last executing test programs: 1m7.80521217s ago: executing program 1 (id=501): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x14014, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010000000000000002000200", @ANYRES32=0x0, @ANYBLOB="040000000000000100000000002000040000000000"], 0x2c, 0x3) 1m7.701332527s ago: executing program 1 (id=503): waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001140), 0x4, &(0x7f00000011c0)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x208200, &(0x7f0000001080)="a6047ddd0b3bb655a8022566b6aa1756ff4bce80412c68ab9e94f42afa4c7d5504b2ccc20c9bc95786d46a33671af93d5acc2a035f5fc8f5888cf2", 0x3b, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000001280)={0x2, 0x0, @loopback}, &(0x7f00000012c0)=0x10, 0x80400) sendto$inet(r2, &(0x7f0000001300), 0x0, 0x40c05, &(0x7f0000001380)={0x2, 0x4e24, @empty}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x80ffffff, 0x0, 0x1}}, 0xb8}}, 0x4000) 1m7.323721397s ago: executing program 1 (id=506): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xffffffff80802000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) gettid() syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)={0x0, 0x2083, 0x0, 0x0}) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd(0x0) r10 = eventfd(0x0) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r10, 0x40000a, 0x2, r10}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r10, 0x40000a, 0x2, r9}) 1m6.507992178s ago: executing program 1 (id=510): write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 1m6.271561033s ago: executing program 1 (id=511): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=virtio,cache=fscache,cachetag=ov']) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) flock(r3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000180)={0xa000000000000000, 0xeeee8000, 0x400, 0x6, 0x7}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) close(0x3) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m2.843779402s ago: executing program 1 (id=524): waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001140), 0x4, &(0x7f00000011c0)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x208200, &(0x7f0000001080)="a6047ddd0b3bb655a8022566b6aa1756ff4bce80412c68ab9e94f42afa4c7d5504b2ccc20c9bc95786d46a33671af93d5acc2a035f5fc8f5888cf2", 0x3b, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000001280)={0x2, 0x0, @loopback}, &(0x7f00000012c0)=0x10, 0x80400) sendto$inet(r2, &(0x7f0000001300), 0x0, 0x40c05, &(0x7f0000001380)={0x2, 0x4e24, @empty}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x2f}, 0x4000) 50.647024004s ago: executing program 3 (id=618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000000000000f24ba695920e00"/36], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 50.557442814s ago: executing program 3 (id=619): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006"], 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xffffffca, 0x0, 0x0, 0x100, 0x48, '\x00', 0x0, @fallback=0x5, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xad, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x99, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x2, 0x2, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x4, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8979) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e7b3d7463702c706f72743d30783030303030307930a76c303030300900346532322c00"]) listen(r6, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r7, &(0x7f0000000140)=""/243, 0xf3, 0x4100, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 49.622376898s ago: executing program 3 (id=621): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0xb92a}, {0x6, 0xfd}, {0x0, 0x8}, @control={0x7, 0x9fa, 0x7}}], 0x38) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x90) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r7, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xa, &(0x7f0000000d80)=@raw=[@generic={0xff, 0x8, 0x4, 0x5, 0x6}, @jmp={0x5, 0x0, 0x4, 0x0, 0x9, 0x18, 0x4}, @printk={@lu}], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a6558000000fd00002c00003800160034000100090000000000000000041002fc000000ff020000000000000000000000000001fe8000000000000000000000000000aa060015000300000008000400", @ANYRES32], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x1b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000600)='syzkaller\x00', 0x427, 0x45, &(0x7f0000000640)=""/69, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000900)=[{0x0, 0x2, 0x3, 0x7}, {0x4, 0x5, 0x4, 0x8}, {0x1, 0x4, 0x6, 0xb}, {0x5, 0x5, 0xd, 0x7}, {0x3, 0x5, 0x1, 0xa}, {0x3, 0x3, 0x8, 0x5}, {0x2, 0x4, 0x4, 0x6}], 0x10, 0x984, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0xd}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x20004844) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r12, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100480}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r8, 0x10, 0x1, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x73}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfb}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x805) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ptrace$setregs(0xf, r13, 0x91, &(0x7f0000000040)="0063805895b8c96594e63f198f433de5887641caa7943459937f3f3e81a2fa68b6c50cb4564408e6e8fdff57c1a21c4c8af16f958429a70b02779ba08edc1633ef29c7c3e4d176c3d439db995c2da22bd9fc8c5d63cf3e3446bfbd0460bbab1704927de57323922e08a542a8ca48f1926cbe2b77bf5fb0856749697ec7c52a9caed94e786a80e5be285949717ccd0c01c617b89abd8f88f2ad6df0160d903cf593bcdede") 49.537300556s ago: executing program 3 (id=623): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_1\x00'}]}, 0x44}}, 0x0) 49.265745916s ago: executing program 3 (id=624): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000, 0x108503) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r4, 0xffffd000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000004c0)={{0x4, 0x1, 0xd, 0x0, '\x00', 0x7}, 0x4, 0x100, 0x9, 0xffffffffffffffff, 0x2, 0x5, 'syz0\x00', &(0x7f0000000000)=['GPL\x00', '/dev/bus/usb/00#/00#\x00'], 0x19}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 47.756271507s ago: executing program 32 (id=524): waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001140), 0x4, &(0x7f00000011c0)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x208200, &(0x7f0000001080)="a6047ddd0b3bb655a8022566b6aa1756ff4bce80412c68ab9e94f42afa4c7d5504b2ccc20c9bc95786d46a33671af93d5acc2a035f5fc8f5888cf2", 0x3b, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000001280)={0x2, 0x0, @loopback}, &(0x7f00000012c0)=0x10, 0x80400) sendto$inet(r2, &(0x7f0000001300), 0x0, 0x40c05, &(0x7f0000001380)={0x2, 0x4e24, @empty}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x2f}, 0x4000) 47.501260203s ago: executing program 3 (id=635): mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x1010044, &(0x7f0000000000)={[{@nofavordynmods}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) (async) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}], 0x1, 0x0, 0x0) mmap(&(0x7f0000374000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x88eb3000) (async) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) (async) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1, 0x2, 0x6, 0x80000000}) 47.334127923s ago: executing program 33 (id=635): mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x1010044, &(0x7f0000000000)={[{@nofavordynmods}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) (async) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}], 0x1, 0x0, 0x0) mmap(&(0x7f0000374000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x88eb3000) (async) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) (async) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1, 0x2, 0x6, 0x80000000}) 3.022717152s ago: executing program 4 (id=870): r0 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100007f00000000000032000000001400020076657468315f746f5f627269646765000900030073797a3100000000"], 0x40}}, 0xc800) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="b9b80800000f326465660f38351d00000100450f01cab9350a0000b8776f0000ba000000000f30650f787d0066ba4000b000ee670f01c8c4c1785387181f0000b8010000000f01d92e430f09"}], 0x1, 0x43, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r7) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00003d1000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000400)="c7442400ef000000c7442402ceaf0000ff1c24470f20c4b9720800000f32f342d922c462fd33d2400f00c3c421d6c29b00680000b3f30fc7b60001c0fe8fe978e14656c3", 0x44}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x100000000], 0x3000, 0x280384}) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r11, &(0x7f0000000100)=[{&(0x7f0000000540)="20de20", 0x3}], 0x1) (async) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) modify_ldt$write(0x1, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, 0x10) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) 2.925389527s ago: executing program 5 (id=872): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="bf", 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x63) r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) munlockall() r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x100000}], 0x2) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=@raw=[@cb_func], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) 2.574602715s ago: executing program 5 (id=874): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a000000010000004400000020"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x100000e, r3}, 0x38) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x5}, 0x2}) 2.327572495s ago: executing program 0 (id=877): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x131) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r1, 0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000006d00)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xed, 0x3}}]}, 0x38}}, 0x8840) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000000)={0x8, 0x101, 0x3de6, 0x4, 0x6, 0xa, 0x26, "8ae43da29112f10ec044f03f543e92ae77e5ac38", "92ef0b45acd1352a8431db82d3c65de242dd8fc5"}) 2.205917403s ago: executing program 0 (id=878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0xd}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.086861666s ago: executing program 0 (id=879): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x19}, 0x10000}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000980), 0x1, 0x8000) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80084121, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) shutdown(r1, 0x1) 1.929652087s ago: executing program 4 (id=881): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 1.929026739s ago: executing program 0 (id=882): sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x696260df2df97e76, 0xffff}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) socket$inet(0x2, 0x3, 0x6) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4044040) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04817a0c402f"], 0x7) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)='+.', 0x2}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016", 0x5, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x529600, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x5, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000006111c000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES16=r5, @ANYBLOB="050000000000fedbdf25060000000800030060088affa6e209868a366fb0123874b0b38a248fb1bf92fdcf6867df43919dcca92ecaeaeea807f89b4dc76590826967c8ece572b6eec5b701ee1efca48b78b91da868bd2d458b81f013f6aba022c0e2ca26191bfc308600c87a9ae8defa177b32bc81e31eab7e539e2fec3f8b8bcf35714fc45871a8cf790e02444b429d6453e9bf69e3bf6abc5a7f3ce3af2f84fdc9d6d0840700"/177, @ANYRES32=r7, @ANYBLOB="080005000200000025004e0001040000ce5becead27b22873090f844973483cd800031eba5dc3cefa7192d96abd7e565519d70f37a06db618b3b8dde17ee9936e8e602196fb6df4a5b5fd752af834544d93a7595c262f992c8951425c4322933b09c4940921a059a2921f6fa2b781418e2810ece503c4764ea6b6a45"], 0x2c}}, 0x20000001) getsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4) r8 = landlock_create_ruleset(&(0x7f0000000000)={0x1230, 0x2, 0x1}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000240)={0x4949, r4}, 0x0) 1.845969619s ago: executing program 4 (id=883): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r2, 0x2f, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5bc0}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x800) 1.845355443s ago: executing program 2 (id=884): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_mempolicy(0x4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24040000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000500)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) close_range(r2, r1, 0x2) r3 = socket(0x80000000000000a, 0x80000, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.554264458s ago: executing program 5 (id=885): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) rt_sigprocmask(0x1, &(0x7f0000000480)={[0x5]}, &(0x7f00000004c0), 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00'}, 0x18) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000009600000008007c02", @ANYRES32=r4, @ANYBLOB="28000e0080000000ffffffffffff080211000001080211000000000000000000000000006400010008000c006400000008000d00000000000a0034000202020202020000080035000000000008007e0001000000"], 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_FRAME={0x3d, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac, {0x5, 0x7d8}}, @tdls_setup_resp={0xc, 0x1, 0x58, 0x6, @void, @val={0x1, 0x6, [{0x18}, {0x18}, {0x6c, 0x1}, {0x60, 0x1}, {0x3, 0x1}, {0x30, 0x1}]}, @void, @val={0x65, 0x12, {@random="e9dc411ff771", @device_a, @broadcast}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5f7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1b5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbab}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x54d}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000004}, 0x24) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x2, @pix_mp={0x800, 0x0, 0x20363159, 0x2, 0xa, [{0x2, 0x4}, {0x655, 0x1}, {0x100, 0x2d}, {}, {0x6, 0x82}, {0x2, 0xf19}, {0x8, 0x4}, {0x6, 0x6}], 0x7, 0x3, 0x4}}) 1.550510657s ago: executing program 2 (id=886): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}, 0x0, 0x0, 0x2c, 0x0, "2b20a9a47cddc63b223be606dffa19f22a369ae751de81ca4d11e50450d766feb63b382d54ba4bb57a219cadc9135d8bde2069f3e2ca64196953e92a07b3937730a33b6deca1eba6c2fbff48eb964283"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x61ce, 0x200}, &(0x7f0000000100), &(0x7f0000000040)) 1.548823326s ago: executing program 4 (id=887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0xd}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.351553657s ago: executing program 2 (id=888): sendmsg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x8, 0x8001, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, ')$)+\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30}], 0x1, 0x40800) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000b80)=ANY=[], 0x774}, 0x1, 0x0, 0x0, 0x40000}, 0x40881) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/16, 0x10}], 0x1}, 0x40002000) 1.10988185s ago: executing program 2 (id=889): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000004000000000000000000000002000000000000000100002000"/40], 0x28) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) 1.053703417s ago: executing program 4 (id=890): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x92\xa5\xae\bf\xa7\xd3\x9a\x06+\xfd\xdf@8\xa99\xe40\x1b^\xb3', 0x4) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x11}, 0x2, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 955.798385ms ago: executing program 0 (id=891): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42000) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick=0xfffffffd, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}], 0x1c) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async, rerun: 64) sendmsg$netlink(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001e00995e00000000000000000c00000000000000000001"], 0x1c}], 0x1}, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r2], 0x7c}}, 0x0) 922.802038ms ago: executing program 4 (id=892): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x4, 0x7, 0xbcbd}, {0x9, 0x7, 0x4, 0x4ce}]}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x7ffffffffffffffc, 0x82000004}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_xen(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0x4, 0x0, 0xfd3, 0x0, 0x0, 0x120, 0x4000, 0x8000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2}, 0x50) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x101800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x0, {0xff}}, 0x14}}, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffa1, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}, 0x1, 0xba01}, 0x0) 834.537109ms ago: executing program 2 (id=893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000500)='veth0_vlan\x00', 0x1c) sendmmsg$inet(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x4000) ioctl$SG_IO(r5, 0x2285, 0x0) r7 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x7, @tick, {}, {0x0, 0x6}, @raw32={[0x0, 0x0, 0xfff]}}, {0x0, 0x0, 0x8, 0x0, @time={0xffffffff}, {0x3}, {0x0, 0x4}, @time=@tick=0x5}, {0xff, 0x0, 0x0, 0x0, @tick=0x6, {0x0, 0x3}, {0x0, 0x6}, @control={0x0, 0x0, 0x7fc}}, {0x0, 0x0, 0x3, 0x7, @time={0x200, 0x6}, {}, {0x0, 0x4}, @addr={0x1, 0x99}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}, 0x1}}, {0x0, 0x0, 0x0, 0x5, @time, {0x5}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x9, 0x2, 0x0, @time={0xff, 0xffff}, {0x0, 0xff}, {}, @quote={{0x0, 0x3}, 0x2, &(0x7f0000000480)={0x8, 0x0, 0x10, 0x89, @tick, {0xff, 0x2}, {0x4, 0x7f}, @control={0x1, 0xdda1, 0x10001}}}}], 0xc4) read$snapshot(r7, 0x0, 0xffffffbf) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f8b", @ANYRES16=r8, @ANYBLOB="080029bd7000fedbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000700000006001100080000000800150006000000"], 0x50}, 0x1, 0x0, 0x0, 0x4044404}, 0x4040000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@arm64={0x5, 0x8, 0x1, '\x00', 0x9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000005e0b0000000000000100000000000000930800000000000006000000000000007f090000000200009895000000000000030b000000000000090000000000000042080000000000000500000000000000b300004000"/104]) r9 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x13) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) tkill(r9, 0x10e2) 645.837943ms ago: executing program 5 (id=894): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x0) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x30}, 0x18) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x280000, 0x0) (async, rerun: 64) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.log\x00', 0x111000, 0xa0) (rerun: 64) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x10140, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0xe6, 0x4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x17, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x2, 0x7, 0x7, 0xffffffffffffffff, 0x9}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3c}, @tail_call]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2a, &(0x7f00000001c0)=""/42, 0x41100, 0x41, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x7, 0x3a62, 0x10}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[r4, r5, 0x1, r6, r7], &(0x7f0000000500)=[{0x3, 0x2, 0x10, 0xc}, {0x2, 0x1, 0xd, 0x8}, {0x5, 0x1, 0x1, 0xc}, {0x3, 0x4, 0x8, 0x9}, {0x5, 0x1, 0x2, 0xc}, {0x3, 0x2, 0x8, 0x7}], 0x10, 0x7f, @void, @value}, 0x94) (async, rerun: 32) r8 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r4) (rerun: 32) sendmsg$IPVS_CMD_DEL_DEST(r9, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r10, 0x6, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x24) fsopen(&(0x7f00000007c0)='nfs4\x00', 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000800)={'batadv_slave_1\x00', 0xe9}) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x130, r12, 0xe01, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000b00)={0x1, 0x0, [{0xdddd1000, 0x80, &(0x7f0000000a80)=""/128}]}) read$FUSE(r4, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002b80)={0x50, 0xc2d471ab9d0a0b53, r13, {0x7, 0x2b, 0x18efc8fa, 0x800400, 0xff, 0x101, 0x4, 0x2, 0x0, 0x0, 0x10, 0x800}}, 0x50) (async) r15 = fcntl$dupfd(r11, 0x0, r11) socket$nl_generic(0x10, 0x3, 0x10) (async) statx(r3, &(0x7f0000002c00)='./file0\x00', 0x0, 0x4, &(0x7f0000002c40)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000002d40)={0x1fd, 0x6, 0xd000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) stat(&(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r15, 0xc018937b, &(0x7f0000002e40)={{0x1, 0x1, 0x18, r7, {r14, r16}}, './file0\x00'}) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r15, &(0x7f0000003140)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003100)={&(0x7f0000002ec0)={0x20c, r12, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd3, 0x4, "2fc862b8b3de9dee38cbaceab70e2b1fa831d8980b2a70d844df26e624f8412931f4b6394e84b841584ed5a5da9ed6c0c8ef9311965df1e69ec7ab7d7691fd7b14c663d0564a959081424f08fa521531218b032f82ea3eb01ddd1bc5012c85b84faf8515989f12326d0fee1428442d83922bd384930b659a06e01eb3ee0e1e5d18fe2396a633e9ba25e25d4f970595fc93e3a128e68e41d465b3f374683c095d1f5cca1c74cd57285d4c72aa895e627574e5541e30b5817ef8e0af3d94a29381e5f1af1415d3f859dcd2c042ebee22"}]}, @ETHTOOL_A_FEATURES_WANTED={0x120, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x70, 0x5, "4a3fbd88f2f824f6a74742de2563934ef6f7c32c2b9860ed550d0c8f94ecf3f890673f743af2e32faef0aac6760f705ef8395c4b690f7da4bcbc34334108abc860ddce541eed7b259a1dbc30771c295c744d5cade5644b33df42a3586e64d64d7fc6dc780ce00eefc5a5625b"}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "e8edb9bc6e4706853c020100a36bfe67d27f76f7b473efc8777d34938bd673a385bbbf04effc7a72e4f1a546acbd8ca004546ee70b424dd0086c5847e55adfdc90cd9c7cfe32e79c17a5a13dd4a74bac48d80a4a30f1e8124ee135b05bb8119e9292abb78a40869bb7273cd8eedcae206fab0e1ac1d7983e0a2c25411568b9e98a6e392560b66fe7aa26f38c04fa1bdc0b456425f06f0c6a6a1b75cd7724d80a1cd1f73311"}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40014}, 0x4) (async, rerun: 64) write$proc_mixer(r0, &(0x7f0000003180)=[{'OGAIN', @val={' \'', 'Master Playback'}}, {'OGAIN', @val={' \'', 'CD Capture Switch'}}, {'VIDEO', @void}], 0x62) lstat(&(0x7f0000003200)='./file0\x00', &(0x7f0000003240)) 510.685565ms ago: executing program 5 (id=895): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000840)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98cec1", 0x0, 0x0, 0x0, @loopback, @empty, [@hopopts={0x11, 0x0, '\x00', [@enc_lim]}, @hopopts={0x6a}]}}}}}}}, 0x0) 322.61182ms ago: executing program 2 (id=896): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x401, 0xc4001) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00b500000000000000000002004000fc80c8090000000005001b"], 0x24}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040800) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000dc0)=0x6, 0x4) socket$nl_route(0x10, 0x3, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000000)=0x3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0xd0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x88, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6a0}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2e5}]}]}, 0xd0}}, 0x4048041) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16=r8, @ANYRESOCT=r5, @ANYRESOCT=r4, @ANYRES64=r8, @ANYBLOB="7e209852d9e56359af324373da95cdf153c112383f21fbf438cf03bdd6666989925ac135cbb36c14bceb0f8cfa6e89279d1194510f796b3819bfad91bdd6c75b8fcc825b678f8846fb2f409ab1a04510ca58039fe03ae491178eb8b5515088f94bc5958a9eb933bbc8b50ee84e5fede2b466af26350d2b0a2bff48b8d2fc4c3df3e169e81acae9e038200e9cf086502edfc44445b1c1860a771e1ce398a59621499af1357bf7eb0a9d78057fb7062f3ea8ac6b7118f351c8e821954a0d41e41fdb709b3102db0de831346b8e23e6096c3d8840c44d"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) 265.062463ms ago: executing program 5 (id=897): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x80, 0x2}, 0x18, 0x3) creat(&(0x7f0000000100)='./file0\x00', 0x140) r3 = syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000180)={0x2, {0xfffffeff, 0x3, 0x3ff000, 0x2}, {0x8, 0x3, 0x81, 0xa}, {0x6, 0x9}}) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) pwrite64(r1, &(0x7f0000000300)="c580748f505853d6ddcae67b8069a5f6e7880afc9b4666be95ec4cbd1a1f781711a0", 0x22, 0xa) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000003c0)=0x8000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000600)=0xe8) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000004c0)=@nullb, r5, &(0x7f0000000640)={0x0, 0x281b, 0x1, 0x2}) bpf$ENABLE_STATS(0x20, &(0x7f0000000680), 0x4) r6 = accept4$inet6(r0, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000700)=0x1c, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x110, r6, 0xb00c8000) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000001, 0x110, 0xffffffffffffffff, 0xa1ade000) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000740)) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) ppoll(&(0x7f00000007c0)=[{r0, 0x1040}, {r2}, {r7, 0x600a}, {0xffffffffffffffff, 0x1}], 0x4, &(0x7f0000000800)={0x77359400}, &(0x7f0000000840)={[0xc2]}, 0x8) creat(&(0x7f0000000880)='./file0\x00', 0x10) sync() r8 = open$dir(&(0x7f00000008c0)='./file0\x00', 0x20080, 0x10) open_tree(r8, &(0x7f0000000900)='\x00', 0x88000) syz_clone(0x10001080, &(0x7f0000000940)="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", 0x1000, &(0x7f0000001940), &(0x7f0000001980), &(0x7f00000019c0)="b2df22361e899f00f86cc5e75cc8c3cf4382845e420f1f17b6ee578632f9b0a03826ade9e2f6473cad0650958433eea37bd56e03c5062fe603bca9e1b4ad48099820b9a7dbbd07f1ac351a5fe840b15b374eab0252590ecf98ce6687baac79a9b50aa9d5d9529c73c55234edaf4c39e98a3f598b0fa2dfa4e8899dfc56bc651318b9ce076c") sync() 0s ago: executing program 0 (id=898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0xd}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.0.269'. [ 155.464827][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'. [ 155.650146][ T6013] usbhid 6-1:1.0: can't add hid device: -71 [ 155.657632][ T6013] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 155.709446][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 155.709463][ T40] audit: type=1400 audit(1748609002.227:389): avc: denied { setopt } for pid=6952 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.711698][ T6013] usb 6-1: USB disconnect, device number 3 [ 155.721389][ T40] audit: type=1400 audit(1748609002.227:390): avc: denied { append } for pid=6952 comm="syz.3.271" name="pfkey" dev="proc" ino=4026533277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 155.760511][ T40] audit: type=1400 audit(1748609002.227:391): avc: denied { write } for pid=6952 comm="syz.3.271" name="pfkey" dev="proc" ino=4026533277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 155.798873][ T40] audit: type=1400 audit(1748609002.337:392): avc: denied { read } for pid=6953 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.977712][ T6962] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 156.242841][ T6970] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.276'. [ 156.289115][ T6970] openvswitch: netlink: Message has 5 unknown bytes. [ 156.310453][ T40] audit: type=1400 audit(1748609002.837:393): avc: denied { getopt } for pid=6969 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.391385][ T40] audit: type=1400 audit(1748609002.927:394): avc: denied { create } for pid=6976 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.405543][ T40] audit: type=1400 audit(1748609002.927:395): avc: denied { ioctl } for pid=6976 comm="syz.1.277" path="socket:[13773]" dev="sockfs" ino=13773 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.542731][ T40] audit: type=1400 audit(1748609003.087:396): avc: denied { read } for pid=6980 comm="syz.0.279" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 156.578205][ T6981] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 156.578958][ T40] audit: type=1400 audit(1748609003.117:397): avc: denied { mounton } for pid=6980 comm="syz.0.279" path="/60/bus" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 156.658275][ T40] audit: type=1400 audit(1748609003.197:398): avc: denied { connect } for pid=6983 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.662323][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.280'. [ 156.833729][ T6988] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.937938][ T6996] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 157.051550][ T7003] sit0: entered promiscuous mode [ 157.084562][ T7003] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 157.089919][ T7003] netlink: 1 bytes leftover after parsing attributes in process `syz.3.286'. [ 157.174432][ T6040] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.346754][ T6040] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.353869][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.360697][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 157.422165][ T6040] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.428031][ T6040] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.492224][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.498135][ T6040] usb 5-1: config 0 descriptor?? [ 157.568498][ T7025] bond1: entered promiscuous mode [ 157.571439][ T7025] bond1: entered allmulticast mode [ 157.580826][ T7025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.696915][ T7030] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 157.965494][ T6040] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 158.006930][ T6040] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 158.053801][ T6040] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 159.052584][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.055894][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.106292][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.110232][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.113900][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.132698][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.136684][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.140782][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.158537][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.161694][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.164350][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.166927][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.169588][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.181486][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.196251][ T53] hid-generic 0009:0009:0008.0003: unknown main item tag 0x0 [ 159.232273][ T53] hid-generic 0009:0009:0008.0003: hidraw2: HID v0.05 Device [syz0] on syz0 [ 159.541058][ T7061] ======================================================= [ 