input: syz0 as /devices/virtual/input/input14 [ 97.304331][ T8800] netlink: 15 bytes leftover after parsing attributes in process `syz.3.814'. [ 97.370329][ T10] usb 5-1: USB disconnect, device number 9 [ 98.081306][ T8831] ceph: No mds server is up or the cluster is laggy [ 98.086381][ T8834] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 98.088838][ T8834] netlink: 224 bytes leftover after parsing attributes in process `syz.0.822'. [ 98.265120][ T5982] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 98.339056][ T8815] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.346673][ T8815] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.365301][ T8815] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.372758][ T8815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.375273][ T8815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.382889][ T8815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.388748][ T8815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.390900][ T8815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.397084][ T8815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.402633][ T8815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.404649][ T8815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.438430][ T8815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.663605][ T8864] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.730200][ T5982] Bluetooth: hci3: unexpected event for opcode 0x009d [ 98.977649][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.840'. [ 98.995808][ T1219] IPVS: starting estimator thread 0... [ 98.999373][ T8912] tipc: Enabled bearer , priority 10 [ 99.071921][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 99.071933][ T40] audit: type=1400 audit(1756096514.307:30824): avc: denied { mount } for pid=8923 comm="syz.3.844" name="/" dev="hugetlbfs" ino=29707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 99.092804][ T8913] IPVS: using max 45 ests per chain, 108000 per kthread [ 99.323467][ T8948] can0: slcan on ttynull. [ 99.412688][ T8947] can0 (unregistered): slcan off ttynull. [ 99.443737][ T8965] openvswitch: netlink: IP tunnel dst address not specified [ 99.447761][ T40] audit: type=1400 audit(1756096514.662:30825): avc: denied { read } for pid=8964 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.454480][ T8968] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 99.459357][ T40] audit: type=1400 audit(1756096514.662:30826): avc: denied { setopt } for pid=8964 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.646903][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.798764][ T8999] __nla_validate_parse: 3 callbacks suppressed [ 99.798777][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 99.804920][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 99.808216][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 99.811766][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 99.814741][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 99.828638][ T8999] netlink: 45 bytes leftover after parsing attributes in process `syz.3.862'. [ 100.060205][ T9011] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.214830][ T6036] tipc: Node number set to 362257258 [ 100.227031][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.865'. [ 100.232870][ T9014] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.865'. [ 100.237077][ T9014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.865'. [ 100.546207][ T9035] binder: 9033:9035 ioctl c0306201 200000000380 returned -14 [ 100.584446][ T9037] overlayfs: failed to resolve './file0': -2 [ 100.588831][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.588873][ T5330] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.600087][ T9039] batadv_slave_1: entered promiscuous mode [ 100.687347][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 100.817928][ T9038] batadv_slave_1: left promiscuous mode [ 100.918788][ T40] audit: type=1400 audit(1756096516.028:30827): avc: denied { load_policy } for pid=9061 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 100.923015][ T9070] SELinux: unknown common socke [ 100.929368][ T9070] SELinux: failed to load policy [ 100.935483][ T40] audit: type=1400 audit(1756096516.047:30828): avc: denied { accept } for pid=9061 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 100.957322][ T9083] overlayfs: unescaped trailing colons in lowerdir mount option. [ 100.959365][ T40] audit: type=1400 audit(1756096516.065:30829): avc: denied { read write } for pid=5967 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.967965][ T40] audit: type=1400 audit(1756096516.065:30830): avc: denied { open } for pid=5967 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.976984][ T40] audit: type=1400 audit(1756096516.065:30831): avc: denied { ioctl } for pid=5967 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.001597][ T9090] kAFS: No cell specified [ 101.035751][ T9091] bridge_slave_0: left allmulticast mode [ 101.039273][ T9091] bridge_slave_0: left promiscuous mode [ 101.042557][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.049466][ T9091] bridge_slave_1: left promiscuous mode [ 101.051579][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.062305][ T9091] bond0: (slave bond_slave_0): Releasing backup interface [ 101.067355][ T9091] bond0: (slave bond_slave_1): Releasing backup interface [ 101.074960][ T9091] team0: Port device team_slave_0 removed [ 101.079733][ T9091] team0: Port device team_slave_1 removed [ 101.082003][ T9091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.084436][ T9091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.087687][ T9091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.091846][ T9091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.103133][ T9091] bond1: (slave gretap1): Releasing active interface [ 101.117147][ T9100] team0: Mode changed to "loadbalance" [ 101.126116][ T9091] vxfs: WRONG superblock magic 00000000 at 1 [ 101.129498][ T9091] vxfs: WRONG superblock magic 00000000 at 8 [ 101.131958][ T9091] vxfs: can't find superblock. [ 101.187543][ T5330] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 101.222837][ T40] audit: type=1400 audit(1756096516.318:30832): avc: denied { setopt } for pid=9111 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.286257][ T9127] netlink: 'syz.1.896': attribute type 15 has an invalid length. [ 101.345587][ T9139] netlink: 'syz.0.898': attribute type 22 has an invalid length. [ 101.389898][ T9139] netlink: 'syz.0.898': attribute type 22 has an invalid length. [ 101.644466][ T9156] loop7: detected capacity change from 0 to 7 [ 101.648456][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.651298][ C3] buffer_io_error: 25 callbacks suppressed [ 101.651306][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.655712][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.659271][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.662748][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.666564][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.670192][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.673864][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.676603][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.679741][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.682574][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.685470][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.688187][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.691093][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.693616][ T6147] ldm_validate_partition_table(): Disk read failed. [ 101.696079][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.699017][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.702003][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 101.702462][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.707231][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.709876][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.713018][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 101.716211][ T6147] Dev loop7: unable to read RDB block 0 [ 101.718454][ T6147] loop7: unable to read partition table [ 101.720441][ T6147] loop7: partition table beyond EOD, truncated [ 101.726511][ T9156] ldm_validate_partition_table(): Disk read failed. [ 101.731198][ T9156] Dev loop7: unable to read RDB block 0 [ 101.733763][ T9156] loop7: unable to read partition table [ 101.736209][ T9156] loop7: partition table beyond EOD, truncated [ 101.738692][ T9156] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 101.798118][ T40] audit: type=1400 audit(1756096516.861:30833): avc: denied { write } for pid=9163 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 101.860214][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 101.863670][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.867082][ T34] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.869923][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.870471][ T5330] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.875846][ T34] usb 8-1: config 0 descriptor?? [ 102.094977][ T34] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 102.186512][ T9170] openvswitch: netlink: Unknown key attributes 2 [ 102.190674][ T9170] netlink: 'syz.0.908': attribute type 14 has an invalid length. [ 102.232276][ T34] IPVS: starting estimator thread 0... [ 102.264426][ T9176] ------------[ cut here ]------------ [ 102.264856][ T9177] netlink: 'syz.0.910': attribute type 18 has an invalid length. [ 102.267956][ T9176] WARNING: CPU: 3 PID: 9176 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 102.272142][ T9176] Modules linked in: [ 102.273634][ T9176] CPU: 3 UID: 0 PID: 9176 Comm: syz.0.910 Not tainted syzkaller #0 PREEMPT(full) [ 102.278578][ T9176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.281911][ T9176] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 102.284002][ T9176] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f bd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 6d a9 7e 0e 00 75 0b c6 05 64 a9 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 102.290203][ T9176] RSP: 0018:ffffc90003747780 EFLAGS: 00010246 [ 102.292216][ T9176] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 102.294664][ T9176] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000040cc0 [ 102.297144][ T9176] RBP: 000000000000000c R08: 0000000000000005 R09: 0000000000000009 [ 102.300768][ T9176] R10: 000000000000000c R11: 0000000000000000 R12: 0000000000040cc0 [ 102.303210][ T9176] R13: 1ffff920006e8f05 R14: ffffffff9ae7ba24 R15: 000000000000000c [ 102.305624][ T9176] FS: 00007fa3989406c0(0000) GS:ffff8880d69b9000(0000) knlGS:0000000000000000 [ 102.308446][ T9176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.310595][ T9176] CR2: 00007fa39893ff98 CR3: 00000000336d7000 CR4: 0000000000352ef0 [ 102.313109][ T9176] Call Trace: [ 102.313718][ T9] usb 8-1: USB disconnect, device number 5 [ 102.314193][ T9176] [ 102.314199][ T9176] ? find_held_lock+0x2b/0x80 [ 102.314218][ T9176] ? is_bpf_text_address+0x8a/0x1a0 [ 102.320247][ T9176] ? bpf_ksym_find+0x127/0x1c0 [ 102.321850][ T9176] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.323831][ T9176] ? is_bpf_text_address+0x94/0x1a0 [ 102.325464][ T9176] ? kernel_text_address+0x8d/0x100 [ 102.327072][ T9176] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.329125][ T9176] ? arch_stack_walk+0xa6/0x100 [ 102.330228][ T9173] IPVS: using max 44 ests per chain, 105600 per kthread [ 102.330771][ T9176] ? stack_trace_save+0x8e/0xc0 [ 102.334414][ T9176] ? __pfx_stack_trace_save+0x10/0x10 [ 102.336107][ T9176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.337953][ T9176] ? policy_nodemask+0xea/0x4e0 [ 102.339500][ T9176] alloc_pages_mpol+0x1fb/0x550 [ 102.341094][ T9176] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.342770][ T9176] ? drm_syncobj_array_find+0x35/0x3c0 [ 102.344516][ T9176] ___kmalloc_large_node+0xed/0x160 [ 102.346167][ T9176] ? drm_syncobj_array_find+0x35/0x3c0 [ 102.347877][ T9176] __kmalloc_large_node_noprof+0x1c/0x70 [ 102.349639][ T9176] ? avc_has_extended_perms+0x33a/0x1090 [ 102.351487][ T9176] __kmalloc_noprof.cold+0xc/0x61 [ 102.353124][ T9176] ? avc_has_extended_perms+0x47c/0x1090 [ 102.354911][ T9176] drm_syncobj_array_find+0x35/0x3c0 [ 102.356596][ T9176] ? __lock_acquire+0xb97/0x1ce0 [ 102.358169][ T9176] drm_syncobj_query_ioctl+0x27e/0xbe0 [ 102.359889][ T9176] ? kasan_quarantine_put+0x10a/0x240 [ 102.361604][ T9176] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 102.363614][ T9176] ? find_held_lock+0x2b/0x80 [ 102.365107][ T9176] ? drm_dev_exit+0x41/0x60 [ 102.366554][ T9176] drm_ioctl_kernel+0x1f4/0x3e0 [ 102.368095][ T9176] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 102.370003][ T9176] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 102.371710][ T9176] drm_ioctl+0x5c9/0xc30 [ 102.373224][ T9176] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 102.375127][ T9176] ? __pfx_drm_ioctl+0x10/0x10 [ 102.376655][ T9176] ? selinux_file_ioctl+0x180/0x270 [ 102.378394][ T9176] ? selinux_file_ioctl+0xb4/0x270 [ 102.380057][ T9176] ? __pfx_drm_ioctl+0x10/0x10 [ 102.381580][ T9176] __x64_sys_ioctl+0x18b/0x210 [ 102.383142][ T9176] do_syscall_64+0xcd/0x4c0 [ 102.384670][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.386534][ T9176] RIP: 0033:0x7fa397b8ebe9 [ 102.387881][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.393885][ T9176] RSP: 002b:00007fa398940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.396556][ T9176] RAX: ffffffffffffffda RBX: 00007fa397db6090 RCX: 00007fa397b8ebe9 [ 102.399139][ T9176] RDX: 0000200000000100 RSI: 00000000c01864cb RDI: 0000000000000004 [ 102.401605][ T9176] RBP: 00007fa397c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.404099][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.406765][ T9176] R13: 00007fa397db6128 R14: 00007fa397db6090 R15: 00007ffcc8f30fd8 [ 102.409239][ T9176] [ 