159.541058][ T7061] WARNING: The mand mount option has been deprecated and [ 159.541058][ T7061] and is ignored by this kernel. Remove the mand [ 159.541058][ T7061] option from the mount to silence this warning. [ 159.541058][ T7061] ======================================================= [ 159.930838][ T7079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=7079 comm=syz.3.304 [ 159.951011][ T7079] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 159.960590][ T6012] usb 5-1: USB disconnect, device number 2 [ 160.778210][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.804705][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 160.804720][ T40] audit: type=1400 audit(1748609007.337:417): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 160.954771][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.959595][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.962208][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.976252][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976362][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976433][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976503][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976566][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976630][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976696][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976759][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976822][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976883][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.976944][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977006][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977069][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977131][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977198][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977260][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977333][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977398][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977460][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977522][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977580][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977638][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977698][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977757][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977816][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977874][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977932][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.977990][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.978083][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.978148][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 160.978209][ T5959] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 161.324775][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.364536][ T7132] netlink: 236 bytes leftover after parsing attributes in process `syz.2.319'. [ 161.435150][ T7133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.319'. [ 161.840993][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.851039][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.323'. [ 161.881102][ C2] vkms_vblank_simulate: vblank timer overrun [ 162.114127][ C2] vkms_vblank_simulate: vblank timer overrun [ 162.228597][ T40] audit: type=1400 audit(1748609008.747:418): avc: denied { read } for pid=7160 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 162.297079][ T40] audit: type=1400 audit(1748609008.807:419): avc: denied { mount } for pid=7164 comm="syz.1.329" name="/" dev="autofs" ino=16400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 162.546185][ C2] vkms_vblank_simulate: vblank timer overrun [ 162.794967][ T7170] mmap: syz.2.332 (7170): VmData 25972736 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 163.040507][ T404] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.177640][ T40] audit: type=1400 audit(1748609009.707:420): avc: denied { append } for pid=7175 comm="syz.3.333" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.230364][ T40] audit: type=1400 audit(1748609009.747:421): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 163.334951][ T404] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 163.341153][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.352362][ T404] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 163.358600][ T404] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 163.373923][ T404] usb 5-1: Manufacturer: syz [ 163.380312][ T404] usb 5-1: config 0 descriptor?? [ 163.528577][ T404] rc_core: IR keymap rc-hauppauge not found [ 163.531866][ T404] Registered IR keymap rc-empty [ 163.540189][ T404] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 163.548731][ T404] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 163.574389][ T40] audit: type=1400 audit(1748609010.097:422): avc: denied { ioctl } for pid=5330 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3024 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 163.626293][ T40] audit: type=1400 audit(1748609010.157:423): avc: denied { write } for pid=7169 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 163.641413][ T40] audit: type=1400 audit(1748609010.157:424): avc: denied { setopt } for pid=7169 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 163.771392][ C2] vkms_vblank_simulate: vblank timer overrun [ 163.882652][ T404] usb 5-1: USB disconnect, device number 3 [ 164.055572][ T7187] A link change request failed with some changes committed already. Interface 6t may have been left with an inconsistent configuration, please check. [ 164.451748][ T7199] netlink: 'syz.2.336': attribute type 11 has an invalid length. [ 164.695951][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 164.699821][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'. [ 165.090278][ C2] vkms_vblank_simulate: vblank timer overrun [ 165.171171][ T7225] vlan2: entered allmulticast mode [ 165.178431][ T7225] bridge0: entered allmulticast mode [ 165.281523][ T7227] QAT: failed to copy from user cfg_data. [ 165.312440][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 165.313520][ C2] vkms_vblank_simulate: vblank timer overrun [ 165.390594][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.350'. [ 165.396600][ T7231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.463387][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 165.511906][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 165.554374][ T29] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 165.559096][ T29] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 165.586388][ T29] usb 5-1: Product: syz [ 165.588349][ T29] usb 5-1: Manufacturer: syz [ 165.591313][ T29] usb 5-1: SerialNumber: syz [ 165.601231][ T29] usb 5-1: config 0 descriptor?? [ 165.606538][ T7222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.645286][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 165.648761][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 165.762143][ C2] vkms_vblank_simulate: vblank timer overrun [ 165.778297][ T40] audit: type=1326 audit(1748609012.317:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0211d8e969 code=0x7ffc0000 [ 165.804216][ T40] audit: type=1326 audit(1748609012.317:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0211d8e969 code=0x7ffc0000 [ 165.817986][ T40] audit: type=1326 audit(1748609012.317:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0211d8e969 code=0x7ffc0000 [ 165.830731][ T40] audit: type=1326 audit(1748609012.317:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0211d907fc code=0x7ffc0000 [ 165.843684][ T40] audit: type=1326 audit(1748609012.317:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0211d90734 code=0x7ffc0000 [ 165.860820][ T40] audit: type=1326 audit(1748609012.317:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0211d90734 code=0x7ffc0000 [ 165.883494][ T40] audit: type=1326 audit(1748609012.317:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0211d8e969 code=0x7ffc0000 [ 165.901115][ T40] audit: type=1326 audit(1748609012.317:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0211d8e969 code=0x7ffc0000 [ 165.917832][ T40] audit: type=1326 audit(1748609012.347:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0211d8e969 code=0x7ffc0000 [ 165.934993][ T40] audit: type=1326 audit(1748609012.347:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0211d8e969 code=0x7ffc0000 [ 165.952574][ T40] audit: type=1326 audit(1748609012.347:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.3.355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0211d8e969 code=0x7ffc0000 [ 166.763199][ T838] raw-gadget.0 gadget.0: failed to queue suspend event [ 166.764515][ T7252] raw-gadget.0 gadget.0: failed to queue suspend event [ 166.769778][ T7252] raw-gadget.0 gadget.0: failed to queue disconnect event [ 166.802773][ T5994] usb 5-1: USB disconnect, device number 4 [ 166.988734][ T7262] syz.1.359: attempt to access beyond end of device [ 166.988734][ T7262] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 167.011292][ T7262] vxfs: unable to read disk superblock at 1 [ 167.020572][ T7262] syz.1.359: attempt to access beyond end of device [ 167.020572][ T7262] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 167.047766][ T7262] vxfs: unable to read disk superblock at 8 [ 167.050172][ C2] vkms_vblank_simulate: vblank timer overrun [ 167.058298][ T7262] vxfs: can't find superblock. [ 167.138999][ T7264] QAT: failed to copy from user cfg_data. [ 167.148804][ T7264] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.361'. [ 167.256461][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 167.293237][ T7268] vti0: entered promiscuous mode [ 167.378536][ T7273] afs: Unknown parameter 'subj_role' [ 167.458312][ T7275] netlink: 'syz.3.366': attribute type 10 has an invalid length. [ 167.476068][ T7275] sock: sock_timestamping_bind_phc: sock not bind to device [ 167.530016][ C2] vkms_vblank_simulate: vblank timer overrun [ 167.747165][ T7281] trusted_key: syz.3.368 sent an empty control message without MSG_MORE. [ 167.799545][ T7268] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 167.827292][ T7278] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 167.895500][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 167.903946][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 168.279775][ T7292] team0: No ports can be present during mode change [ 168.420599][ T7296] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.429732][ C2] vkms_vblank_simulate: vblank timer overrun [ 168.465548][ C2] vkms_vblank_simulate: vblank timer overrun [ 168.770379][ T7314] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 168.813715][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 168.982338][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 168.988164][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.994032][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.000105][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 169.019369][ T29] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 169.019391][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.022308][ T5992] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 169.028128][ T29] usb 6-1: config 0 descriptor?? [ 169.083827][ T7318] mkiss: ax0: crc mode is auto. [ 169.152663][ T5992] usb 5-1: device descriptor read/64, error -71 [ 169.402508][ T5992] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 169.553324][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 169.556529][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 169.559373][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 169.580418][ T5992] usb 5-1: device descriptor read/64, error -71 [ 169.585643][ T7334] program syz.3.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.587993][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 169.593334][ T29] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 169.634379][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 169.728442][ T5992] usb usb5-port1: attempt power cycle [ 169.756580][ T29] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 169.758190][ C2] vkms_vblank_simulate: vblank timer overrun [ 169.778670][ T29] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 169.793582][ C2] vkms_vblank_simulate: vblank timer overrun [ 169.811604][ T7344] random: crng reseeded on system resumption [ 169.824438][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 170.106120][ C2] vkms_vblank_simulate: vblank timer overrun [ 170.132388][ T5992] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 170.162915][ T5992] usb 5-1: device descriptor read/8, error -71 [ 170.275539][ T7334] hsr_slave_1 (unregistering): left promiscuous mode [ 170.342177][ C2] vkms_vblank_simulate: vblank timer overrun [ 170.412499][ T6014] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 170.412653][ T5994] usb 6-1: USB disconnect, device number 4 [ 170.430030][ C2] vkms_vblank_simulate: vblank timer overrun [ 170.460976][ T6014] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 170.479004][ T5992] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 170.488052][ T6014] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 170.506081][ T6014] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 170.551557][ T5992] usb 5-1: device descriptor read/8, error -71 [ 170.676153][ T5992] usb usb5-port1: unable to enumerate USB device [ 170.916486][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.392'. [ 171.037701][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 171.037719][ T40] audit: type=1400 audit(1748609017.577:464): avc: denied { associate } for pid=7366 comm="syz.3.393" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 171.071466][ T40] audit: type=1400 audit(1748609017.607:465): avc: denied { lock } for pid=7366 comm="syz.3.393" path="/110/file0/cpuacct.usage_sys" dev="9p" ino=35913961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.096398][ C2] vkms_vblank_simulate: vblank timer overrun [ 171.138259][ T53] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 171.151422][ T7372] tipc: Started in network mode [ 171.153938][ T7372] tipc: Node identity 0ecdb8f59cc8, cluster identity 4711 [ 171.157220][ T7372] tipc: Enabled bearer , priority 0 [ 171.191310][ T7372] syzkaller0: entered promiscuous mode [ 171.193862][ T7372] syzkaller0: entered allmulticast mode [ 171.215929][ T7372] tipc: Resetting bearer [ 171.255652][ T7366] tipc: Resetting bearer [ 171.268470][ T7366] tipc: Disabling bearer [ 171.304928][ T53] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.327877][ T53] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 171.341764][ T53] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.348127][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 171.353588][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 171.360552][ T53] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.367449][ T53] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.372435][ T53] usb 7-1: Product: syz [ 171.374685][ T53] usb 7-1: Manufacturer: syz [ 171.391579][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 171.395662][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 171.398038][ C2] vkms_vblank_simulate: vblank timer overrun [ 171.404026][ T53] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 171.407006][ T53] cdc_wdm 7-1:1.0: Unknown control protocol [ 171.544699][ T40] audit: type=1400 audit(1748609018.087:466): avc: denied { create } for pid=7385 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 171.609032][ T40] audit: type=1400 audit(1748609018.147:467): avc: denied { read write } for pid=7362 comm="syz.2.391" name="cdc-wdm0" dev="devtmpfs" ino=3047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 171.652860][ T40] audit: type=1400 audit(1748609018.177:468): avc: denied { execute } for pid=7387 comm="syz.1.401" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 171.674939][ T40] audit: type=1400 audit(1748609018.187:469): avc: denied { open } for pid=7362 comm="syz.2.391" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 171.743162][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 171.750892][ T7390] team_slave_0: entered allmulticast mode [ 171.839146][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 171.839726][ T5992] usb 7-1: USB disconnect, device number 6 [ 171.845091][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 171.852673][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 171.858824][ C2] vkms_vblank_simulate: vblank timer overrun [ 171.955568][ T7386] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 171.963821][ T7386] netlink: 'syz.3.399': attribute type 2 has an invalid length. [ 171.969693][ T7386] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 171.978976][ T7386] netlink: 'syz.3.399': attribute type 2 has an invalid length. [ 171.988401][ T40] audit: type=1400 audit(1748609018.527:470): avc: denied { create } for pid=7385 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 172.005966][ T40] audit: type=1400 audit(1748609018.547:471): avc: denied { sys_admin } for pid=7385 comm="syz.3.399" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 172.028847][ T7395] xt_hashlimit: max too large, truncated to 1048576 [ 172.039719][ T7395] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.085146][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 172.101625][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 172.112257][ T7397] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 172.132009][ T7397] PKCS7: Only support pkcs7_signedData type [ 172.140423][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 172.281387][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 172.306572][ T7406] overlay: ./file0 is not a directory [ 172.322986][ T7406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.408'. [ 172.460044][ T40] audit: type=1400 audit(1748609018.997:472): avc: denied { mount } for pid=7415 comm="syz.1.411" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 172.500076][ T40] audit: type=1400 audit(1748609018.997:473): avc: denied { remount } for pid=7415 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.605378][ T7420] netlink: 52 bytes leftover after parsing attributes in process `syz.1.412'. [ 172.611134][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 172.622177][ T7420] tipc: MTU too low for tipc bearer [ 172.811164][ T7427] ALSA: mixer_oss: invalid OSS volume '' [ 172.815802][ T7427] ALSA: mixer_oss: invalid OSS volume '' [ 172.819763][ T7427] ALSA: mixer_oss: invalid OSS volume '' [ 172.826423][ T7427] ALSA: mixer_oss: invalid OSS volume '' [ 172.848153][ T7427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7427 comm=syz.2.415 [ 172.857052][ T7427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7427 comm=syz.2.415 [ 172.873086][ T7427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7427 comm=syz.2.415 [ 172.881086][ T7427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7427 comm=syz.2.415 [ 172.897442][ T7427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7427 comm=syz.2.415 [ 172.899626][ T7430] netlink: 6 bytes leftover after parsing attributes in process `syz.2.415'. [ 172.912896][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'. [ 173.099293][ T7434] lo: entered promiscuous mode [ 173.628414][ T7446] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 173.707590][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 173.757966][ T7447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.771985][ T7447] bond2: (slave bond3): making interface the new active one [ 173.791428][ C2] vkms_vblank_simulate: vblank timer overrun [ 173.798843][ T7447] bond2: (slave bond3): Enslaving as an active interface with an up link [ 173.852208][ T7458] bond0: (slave geneve0): Error: Device can not be enslaved while up [ 173.881260][ T7463] overlayfs: failed to get inode (-116) [ 173.887595][ T7463] overlayfs: failed to get inode (-116) [ 173.898056][ C2] vkms_vblank_simulate: vblank timer overrun [ 173.933822][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.424'. [ 174.384039][ T7484] netlink: 'syz.1.429': attribute type 8 has an invalid length. [ 174.437322][ T7465] xt_hashlimit: size too large, truncated to 1048576 [ 174.546246][ C2] vkms_vblank_simulate: vblank timer overrun [ 174.552185][ T5994] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.713008][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 174.718335][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.725341][ T5994] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.732646][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.742594][ T5994] usb 5-1: config 0 descriptor?? [ 174.878562][ C2] vkms_vblank_simulate: vblank timer overrun [ 174.913944][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.966648][ T5994] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.042517][ T7491] capability: warning: `syz.3.432' uses deprecated v2 capabilities in a way that may be insecure [ 175.199849][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 175.229423][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 175.309827][ T7496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.322465][ T7496] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 175.330143][ T7496] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 175.657996][ C2] vkms_vblank_simulate: vblank timer overrun [ 175.790228][ C2] vkms_vblank_simulate: vblank timer overrun [ 175.962841][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.007839][ T840] usb 5-1: USB disconnect, device number 9 [ 176.193225][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 176.193242][ T40] audit: type=1400 audit(1748609022.737:482): avc: denied { name_bind } for pid=7533 comm="syz.2.443" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 176.473378][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.514000][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.544885][ T6323] udevd[6323]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 177.017927][ C2] vkms_vblank_simulate: vblank timer overrun [ 177.373989][ C2] vkms_vblank_simulate: vblank timer overrun [ 177.446036][ C2] vkms_vblank_simulate: vblank timer overrun [ 177.450828][ T7555] usb usb8: usbfs: process 7555 (syz.3.448) did not claim interface 0 before use [ 177.456037][ T40] audit: type=1400 audit(1748609023.997:483): avc: denied { write } for pid=7554 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.562254][ T40] audit: type=1400 audit(1748609024.097:484): avc: denied { mounton } for pid=7554 comm="syz.3.448" path="/122/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 177.591730][ T7555] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.604296][ T7555] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 177.755770][ T40] audit: type=1400 audit(1748609024.277:485): avc: denied { setopt } for pid=7572 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 177.954716][ T5959] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 177.959877][ T7577] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 177.980920][ T7577] CIFS mount error: No usable UNC path provided in device string! [ 177.980920][ T7577] [ 177.990087][ T7577] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 178.332932][ T40] audit: type=1400 audit(1748609024.877:486): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 178.478368][ C2] vkms_vblank_simulate: vblank timer overrun [ 178.487528][ T40] audit: type=1400 audit(1748609025.027:487): avc: denied { create } for pid=7593 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 178.526530][ C2] vkms_vblank_simulate: vblank timer overrun [ 178.572317][ T7596] evm: overlay not supported [ 178.752253][ T40] audit: type=1400 audit(1748609025.277:488): avc: denied { listen } for pid=7600 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.764611][ T40] audit: type=1400 audit(1748609025.287:489): avc: denied { shutdown } for pid=7600 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.794695][ C2] vkms_vblank_simulate: vblank timer overrun [ 178.797962][ T40] audit: type=1400 audit(1748609025.287:490): avc: denied { accept } for pid=7600 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.929970][ C2] vkms_vblank_simulate: vblank timer overrun [ 179.019594][ T7611] netlink: 'syz.1.461': attribute type 10 has an invalid length. [ 179.057019][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.073957][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.127199][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.142959][ T7611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.150011][ C2] vkms_vblank_simulate: vblank timer overrun [ 179.152938][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.162622][ T7611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.195643][ T7611] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 179.199828][ T7612] bridge_slave_1: left allmulticast mode [ 179.253042][ T7612] bridge_slave_1: left promiscuous mode [ 179.255454][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.273809][ T40] audit: type=1400 audit(1748609025.807:491): avc: denied { append } for pid=7617 comm="syz.0.463" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 179.324752][ T7620] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 179.342893][ T7612] bridge_slave_0: left allmulticast mode [ 179.344921][ T7612] bridge_slave_0: left promiscuous mode [ 179.347148][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.348881][ T7620] __nla_validate_parse: 1 callbacks suppressed [ 179.348898][ T7620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 179.397186][ C2] vkms_vblank_simulate: vblank timer overrun [ 179.460044][ T7612] bond0: (slave bridge0): Releasing backup interface [ 179.913686][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 180.166686][ T7618] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.175415][ T7618] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.180173][ T7618] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.186985][ T7618] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.744099][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'. [ 180.868484][ T7637] binder: 7636:7637 ioctl 400c620e 200000001580 returned -22 [ 181.103441][ T7665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.305457][ T7671] FAT-fs (nullb0): bogus number of reserved sectors [ 181.358486][ T7671] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 181.526972][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 181.526987][ T40] audit: type=1400 audit(1748609028.067:498): avc: denied { map } for pid=7681 comm="syz.1.481" path="socket:[15919]" dev="sockfs" ino=15919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 181.812186][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.192229][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.192551][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.197066][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.234076][ T40] audit: type=1400 audit(1748609028.757:499): avc: denied { append } for pid=7697 comm="syz.3.486" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.334358][ T40] audit: type=1400 audit(1748609028.867:500): avc: denied { ioctl } for pid=7697 comm="syz.3.486" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 182.764840][ T7719] tmpfs: Unknown parameter 'grpqu_i' [ 182.937441][ T40] audit: type=1400 audit(1748609029.477:501): avc: denied { read } for pid=7714 comm="syz.0.492" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 182.948341][ T40] audit: type=1400 audit(1748609029.487:502): avc: denied { open } for pid=7714 comm="syz.0.492" path="/99/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 183.048564][ T40] audit: type=1400 audit(1748609029.587:503): avc: denied { ioctl } for pid=7720 comm="syz.1.493" path="cgroup:[4026532880]" dev="nsfs" ino=4026532880 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.122218][ T5965] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 183.133696][ T7729] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 183.337912][ T6014] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 183.411347][ T40] audit: type=1400 audit(1748609029.947:504): avc: denied { listen } for pid=7736 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 183.425660][ T40] audit: type=1400 audit(1748609029.957:505): avc: denied { append } for pid=7736 comm="syz.0.499" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.495593][ T6014] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.540144][ T6014] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.552248][ T6014] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.556760][ T6014] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.575390][ T6014] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 183.579444][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.587808][ T6014] hub 8-1:1.0: bad descriptor, ignoring hub [ 183.600160][ T40] audit: type=1400 audit(1748609030.127:506): avc: denied { module_request } for pid=7736 comm="syz.0.499" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 183.612528][ T6014] hub 8-1:1.0: probe with driver hub failed with error -5 [ 183.643323][ T6014] cdc_wdm 8-1:1.0: skipping garbage [ 183.645526][ T6014] cdc_wdm 8-1:1.0: skipping garbage [ 183.660285][ T6014] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 183.662747][ T6014] cdc_wdm 8-1:1.0: Unknown control protocol [ 183.752388][ T40] audit: type=1400 audit(1748609030.287:507): avc: denied { watch_mount } for pid=7746 comm="syz.2.500" path="/128" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.915770][ T7727] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 183.952709][ T53] usb 8-1: USB disconnect, device number 5 [ 184.233231][ T7742] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 184.303120][ C2] vkms_vblank_simulate: vblank timer overrun [ 184.468798][ T7765] support for cryptoloop has been removed. Use dm-crypt instead. [ 184.541999][ C2] vkms_vblank_simulate: vblank timer overrun [ 184.580727][ T7769] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 185.096996][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.100946][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.342473][ T6014] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 185.544732][ T6014] usb 5-1: not running at top speed; connect to a high speed hub [ 185.549276][ T6014] usb 5-1: config 82 has an invalid interface number: 132 but max is 2 [ 185.554271][ T6014] usb 5-1: config 82 has an invalid interface number: 34 but max is 2 [ 185.562332][ T5965] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.587400][ C2] vkms_vblank_simulate: vblank timer overrun [ 185.588929][ T6014] usb 5-1: config 82 contains an unexpected descriptor of type 0x1, skipping [ 185.588952][ T6014] usb 5-1: config 82 has an invalid interface number: 107 but max is 2 [ 185.588971][ T6014] usb 5-1: config 82 has no interface number 0 [ 185.588985][ T6014] usb 5-1: config 82 has no interface number 1 [ 185.588998][ T6014] usb 5-1: config 82 has no interface number 2 [ 185.589051][ T6014] usb 5-1: config 82 interface 34 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 185.589075][ T6014] usb 5-1: config 82 interface 34 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 185.589096][ T6014] usb 5-1: config 82 interface 34 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 185.589114][ T6014] usb 5-1: config 82 interface 34 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 185.589146][ T6014] usb 5-1: config 82 interface 107 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 185.589170][ T6014] usb 5-1: config 82 interface 107 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 185.589188][ T6014] usb 5-1: config 82 interface 107 altsetting 6 endpoint 0xC has an invalid bInterval 255, changing to 4 [ 185.589210][ T6014] usb 5-1: config 82 interface 107 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 185.589228][ T6014] usb 5-1: config 82 interface 107 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 185.589246][ T6014] usb 5-1: config 82 interface 107 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 185.589266][ T6014] usb 5-1: config 82 interface 107 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 185.589295][ T6014] usb 5-1: config 82 interface 107 altsetting 6 endpoint 0xA has invalid maxpacket 4006, setting to 64 [ 185.589317][ T6014] usb 5-1: config 82 interface 107 altsetting 6 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 185.589338][ T6014] usb 5-1: config 82 interface 107 altsetting 6 endpoint 0x8B has invalid maxpacket 12690, setting to 64 [ 185.589361][ T6014] usb 5-1: config 82 interface 107 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 185.589381][ T6014] usb 5-1: config 82 interface 107 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 185.589398][ T6014] usb 5-1: config 82 interface 107 altsetting 6 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 185.589421][ T6014] usb 5-1: config 82 interface 132 has no altsetting 0 [ 185.589436][ T6014] usb 5-1: config 82 interface 34 has no altsetting 0 [ 185.589450][ T6014] usb 5-1: config 82 interface 107 has no altsetting 0 [ 185.591591][ T6014] usb 5-1: New USB device found, idVendor=08dd, idProduct=0114, bcdDevice=92.d4 [ 185.951232][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.954797][ T6014] usb 5-1: Product: syz [ 185.956495][ T6014] usb 5-1: Manufacturer: ᠊ [ 185.974566][ T6014] usb 5-1: SerialNumber: syz [ 186.223931][ T6014] asix 5-1:82.132 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 186.231054][ T6014] asix 5-1:82.132: probe with driver asix failed with error -71 [ 186.278871][ T6014] asix 5-1:82.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 186.312309][ T6014] asix 5-1:82.34: probe with driver asix failed with error -71 [ 186.345225][ T6014] asix 5-1:82.107 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 186.358723][ T6014] asix 5-1:82.107: probe with driver asix failed with error -71 [ 186.381363][ T6014] usb 5-1: USB disconnect, device number 10 [ 186.611449][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 186.611462][ T40] audit: type=1400 audit(1748609033.127:510): avc: denied { setopt } for pid=7786 comm="syz.3.512" lport=40295 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 186.646952][ C2] vkms_vblank_simulate: vblank timer overrun [ 186.686942][ C2] vkms_vblank_simulate: vblank timer overrun [ 186.859212][ T7789] IPv6: sit1: Disabled Multicast RS [ 186.864514][ T7789] sit1: entered allmulticast mode [ 186.905899][ C2] vkms_vblank_simulate: vblank timer overrun [ 186.935904][ C2] vkms_vblank_simulate: vblank timer overrun [ 187.017957][ C2] vkms_vblank_simulate: vblank timer overrun [ 187.221300][ C2] vkms_vblank_simulate: vblank timer overrun [ 187.269462][ C2] vkms_vblank_simulate: vblank timer overrun [ 187.430357][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.517'. [ 187.608006][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 187.685349][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 187.770326][ C2] vkms_vblank_simulate: vblank timer overrun [ 187.948817][ T7814] 9pnet_virtio: no channels available for device syz [ 188.220024][ C2] vkms_vblank_simulate: vblank timer overrun [ 188.354058][ C2] vkms_vblank_simulate: vblank timer overrun [ 188.502922][ C2] vkms_vblank_simulate: vblank timer overrun [ 188.780706][ C2] vkms_vblank_simulate: vblank timer overrun [ 188.783681][ T40] audit: type=1326 audit(1748609035.287:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.521" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4418e969 code=0x7fc00000 [ 188.827850][ C2] vkms_vblank_simulate: vblank timer overrun [ 188.997992][ C2] vkms_vblank_simulate: vblank timer overrun [ 189.296048][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 189.310423][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.314825][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.318579][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.323072][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.326176][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.337079][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.356150][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.367432][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.374625][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.379828][ T7828] futex_wake_op: syz.2.527 tries to shift op by 32; fix this program [ 189.668491][ T40] audit: type=1326 audit(1748609036.207:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.0.530" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d3b18e969 code=0x0 [ 190.028802][ T40] audit: type=1400 audit(1748609036.557:513): avc: denied { read } for pid=7858 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.144752][ T7860] pim6reg1: entered promiscuous mode [ 190.147124][ T7860] pim6reg1: entered allmulticast mode [ 190.233923][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 190.859910][ T6012] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 191.042189][ T6012] usb 8-1: Using ep0 maxpacket: 32 [ 191.052887][ T6012] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 141, changing to 11 [ 191.057357][ T6012] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 57, changing to 9 [ 191.061981][ T6012] usb 8-1: config 1 interface 0 has no altsetting 0 [ 191.102323][ T6012] usb 8-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 191.120618][ T6012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.134074][ T6012] usb 8-1: Product: 窤ࣃ딼锒㻘ூꞿ엸戗၎荵ᨐ貐许᡻け裉૒綨뽚ꊠꘅϹ搝状㩵퓡⎈莢ﴈ๔ᒜᠳߏ鹆凨ஈ㠂䳣㫙뀋䏹ݢ䙆퀧쉣ᬻཾ旼ˠ☺ꊙ슦綷句⩼扱鮤曣䈗ܺ䃩鏗捘⵴ [ 191.189383][ T6012] usb 8-1: Manufacturer: ဉ [ 191.193158][ T6012] usb 8-1: SerialNumber: 왿఻宐뼭쑋ⳉ玿⣜쌌玨ᙰྎ獜碔㑧붚Ꮵ沋ꣅ鲪鑖⟥㚔⚘뾆⎐ᗔ┸貈䲻拞擳㿍䚳뺟䲫쀼ⅴ⎹芉훿햜ﳽ᠄ﵯ홂扬딦㧔폻ῌꜤ뻦猺⾼䭇բ㹞旰薄䃳됀ཁฑ흿纺쿥촾菎咰沒촗ꃇ먝࿣ᘸ䮀ᒌ귓뉾 [ 191.482040][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.513686][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.828215][ T6012] usbhid 8-1:1.0: can't add hid device: -71 [ 191.859701][ T6012] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 191.892205][ T6012] usb 8-1: USB disconnect, device number 6 [ 192.060807][ T7899] netlink: 'syz.3.545': attribute type 4 has an invalid length. [ 192.363982][ T7904] binder: 7903:7904 ioctl c0306201 200000000180 returned -14 [ 192.430364][ T7904] tmpfs: Unknown parameter 'u' [ 192.445684][ T7908] dvmrp5: entered allmulticast mode [ 192.454192][ T40] audit: type=1400 audit(1748609038.987:514): avc: denied { listen } for pid=7907 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.492865][ T6014] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 192.666029][ T6014] usb 8-1: Using ep0 maxpacket: 8 [ 192.675013][ T6014] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 192.679685][ T6014] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 192.685631][ T6014] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 192.700825][ T6014] usb 8-1: config 250 has no interface number 0 [ 192.714081][ T6014] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 192.719873][ T6014] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 192.736042][ T6014] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.744711][ T6014] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.766126][ T6014] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 192.780421][ T6014] usb 8-1: config 250 interface 228 has no altsetting 0 [ 192.789951][ T6014] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 192.797942][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 192.811183][ T6014] usb 8-1: Product: syz [ 192.814408][ T6014] usb 8-1: SerialNumber: syz [ 192.854330][ T6014] hub 8-1:250.228: bad descriptor, ignoring hub [ 192.856654][ T6014] hub 8-1:250.228: probe with driver hub failed with error -5 [ 192.946086][ T7919] fuse: Bad value for 'rootmode' [ 193.065280][ T6014] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 193.222212][ T40] audit: type=1400 audit(1748609039.747:515): avc: denied { read open } for pid=7927 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.252398][ T40] audit: type=1400 audit(1748609039.747:516): avc: denied { getattr } for pid=7927 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.300933][ T40] audit: type=1400 audit(1748609039.747:517): avc: denied { add_name } for pid=7925 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.366339][ T40] audit: type=1400 audit(1748609039.747:518): avc: denied { create } for pid=7925 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.430739][ T40] audit: type=1400 audit(1748609039.747:519): avc: denied { write } for pid=7925 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3404 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.495999][ T40] audit: type=1400 audit(1748609039.767:520): avc: denied { append } for pid=7925 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3404 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.508534][ T40] audit: type=1400 audit(1748609039.817:521): avc: denied { read write } for pid=7893 comm="syz.3.545" name="lp0" dev="devtmpfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 193.522003][ T40] audit: type=1400 audit(1748609039.817:522): avc: denied { open } for pid=7893 comm="syz.3.545" path="/dev/usb/lp0" dev="devtmpfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 193.592830][ T40] audit: type=1400 audit(1748609039.957:523): avc: denied { remove_name } for pid=7932 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3404 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.802997][ T5994] usb 8-1: USB disconnect, device number 7 [ 193.816794][ T5994] usblp0: removed [ 194.557901][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.645842][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.673858][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.705909][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.873865][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.942148][ T1156] nci: nci_ntf_packet: unknown ntf opcode 0xa05 [ 194.949159][ T7973] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 194.982578][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 195.021281][ T7975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.032797][ T7975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7975 comm=syz.0.564 [ 195.057840][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.109486][ T7977] bond0: (slave dummy0): Releasing backup interface [ 195.147086][ T7977] batman_adv: batadv0: Adding interface: dummy0 [ 195.157759][ T7977] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.214193][ T7977] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 195.689774][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.941799][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.977810][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.157192][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 196.264343][ T8022] dlm: non-version read from control device 0 [ 196.267677][ T8022] dlm: non-version read from control device 44 [ 196.324336][ T8024] tipc: Enabling of bearer rejected, failed to enable media [ 196.444532][ T8032] random: crng reseeded on system resumption [ 196.509992][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.177095][ T8051] binder: 8050:8051 ioctl c0306201 200000000640 returned -22 [ 197.185239][ T8054] program syz.0.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.418946][ T8060] Can't find ip_set type hash:i,port,ip [ 197.635176][ T8067] overlayfs: conflicting lowerdir path [ 197.668128][ T8067] overlayfs: missing 'lowerdir' [ 197.699681][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 197.699699][ T40] audit: type=1400 audit(1748609044.237:531): avc: denied { remount } for pid=8065 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 198.025805][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.224939][ T40] audit: type=1400 audit(1748609044.767:532): avc: denied { ioctl } for pid=8086 comm="syz.3.593" path="/dev/ptyqb" dev="devtmpfs" ino=138 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 198.273894][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.513856][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.541250][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.707558][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 198.791209][ T8101] fuse: Bad value for 'user_id' [ 198.796044][ T8101] fuse: Bad value for 'user_id' [ 198.800631][ T40] audit: type=1400 audit(1748609045.337:533): avc: denied { map } for pid=8100 comm="syz.0.598" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.054770][ T40] audit: type=1400 audit(1748609045.587:534): avc: denied { execmod } for pid=8108 comm="syz.2.601" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 199.055784][ T53] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 199.070402][ T40] audit: type=1400 audit(1748609045.587:535): avc: denied { execute } for pid=8108 comm="syz.2.601" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 199.262154][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 199.295296][ T53] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 199.298876][ T53] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.317364][ T53] usb 8-1: config 0 has no interface number 0 [ 199.319660][ T53] usb 8-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 199.359823][ T53] usb 8-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 199.368769][ T53] usb 8-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 199.373128][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.376824][ T53] usb 8-1: Product: syz [ 199.378920][ T53] usb 8-1: Manufacturer: syz [ 199.381020][ T53] usb 8-1: SerialNumber: syz [ 199.382157][ T40] audit: type=1800 audit(1748609045.907:536): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.604" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 199.412471][ T53] usb 8-1: config 0 descriptor?? [ 199.424205][ T8101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 199.453381][ T53] usb-storage 8-1:0.231: USB Mass Storage device detected [ 199.532450][ T40] audit: type=1400 audit(1748609046.067:537): avc: denied { mount } for pid=8122 comm="syz.2.605" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 199.535181][ T8124] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.669108][ T8101] netlink: 'syz.3.597': attribute type 10 has an invalid length. [ 199.676554][ T40] audit: type=1400 audit(1748609046.217:538): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 199.767761][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 199.781723][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.607'. [ 199.804469][ T6012] usb 8-1: USB disconnect, device number 8 [ 199.853985][ T40] audit: type=1400 audit(1748609046.387:539): avc: denied { map } for pid=8131 comm="syz.2.607" path="socket:[18666]" dev="sockfs" ino=18666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 199.855079][ T8132] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 199.901931][ T8132] cramfs: wrong magic [ 200.032932][ T6040] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.213950][ T6040] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.218431][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.226596][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 200.238146][ T6040] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.245080][ T6040] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.250166][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.280490][ T6040] usb 5-1: config 0 descriptor?? [ 200.706966][ T8152] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 200.709359][ T6040] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 200.711596][ T8152] ip6gretap1: entered allmulticast mode [ 200.752443][ T6040] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 200.790872][ T40] audit: type=1804 audit(1748609047.327:540): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.615" name="/newroot/164/file0" dev="tmpfs" ino=895 res=1 errno=0 [ 200.896877][ T8157] ALSA: seq fatal error: cannot create timer (-19) [ 201.508439][ T838] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 201.612574][ T5993] usb 5-1: USB disconnect, device number 11 [ 201.717016][ T838] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.721162][ T838] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.730643][ T838] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.747769][ T838] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.761834][ T838] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.767278][ T838] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.778314][ T838] usb 8-1: Product: syz [ 201.780736][ T838] usb 8-1: Manufacturer: syz [ 201.814169][ T838] cdc_wdm 8-1:1.0: skipping garbage [ 201.822667][ T838] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 202.070066][ T6012] usb 8-1: USB disconnect, device number 9 [ 202.331612][ T8177] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.575321][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 203.575341][ T40] audit: type=1326 audit(1748609050.117:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 203.639320][ T40] audit: type=1326 audit(1748609050.117:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 203.651476][ T40] audit: type=1326 audit(1748609050.117:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 203.665373][ T40] audit: type=1326 audit(1748609050.117:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 203.704402][ T40] audit: type=1326 audit(1748609050.117:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 203.732496][ T40] audit: type=1326 audit(1748609050.117:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 203.744701][ T40] audit: type=1326 audit(1748609050.117:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 203.768377][ T40] audit: type=1326 audit(1748609050.117:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 203.823850][ T40] audit: type=1326 audit(1748609050.117:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 203.842265][ T5992] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 203.844294][ T40] audit: type=1326 audit(1748609050.117:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.2.632" exe="/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fcc4418e969 code=0x7ffc0000 [ 204.060246][ T5992] usb 7-1: Using ep0 maxpacket: 8 [ 204.098554][ T5992] usb 7-1: config 2 interface 0 has no altsetting 0 [ 204.120875][ T5992] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 204.124778][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.164474][ T5992] usb 7-1: Product: syz [ 204.199567][ T5992] usb 7-1: Manufacturer: syz [ 204.201740][ T5992] usb 7-1: SerialNumber: syz [ 204.277896][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.797958][ T5992] usb 7-1: USB disconnect, device number 7 [ 205.021359][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.060729][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.095166][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.103586][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.124794][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.131455][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.137909][ T5958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.199801][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.201847][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.234372][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.237831][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.238233][ T8228] netlink: 'syz.0.637': attribute type 5 has an invalid length. [ 205.590549][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.793385][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.095009][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.351946][ T8224] chnl_net:caif_netlink_parms(): no params data found [ 206.502920][ T8245] netlink: 64 bytes leftover after parsing attributes in process `syz.2.641'. [ 206.715641][ T8223] chnl_net:caif_netlink_parms(): no params data found [ 207.404343][ T63] Bluetooth: hci4: command tx timeout [ 207.404364][ T5958] Bluetooth: hci2: command tx timeout [ 207.476142][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.512505][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.533842][ T8224] bridge_slave_0: entered allmulticast mode [ 207.546706][ T8224] bridge_slave_0: entered promiscuous mode [ 207.568811][ T1144] bridge_slave_1: left allmulticast mode [ 207.588961][ T1144] bridge_slave_1: left promiscuous mode [ 207.598259][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.608228][ T8273] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.625759][ T8273] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 207.649387][ T8273] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 207.674388][ T1144] bridge_slave_0: left allmulticast mode [ 207.681035][ T1144] bridge_slave_0: left promiscuous mode [ 207.695062][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.951460][ T8279] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 208.991143][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.060800][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.067688][ T1144] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 209.079373][ T1144] bond0 (unregistering): Released all slaves [ 209.096668][ T1144] bond1 (unregistering): Released all slaves [ 209.117667][ T1144] bond2 (unregistering): (slave bond3): Releasing backup interface [ 209.208793][ T1144] bond2 (unregistering): Released all slaves [ 209.411148][ T1144] bond3 (unregistering): Released all slaves [ 209.472376][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.475885][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.480263][ T8224] bridge_slave_1: entered allmulticast mode [ 209.498421][ T8224] bridge_slave_1: entered promiscuous mode [ 209.503128][ T5958] Bluetooth: hci2: command tx timeout [ 209.520766][ T5958] Bluetooth: hci4: command tx timeout [ 209.841320][ T1144] tipc: Left network mode [ 209.917004][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.942356][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.945666][ T8223] bridge_slave_0: entered allmulticast mode [ 209.949962][ T8223] bridge_slave_0: entered promiscuous mode [ 209.967819][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.976616][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 209.976631][ T40] audit: type=1400 audit(1748609056.507:624): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 209.984708][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.984887][ T8223] bridge_slave_1: entered allmulticast mode [ 209.986490][ T8223] bridge_slave_1: entered promiscuous mode [ 210.124620][ T8290] netlink: 72 bytes leftover after parsing attributes in process `syz.2.652'. [ 210.133909][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.652'. [ 210.181328][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.199494][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.344998][ T8296] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8296 comm=syz.2.652 [ 210.491310][ T40] audit: type=1400 audit(1748609057.027:625): avc: denied { read write } for pid=8295 comm="syz.0.653" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.526717][ T40] audit: type=1400 audit(1748609057.027:626): avc: denied { open } for pid=8295 comm="syz.0.653" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.555233][ T40] audit: type=1400 audit(1748609057.027:627): avc: denied { ioctl } for pid=8295 comm="syz.0.653" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 211.037462][ T8311] loop2: detected capacity change from 0 to 8 [ 211.050631][ T6323] Dev loop2: unable to read RDB block 8 [ 211.061040][ T8312] xt_l2tp: wrong L2TP version: 0 [ 211.066632][ T8224] team0: Port device team_slave_0 added [ 211.072303][ T6323] loop2: unable to read partition table [ 211.075367][ T6323] loop2: partition table beyond EOD, truncated [ 211.115192][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 211.122920][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.129718][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 211.144870][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.148886][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 211.156182][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.185695][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 211.204408][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.214350][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 211.241684][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.246706][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 211.476106][ T8223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.562231][ T5958] Bluetooth: hci4: command tx timeout [ 211.563495][ T63] Bluetooth: hci2: command tx timeout [ 211.620780][ T8224] team0: Port device team_slave_1 added [ 211.742804][ T8223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.926426][ T40] audit: type=1400 audit(1748609058.467:628): avc: denied { read } for pid=8319 comm="syz.2.657" path="socket:[18258]" dev="sockfs" ino=18258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.152454][ T1144] hsr_slave_0: left promiscuous mode [ 212.155779][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.159400][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.305434][ T1144] veth1_macvtap: left promiscuous mode [ 212.332573][ T1144] veth0_macvtap: left promiscuous mode [ 212.335766][ T1144] veth1_vlan: left promiscuous mode [ 212.338250][ T1144] veth0_vlan: left promiscuous mode [ 213.634096][ T63] Bluetooth: hci4: command tx timeout [ 213.634146][ T5958] Bluetooth: hci2: command tx timeout [ 214.469694][ T8324] netlink: 'syz.0.658': attribute type 5 has an invalid length. [ 215.327742][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 215.709074][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 218.193467][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.203920][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.231127][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.238007][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.241584][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.259206][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.271910][ T8223] team0: Port device team_slave_0 added [ 218.280137][ T8223] team0: Port device team_slave_1 added [ 218.739547][ T8224] hsr_slave_0: entered promiscuous mode [ 218.744928][ T8224] hsr_slave_1: entered promiscuous mode [ 218.773096][ T8224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.778617][ T8224] Cannot create hsr debugfs directory [ 218.940370][ T8339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8339 comm=syz.0.660 [ 218.943546][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 218.966837][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.971109][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.006591][ T8223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.164308][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.172423][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.211511][ T8223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.501586][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'. [ 219.780637][ T8223] hsr_slave_0: entered promiscuous mode [ 219.792883][ T8223] hsr_slave_1: entered promiscuous mode [ 219.807291][ T8223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.817701][ T8223] Cannot create hsr debugfs directory [ 220.642996][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'. [ 220.672692][ T40] audit: type=1400 audit(1748609067.207:629): avc: denied { ioctl } for pid=8373 comm="syz.0.667" path="socket:[19135]" dev="sockfs" ino=19135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 220.680577][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 220.706584][ C2] vkms_vblank_simulate: vblank timer overrun [ 220.733663][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 220.746529][ C2] vkms_vblank_simulate: vblank timer overrun [ 221.046902][ C2] vkms_vblank_simulate: vblank timer overrun [ 221.115822][ T8380] /dev/sr0: Can't open blockdev [ 221.302474][ T6014] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 221.486064][ T8224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.502218][ T6014] usb 7-1: Using ep0 maxpacket: 32 [ 221.509356][ T6014] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 221.513291][ T6014] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 221.517915][ T6014] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 221.521340][ T6014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.525483][ T6014] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 221.532533][ T6014] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.544471][ T6014] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 221.548187][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.571493][ T6014] usb 7-1: config 0 descriptor?? [ 221.576702][ C2] vkms_vblank_simulate: vblank timer overrun [ 221.585869][ T8224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.631825][ T8224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.653685][ C2] vkms_vblank_simulate: vblank timer overrun [ 221.705211][ T8224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.780794][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.787760][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.789636][ T6014] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 221.873331][ T6014] usb 7-1: USB disconnect, device number 8 [ 221.879722][ T6014] usblp0: removed [ 221.956981][ T8223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.998969][ T8223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.117593][ T8223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.165581][ C2] vkms_vblank_simulate: vblank timer overrun [ 222.185727][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.672'. [ 222.195838][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.309131][ T8223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.337483][ T40] audit: type=1400 