102.410240][ T9176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.412628][ T9176] CPU: 3 UID: 0 PID: 9176 Comm: syz.0.910 Not tainted syzkaller #0 PREEMPT(full) [ 102.415699][ T9176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.419730][ T9176] Call Trace: [ 102.420800][ T9176] [ 102.421754][ T9176] dump_stack_lvl+0x3d/0x1f0 [ 102.423251][ T9176] vpanic+0x6e8/0x7a0 [ 102.424545][ T9176] ? __pfx_vpanic+0x10/0x10 [ 102.426009][ T9176] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 102.428024][ T9176] panic+0xca/0xd0 [ 102.429306][ T9176] ? __pfx_panic+0x10/0x10 [ 102.430743][ T9176] ? check_panic_on_warn+0x1f/0xb0 [ 102.432359][ T9176] check_panic_on_warn+0xab/0xb0 [ 102.433946][ T9176] __warn+0xf6/0x3c0 [ 102.435196][ T9176] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 102.437122][ T9176] report_bug+0x3c3/0x580 [ 102.438478][ T9176] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 102.440400][ T9176] handle_bug+0x184/0x210 [ 102.441780][ T9176] exc_invalid_op+0x17/0x50 [ 102.443249][ T9176] asm_exc_invalid_op+0x1a/0x20 [ 102.444791][ T9176] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 102.447018][ T9176] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f bd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 6d a9 7e 0e 00 75 0b c6 05 64 a9 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 102.453091][ T9176] RSP: 0018:ffffc90003747780 EFLAGS: 00010246 [ 102.455015][ T9176] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 102.457451][ T9176] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000040cc0 [ 102.459877][ T9176] RBP: 000000000000000c R08: 0000000000000005 R09: 0000000000000009 [ 102.462379][ T9176] R10: 000000000000000c R11: 0000000000000000 R12: 0000000000040cc0 [ 102.464806][ T9176] R13: 1ffff920006e8f05 R14: ffffffff9ae7ba24 R15: 000000000000000c [ 102.467265][ T9176] ? find_held_lock+0x2b/0x80 [ 102.468733][ T9176] ? is_bpf_text_address+0x8a/0x1a0 [ 102.470339][ T9176] ? bpf_ksym_find+0x127/0x1c0 [ 102.471867][ T9176] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.473791][ T9176] ? is_bpf_text_address+0x94/0x1a0 [ 102.475388][ T9176] ? kernel_text_address+0x8d/0x100 [ 102.476984][ T9176] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.478907][ T9176] ? arch_stack_walk+0xa6/0x100 [ 102.480434][ T9176] ? stack_trace_save+0x8e/0xc0 [ 102.481962][ T9176] ? __pfx_stack_trace_save+0x10/0x10 [ 102.483707][ T9176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.485557][ T9176] ? policy_nodemask+0xea/0x4e0 [ 102.487202][ T9176] alloc_pages_mpol+0x1fb/0x550 [ 102.488755][ T9176] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.490449][ T9176] ? drm_syncobj_array_find+0x35/0x3c0 [ 102.492179][ T9176] ___kmalloc_large_node+0xed/0x160 [ 102.493832][ T9176] ? drm_syncobj_array_find+0x35/0x3c0 [ 102.495532][ T9176] __kmalloc_large_node_noprof+0x1c/0x70 [ 102.497326][ T9176] ? avc_has_extended_perms+0x33a/0x1090 [ 102.499119][ T9176] __kmalloc_noprof.cold+0xc/0x61 [ 102.500712][ T9176] ? avc_has_extended_perms+0x47c/0x1090 [ 102.502476][ T9176] drm_syncobj_array_find+0x35/0x3c0 [ 102.504174][ T9176] ? __lock_acquire+0xb97/0x1ce0 [ 102.505737][ T9176] drm_syncobj_query_ioctl+0x27e/0xbe0 [ 102.507445][ T9176] ? kasan_quarantine_put+0x10a/0x240 [ 102.509125][ T9176] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 102.511000][ T9176] ? find_held_lock+0x2b/0x80 [ 102.512487][ T9176] ? drm_dev_exit+0x41/0x60 [ 102.513958][ T9176] drm_ioctl_kernel+0x1f4/0x3e0 [ 102.515501][ T9176] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 102.518150][ T9176] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 102.519990][ T9176] drm_ioctl+0x5c9/0xc30 [ 102.521396][ T9176] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 102.523358][ T9176] ? __pfx_drm_ioctl+0x10/0x10 [ 102.524873][ T9176] ? selinux_file_ioctl+0x180/0x270 [ 102.526506][ T9176] ? selinux_file_ioctl+0xb4/0x270 [ 102.528136][ T9176] ? __pfx_drm_ioctl+0x10/0x10 [ 102.529648][ T9176] __x64_sys_ioctl+0x18b/0x210 [ 102.531168][ T9176] do_syscall_64+0xcd/0x4c0 [ 102.532599][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.534467][ T9176] RIP: 0033:0x7fa397b8ebe9 [ 102.535910][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.541829][ T9176] RSP: 002b:00007fa398940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.544464][ T9176] RAX: ffffffffffffffda RBX: 00007fa397db6090 RCX: 00007fa397b8ebe9 [ 102.546938][ T9176] RDX: 0000200000000100 RSI: 00000000c01864cb RDI: 0000000000000004 [ 102.549389][ T9176] RBP: 00007fa397c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.551849][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.554317][ T9176] R13: 00007fa397db6128 R14: 00007fa397db6090 R15: 00007ffcc8f30fd8 [ 102.556813][ T9176] [ 102.558524][ T9176] Kernel Offset: disabled [ 102.559898][ T9176] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:35:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000155a01 RBX=0000000000000000 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50208 RDI=ffffffff8c162900 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa39891ef98 CR3=0000000029d9c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555590659730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559066ebea 000055559066d000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555590659498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555906694f7 00005555906692a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7665642f01ffff ffffffffffffe108 0003000800061000 201000060071a00e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e0030010000ed003 0010000ec0030210 000eb0037810000b 90030004840004f0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 0400030010000e80 04010800060168e0 000200070008000e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ade5bb2504010010 0000005028080480 0304800402800302 8004200300080010 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a80120028008000 00000000002c0804 b00300080004a803 0023f52c84270060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 014084a180100000 0401000000080606 0168e00008006003 0010005003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4003021000300301 a01000029003006e 616c78760001000a 8012002800800000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002c0804b0 0300080004a80300 23f52c84270060ad e5bb250401001000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000502808048003 0480040280030280 0420030008001003 0fffffffffffff04 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000c7f1f RBX=0000000000000001 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50208 RDI=ffffffff8c162900 RBP=ffffed1003bd3488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801de9a440 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa39891fd58 CR3=00000000336d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc8f314e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc8f314e6 00007ffcc8f314ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397d874a8 00007fa397d874a0 00007fa397d87498 00007fa397d87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3988ed100 00007fa397d87460 00007fa397d87478 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397d874b8 00007fa397d874b0 00007fa397d874a8 00007fa397d874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000d6923 RBX=0000000000000002 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50208 RDI=ffffffff8c162900 RBP=ffffed1003bd3910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801de9c880 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa397b729a0 CR3=0000000032488000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006b636f73762d74 736f68762f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe97c6ecb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe97c6ecb6 00007ffe97c6ecbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1a6c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1a6c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1a6c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1a6c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1a6c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1a6c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1a6d874a8 00007fa1a6d874a0 00007fa1a6d87498 00007fa1a6d87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1a78ed100 00007fa1a6d87460 00007fa1a6d80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa1a6d874b8 00007fa1a6d874b0 00007fa1a6d874a8 00007fa1a6d874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85643d40 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90003747098 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3622266 R15=dffffc0000000000 RIP=ffffffff85643d67 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa3989406c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa39893ff98 CR3=00000000336d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc8f314e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc8f314e6 00007ffcc8f314ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397d874a8 00007fa397d874a0 00007fa397d87498 00007fa397d87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3988ed100 00007fa397d87460 00007fa397d87478 00007fa397d874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa397d874b8 00007fa397d874b0 00007fa397d874a8 00007fa397d874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000