audit(1748609068.867:630): avc: denied { create } for pid=8409 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 222.371445][ T40] audit: type=1400 audit(1748609068.907:631): avc: denied { setopt } for pid=8409 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 222.397585][ C2] vkms_vblank_simulate: vblank timer overrun [ 222.451764][ T8403] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 222.476181][ C2] vkms_vblank_simulate: vblank timer overrun [ 222.493959][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.672'. [ 222.498628][ T8414] fuse: Unknown parameter '' [ 222.616721][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.718336][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.730851][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.752549][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.756062][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.850127][ T8223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.895538][ T8224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.921666][ T8224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.952270][ T8223] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.112320][ C2] vkms_vblank_simulate: vblank timer overrun [ 223.170443][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.191084][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.259744][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.263340][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.282212][ T840] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 223.411762][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.465651][ T840] usb 7-1: Using ep0 maxpacket: 32 [ 223.473118][ T840] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 223.486081][ T840] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.509757][ T840] usb 7-1: config 1 interface 0 has no altsetting 0 [ 223.517337][ T840] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 223.547542][ T840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.569000][ T840] usb 7-1: Product: Д [ 223.571611][ T840] usb 7-1: Manufacturer: 껏饽躰첤쪿澀鸮᱖㴾씭보ጐꑱ余䇊趍䙡㏷鉾븮紬ⁿ긽긏䴝瀞ﻛ껿芋繛ᆪ哎睆◼䢥鳉ꇂ૨뗛ⷂ뛋婏먆瓵闢ܬk嫟ຈ볂淦ႉ秠㱗촥囚ꎙ랧챙踣勽샟ꋯ垀楕쵲큇⠓䬸䌴㫝쇜諙쉐왘⛵ [ 223.590468][ T840] usb 7-1: SerialNumber: 〉 [ 223.597210][ T8422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.627568][ T8422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.759757][ C2] vkms_vblank_simulate: vblank timer overrun [ 223.827159][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.676'. [ 223.843996][ T40] audit: type=1400 audit(1748609070.387:632): avc: denied { getopt } for pid=8440 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 223.888854][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.975354][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.993657][ C2] vkms_vblank_simulate: vblank timer overrun [ 224.063362][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.081815][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.103996][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.107188][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.119541][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.187491][ T840] usb 7-1: USB disconnect, device number 9 [ 224.209288][ T8224] veth0_vlan: entered promiscuous mode [ 224.214190][ T8452] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 224.214190][ T8452] program syz.0.677 not setting count and/or reply_len properly [ 224.249786][ C2] vkms_vblank_simulate: vblank timer overrun [ 224.270674][ T8224] veth1_vlan: entered promiscuous mode [ 224.377562][ C2] vkms_vblank_simulate: vblank timer overrun [ 224.400716][ T8224] veth0_macvtap: entered promiscuous mode [ 224.409526][ C2] vkms_vblank_simulate: vblank timer overrun [ 224.420370][ T8224] veth1_macvtap: entered promiscuous mode [ 224.554938][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.614158][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.705579][ T8224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.709540][ T8224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.727093][ T8224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.745598][ T8224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.983817][ C2] vkms_vblank_simulate: vblank timer overrun [ 225.047132][ T40] audit: type=1400 audit(1748609071.577:633): avc: denied { ioctl } for pid=8469 comm="syz.0.680" path="socket:[20383]" dev="sockfs" ino=20383 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 225.109014][ T8223] veth0_vlan: entered promiscuous mode [ 225.183769][ T8223] veth1_vlan: entered promiscuous mode [ 225.192243][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.216378][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.332511][ T8223] veth0_macvtap: entered promiscuous mode [ 225.338928][ T8223] veth1_macvtap: entered promiscuous mode [ 225.366738][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.376500][ T8483] vlan0: entered promiscuous mode [ 225.381010][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.440047][ T8483] team0: Port device vlan0 added [ 225.499597][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.515638][ T40] audit: type=1400 audit(1748609072.037:634): avc: denied { mounton } for pid=8224 comm="syz-executor" path="/syzkaller.mwwNaI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 225.560426][ C2] vkms_vblank_simulate: vblank timer overrun [ 225.586434][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.599795][ T40] audit: type=1400 audit(1748609072.137:635): avc: denied { mounton } for pid=8224 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 225.625207][ T8223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.653213][ T8223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.669363][ T8223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.677216][ T8223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.028543][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.060346][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.109197][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.135794][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.383389][ T40] audit: type=1400 audit(1748609072.907:636): avc: denied { bind } for pid=8498 comm="syz.5.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 226.456477][ T40] audit: type=1400 audit(1748609072.907:637): avc: denied { connect } for pid=8498 comm="syz.5.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 226.705864][ T8511] netlink: 884 bytes leftover after parsing attributes in process `syz.4.634'. [ 226.944527][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.688'. [ 226.968965][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.688'. [ 227.005918][ T40] audit: type=1400 audit(1748609073.537:638): avc: denied { setopt } for pid=8524 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 227.028171][ T8486] syz.0.682 (8486): drop_caches: 2 [ 227.176382][ T8529] netlink: 'syz.5.690': attribute type 21 has an invalid length. [ 227.180572][ T8529] netlink: 152 bytes leftover after parsing attributes in process `syz.5.690'. [ 227.199455][ T40] audit: type=1400 audit(1748609073.727:639): avc: denied { mount } for pid=8527 comm="syz.5.690" name="/" dev="configfs" ino=2149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 227.224260][ T40] audit: type=1400 audit(1748609073.727:640): avc: denied { read } for pid=8527 comm="syz.5.690" name="/" dev="configfs" ino=2149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.304907][ T40] audit: type=1400 audit(1748609073.727:641): avc: denied { open } for pid=8527 comm="syz.5.690" path="/6/file0" dev="configfs" ino=2149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.389634][ T8531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.525835][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.692'. [ 227.576211][ T8536] kvm: kvm [8535]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x34 [ 227.676914][ T40] audit: type=1400 audit(1748609074.197:642): avc: denied { unmount } for pid=8224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 227.781789][ T40] audit: type=1400 audit(1748609074.307:643): avc: denied { accept } for pid=8540 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.987771][ T8546] Bluetooth: MGMT ver 1.23 [ 228.064640][ T8524] delete_channel: no stack [ 228.167638][ T8556] overlayfs: invalid origin (0000) [ 228.186347][ T8556] overlayfs: overlapping lowerdir path [ 228.636087][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 228.806090][ T40] audit: type=1400 audit(1748609075.347:644): avc: denied { accept } for pid=8572 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.070573][ T8579] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 229.175361][ T8581] No source specified [ 229.179340][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.706'. [ 229.188286][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.706'. [ 229.245914][ T8581] netlink: 'syz.5.706': attribute type 12 has an invalid length. [ 229.259765][ T8581] tmpfs: Unknown parameter '0x000000000000000400000000000000000000004' [ 229.281923][ T8585] No source specified [ 229.301348][ T8587] syz.4.708: attempt to access beyond end of device [ 229.301348][ T8587] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 229.350343][ T8584] netlink: 'syz.0.707': attribute type 5 has an invalid length. [ 229.382176][ T8584] ip6erspan0: entered promiscuous mode [ 229.672245][ T8606] 9pnet: p9_errstr2errno: server reported unknown error @ [ 229.675533][ T8604] ipvlan2: entered allmulticast mode [ 229.751844][ T8604] macvlan0: entered allmulticast mode [ 229.787636][ T8604] veth1_vlan: entered allmulticast mode [ 229.839765][ T8608] loop2: detected capacity change from 0 to 7 [ 229.860106][ T8608] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 229.866986][ T8608] loop2: partition table partially beyond EOD, truncated [ 229.888728][ T8608] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 229.891043][ T8612] netlink: 'syz.4.715': attribute type 5 has an invalid length. [ 229.897086][ T8612] netlink: 'syz.4.715': attribute type 5 has an invalid length. [ 229.901142][ T8612] netlink: 'syz.4.715': attribute type 5 has an invalid length. [ 229.927658][ T8612] netlink: 'syz.4.715': attribute type 5 has an invalid length. [ 229.932512][ T8612] netlink: 'syz.4.715': attribute type 5 has an invalid length. [ 229.937432][ T8612] netlink: 'syz.4.715': attribute type 5 has an invalid length. [ 229.961064][ T8612] netlink: 'syz.4.715': attribute type 5 has an invalid length. [ 230.006536][ T8329] udevd[8329]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 230.229850][ T40] audit: type=1400 audit(1748609076.747:645): avc: denied { create } for pid=8621 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 230.241781][ T8620] batadv_slave_1: entered promiscuous mode [ 230.258092][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.900756][ T8615] batadv_slave_1: left promiscuous mode [ 231.134586][ T8638] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 231.473604][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.493951][ T6018] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 231.665683][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 231.665703][ T40] audit: type=1400 audit(1748609078.157:648): avc: denied { map } for pid=8646 comm="syz.0.728" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 231.680264][ T40] audit: type=1400 audit(1748609078.157:649): avc: denied { execute } for pid=8646 comm="syz.0.728" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 231.707041][ T6018] usb 10-1: not running at top speed; connect to a high speed hub [ 231.711560][ T6018] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 479, setting to 64 [ 231.733732][ T6018] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.754336][ T6018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.757754][ T6018] usb 10-1: Product: syz [ 231.775318][ T6018] usb 10-1: Manufacturer: syz [ 231.778200][ T6018] usb 10-1: SerialNumber: syz [ 231.800475][ T8653] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.823236][ T8642] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.900027][ T40] audit: type=1400 audit(1748609078.437:650): avc: denied { setopt } for pid=8657 comm="syz.0.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.110227][ T8658] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.730'. [ 232.115197][ T8658] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.730'. [ 232.304028][ T40] audit: type=1400 audit(1748609078.837:651): avc: denied { map } for pid=8671 comm="syz.0.733" path="socket:[23761]" dev="sockfs" ino=23761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 232.377510][ T40] audit: type=1400 audit(1748609078.837:652): avc: denied { read } for pid=8671 comm="syz.0.733" path="socket:[23761]" dev="sockfs" ino=23761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 232.422142][ T40] audit: type=1400 audit(1748609078.847:653): avc: denied { append } for pid=8671 comm="syz.0.733" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 232.480802][ T40] audit: type=1400 audit(1748609079.017:654): avc: denied { connect } for pid=8678 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.588730][ T8683] xt_hashlimit: size too large, truncated to 1048576 [ 232.636998][ T8675] netlink: 48 bytes leftover after parsing attributes in process `syz.4.736'. [ 232.662658][ T6018] cdc_ncm 10-1:1.0: bind() failure [ 232.683438][ T8681] could not allocate digest TFM handle sha1-neon [ 232.709402][ T6018] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 232.736614][ T6018] cdc_ncm 10-1:1.1: bind() failure [ 232.920907][ T40] audit: type=1400 audit(1748609079.437:655): avc: denied { mount } for pid=8691 comm="syz.4.739" name="/" dev="hugetlbfs" ino=22525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 232.964466][ T6018] usb 10-1: USB disconnect, device number 2 [ 232.967078][ T40] audit: type=1400 audit(1748609079.437:656): avc: denied { remount } for pid=8691 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 233.217391][ T40] audit: type=1400 audit(1748609079.747:657): avc: denied { ioctl } for pid=8698 comm="syz.2.741" path="socket:[23774]" dev="sockfs" ino=23774 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.292500][ T6018] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 233.442477][ T6018] usb 10-1: device descriptor read/64, error -71 [ 233.703308][ T6018] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 233.833061][ T6018] usb 10-1: device descriptor read/64, error -71 [ 233.943403][ T6018] usb usb10-port1: attempt power cycle [ 234.047257][ T6012] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 234.215774][ T6012] usb 7-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 234.228570][ T6012] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14592, setting to 1024 [ 234.245620][ T6012] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 234.260946][ T6012] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 234.272199][ T6012] usb 7-1: New USB device found, idVendor=fd25, idProduct=a4a1, bcdDevice= 0.40 [ 234.284628][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.305734][ T6012] usb 7-1: SerialNumber: syz [ 234.312209][ T8720] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 234.321842][ T6012] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 234.322191][ T6018] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 234.356947][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.365434][ T6018] usb 10-1: device descriptor read/8, error -71 [ 234.371033][ T8734] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.749'. [ 234.602173][ T6018] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 234.624919][ T6018] usb 10-1: device descriptor read/8, error -71 [ 234.741894][ T6018] usb usb10-port1: unable to enumerate USB device [ 234.868824][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.221298][ T8750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.754'. [ 236.405509][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.457218][ T8790] tipc: Enabling not permitted [ 236.462292][ T8790] tipc: Enabling of bearer rejected, failed to enable media [ 236.466571][ T8791] tipc: Enabling not permitted [ 236.468818][ T8791] tipc: Enabling of bearer rejected, failed to enable media [ 236.695449][ T6013] usb 7-1: USB disconnect, device number 10 [ 237.161507][ T8803] validate_nla: 58 callbacks suppressed [ 237.161525][ T8803] netlink: 'syz.5.767': attribute type 27 has an invalid length. [ 237.351316][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.356093][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.533235][ T8818] netlink: 'syz.4.772': attribute type 4 has an invalid length. [ 237.760353][ T8803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.779238][ T8803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.782429][ T8816] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.770'. [ 238.006168][ T8803] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.011133][ T8803] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.016843][ T8803] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.022656][ T8803] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.915733][ T8857] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 238.927538][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 238.927554][ T40] audit: type=1400 audit(1748609085.457:666): avc: denied { relabelto } for pid=8856 comm="syz.5.782" name="24" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 239.029657][ T40] audit: type=1400 audit(1748609085.457:667): avc: denied { associate } for pid=8856 comm="syz.5.782" name="24" dev="tmpfs" ino=144 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 239.073815][ T40] audit: type=1400 audit(1748609085.607:668): avc: denied { add_name } for pid=8856 comm="syz.5.782" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 239.101832][ T8862] netlink: 'syz.4.784': attribute type 21 has an invalid length. [ 239.129686][ T40] audit: type=1400 audit(1748609085.617:669): avc: denied { associate } for pid=8856 comm="syz.5.782" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 239.140657][ T40] audit: type=1400 audit(1748609085.617:670): avc: denied { read write open } for pid=8856 comm="syz.5.782" path="/24/file1" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 239.155587][ T40] audit: type=1400 audit(1748609085.617:671): avc: denied { lock } for pid=8856 comm="syz.5.782" path="/24/file1" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 239.204995][ T40] audit: type=1400 audit(1748609085.747:672): avc: denied { remove_name } for pid=8224 comm="syz-executor" name="file1" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 239.270735][ T40] audit: type=1400 audit(1748609085.767:673): avc: denied { unlink } for pid=8224 comm="syz-executor" name="file1" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 239.310880][ T40] audit: type=1400 audit(1748609085.767:674): avc: denied { rmdir } for pid=8224 comm="syz-executor" name="24" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 239.348044][ T8862] netlink: 132 bytes leftover after parsing attributes in process `syz.4.784'. [ 239.772113][ T40] audit: type=1400 audit(1748609086.307:675): avc: denied { map } for pid=8893 comm="syz.5.791" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 239.899838][ T6014] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 240.205073][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.209134][ T6014] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.237843][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.245907][ T6014] usb 5-1: config 0 descriptor?? [ 240.274313][ T6014] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 240.485332][ T6014] usb 5-1: USB disconnect, device number 12 [ 240.516888][ T8926] binder: 8925:8926 ioctl 400c620e 200000000000 returned -22 [ 240.623018][ T8931] netlink: 'syz.5.798': attribute type 10 has an invalid length. [ 240.670754][ T8931] hsr_slave_0: left promiscuous mode [ 240.722521][ T8931] hsr_slave_1: left promiscuous mode [ 240.851867][ T8937] xt_hashlimit: size too large, truncated to 1048576 [ 241.060863][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.309996][ T8957] program syz.2.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.709065][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz.0.803'. [ 241.845389][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.867989][ T8975] netlink: 'syz.0.805': attribute type 21 has an invalid length. [ 241.885667][ T8975] netlink: 128 bytes leftover after parsing attributes in process `syz.0.805'. [ 241.893746][ T8975] netlink: 'syz.0.805': attribute type 4 has an invalid length. [ 241.906746][ T8975] netlink: 'syz.0.805': attribute type 5 has an invalid length. [ 241.943556][ T8975] netlink: 3 bytes leftover after parsing attributes in process `syz.0.805'. [ 241.973198][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.673415][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.850036][ T9015] tipc: Enabling of bearer rejected, failed to enable media [ 242.918710][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.125471][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.787886][ T9055] lo: entered allmulticast mode [ 244.531823][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 244.531841][ T40] audit: type=1400 audit(1748609091.057:683): avc: denied { create } for pid=9075 comm="syz.0.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 244.552878][ T40] audit: type=1400 audit(1748609091.077:684): avc: denied { create } for pid=9075 comm="syz.0.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 244.561121][ T40] audit: type=1400 audit(1748609091.077:685): avc: denied { ioctl } for pid=9075 comm="syz.0.826" path="socket:[23243]" dev="sockfs" ino=23243 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 244.618208][ T9076] tmpfs: Unknown parameter '' [ 244.728570][ T9088] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 244.758851][ T9090] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 1 [ 244.791179][ T9091] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 2 [ 244.798176][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'. [ 244.812252][ T9095] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 3 [ 244.834370][ T9094] IPVS: stopping master sync thread 9095 ... [ 244.878591][ T9094] IPVS: stopping master sync thread 9091 ... [ 244.889048][ T9094] IPVS: stopping master sync thread 9090 ... [ 244.926739][ T9094] IPVS: stopping master sync thread 9088 ... [ 245.093648][ T9099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.230159][ T40] audit: type=1400 audit(1748609091.767:686): avc: denied { read } for pid=9105 comm="syz.5.834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.308788][ T40] audit: type=1400 audit(1748609091.767:687): avc: denied { open } for pid=9105 comm="syz.5.834" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.377593][ T40] audit: type=1400 audit(1748609091.767:688): avc: denied { ioctl } for pid=9105 comm="syz.5.834" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.411071][ C3] vkms_vblank_simulate: vblank timer overrun [ 245.427734][ T40] audit: type=1400 audit(1748609091.767:689): avc: denied { create } for pid=9105 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.444293][ T40] audit: type=1400 audit(1748609091.767:690): avc: denied { write } for pid=9105 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.470391][ T40] audit: type=1400 audit(1748609091.777:691): avc: denied { read } for pid=9105 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.509705][ T40] audit: type=1400 audit(1748609091.777:692): avc: denied { prog_load } for pid=9105 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 245.933878][ T9127] binder: BC_ACQUIRE_RESULT not supported [ 245.936099][ T9127] binder: 9126:9127 ioctl c0306201 200000000100 returned -22 [ 246.242783][ C3] vkms_vblank_simulate: vblank timer overrun [ 246.341648][ C3] vkms_vblank_simulate: vblank timer overrun [ 246.533428][ C3] vkms_vblank_simulate: vblank timer overrun [ 246.620964][ T9149] netlink: 64 bytes leftover after parsing attributes in process `syz.5.848'. [ 246.639991][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.848'. [ 246.713585][ T838] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 246.923288][ T838] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.925354][ C3] vkms_vblank_simulate: vblank timer overrun [ 246.937802][ T838] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.937857][ T838] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 246.937895][ T838] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 246.937916][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.951188][ T9145] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 246.992269][ T838] hub 5-1:1.0: bad descriptor, ignoring hub [ 246.995442][ T838] hub 5-1:1.0: probe with driver hub failed with error -5 [ 246.999745][ T838] cdc_wdm 5-1:1.0: skipping garbage [ 247.002893][ T838] cdc_wdm 5-1:1.0: skipping garbage [ 247.009373][ C3] vkms_vblank_simulate: vblank timer overrun [ 247.026226][ T838] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 247.029035][ T838] cdc_wdm 5-1:1.0: Unknown control protocol [ 247.380466][ C3] vkms_vblank_simulate: vblank timer overrun [ 247.394680][ T9182] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 247.687350][ T9200] sp0: Synchronizing with TNC [ 247.801769][ T6012] usb 5-1: USB disconnect, device number 13 [ 247.809665][ T9145] cdc_wdm 5-1:1.0: Error autopm - -16 [ 247.965070][ T9205] netlink: 'syz.4.862': attribute type 5 has an invalid length. [ 248.042378][ T6012] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 248.252361][ T6012] usb 5-1: Using ep0 maxpacket: 8 [ 248.256280][ T6012] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.260599][ T6012] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.264894][ T6012] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 248.282954][ T6012] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 248.318641][ T6012] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 248.334368][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.389852][ T6012] hub 5-1:1.0: bad descriptor, ignoring hub [ 248.397160][ T6012] hub 5-1:1.0: probe with driver hub failed with error -5 [ 248.407682][ T6012] cdc_wdm 5-1:1.0: skipping garbage [ 248.410465][ T6012] cdc_wdm 5-1:1.0: skipping garbage [ 248.419194][ T6012] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 248.430056][ T6012] cdc_wdm 5-1:1.0: Unknown control protocol [ 248.650479][ T9227] tipc: Trying to set illegal importance in message [ 248.709295][ T9229] syzkaller1: entered promiscuous mode [ 248.712677][ T9229] syzkaller1: entered allmulticast mode [ 248.729424][ C3] vkms_vblank_simulate: vblank timer overrun [ 248.759770][ C3] vkms_vblank_simulate: vblank timer overrun [ 248.809346][ C3] vkms_vblank_simulate: vblank timer overrun [ 249.022797][ T840] usb 5-1: USB disconnect, device number 14 [ 249.067083][ T9241] overlayfs: missing 'workdir' [ 249.076664][ C3] vkms_vblank_simulate: vblank timer overrun [ 249.370304][ T9254] vivid-000: ================= START STATUS ================= [ 249.433979][ T9254] vivid-000: Test Pattern: 75% Colorbar [ 249.462277][ T9254] vivid-000: Fill Percentage of Frame: 100 [ 249.465762][ T9254] vivid-000: Horizontal Movement: No Movement [ 249.468398][ T9254] vivid-000: Vertical Movement: No Movement [ 249.471444][ T9254] vivid-000: OSD Text Mode: All [ 249.476590][ T9254] vivid-000: Show Border: false [ 249.479074][ T9254] vivid-000: Show Square: false [ 249.505337][ T9254] vivid-000: Sensor Flipped Horizontally: false [ 249.509057][ T9254] vivid-000: Sensor Flipped Vertically: false [ 249.513354][ T9254] vivid-000: Insert SAV Code in Image: false [ 249.516755][ T9254] vivid-000: Insert EAV Code in Image: false [ 249.520541][ T9254] vivid-000: Insert Video Guard Band: false [ 249.525488][ T9254] vivid-000: Reduced Framerate: false [ 249.529315][ T9254] vivid-000: HDMI 000-0 Is Connected To: None [ 249.533028][ T9254] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 249.536527][ T9254] vivid-000: Enable Capture Cropping: true [ 249.556384][ T9254] vivid-000: Enable Capture Composing: true [ 249.558962][ T9254] vivid-000: Enable Capture Scaler: true [ 249.562803][ T9254] vivid-000: Timestamp Source: End of Frame [ 249.565606][ T9254] vivid-000: Colorspace: SMPTE 170M [ 249.568113][ T9254] vivid-000: Transfer Function: Default [ 249.592183][ T9254] vivid-000: Y'CbCr Encoding: Default [ 249.595447][ T9254] vivid-000: HSV Encoding: Hue 0-179 [ 249.598919][ T9254] vivid-000: Quantization: Default [ 249.610230][ T9254] vivid-000: Apply Alpha To Red Only: false [ 249.617427][ T9254] vivid-000: Standard Aspect Ratio: 4x3 [ 249.624069][ T9254] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 249.629027][ T9254] vivid-000: DV Timings: 640x480p59 inactive [ 249.633007][ T9254] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 249.637000][ T9254] vivid-000: Maximum EDID Blocks: 2 [ 249.639929][ T9254] vivid-000: Limited RGB Range (16-235): false [ 249.658425][ T9254] vivid-000: Rx RGB Quantization Range: Automatic [ 249.660551][ T9254] vivid-000: Power Present: 0x00000000 [ 249.664185][ T9254] tpg source WxH: 720x576 (R'G'B) [ 249.667101][ T9254] tpg field: 2 [ 249.668988][ T9254] tpg crop: (704,0)/16x16 [ 249.670949][ T9254] tpg compose: (0,0)/16x8 [ 249.673247][ T9254] tpg colorspace: 1 [ 249.674950][ T9254] tpg transfer function: 0/0 [ 249.676898][ T9254] tpg quantization: 0/0 [ 249.678679][ T9254] tpg RGB range: 0/2 [ 249.701434][ T9254] vivid-000: ================== END STATUS ================== [ 249.796591][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 249.801605][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 249.812577][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 249.812595][ T40] audit: type=1400 audit(1748609096.357:798): avc: denied { execute } for pid=9266 comm="syz.2.880" dev="tmpfs" ino=3142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.850365][ T40] audit: type=1400 audit(1748609096.357:799): avc: denied { execute_no_trans } for pid=9266 comm="syz.2.880" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.874528][ T9248] ALSA: seq fatal error: cannot create timer (-22) [ 249.921450][ T9267] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 249.962139][ T5958] Bluetooth: hci3: unexpected event for opcode 0x0c7a [ 249.966354][ T40] audit: type=1400 audit(1748609096.487:800): avc: denied { write } for pid=9270 comm="syz.0.882" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 249.993880][ T40] audit: type=1400 audit(1748609096.487:801): avc: denied { create } for pid=9270 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 250.016734][ T40] audit: type=1400 audit(1748609096.487:802): avc: denied { connect } for pid=9270 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 250.026989][ T40] audit: type=1400 audit(1748609096.557:803): avc: denied { listen } for pid=9270 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 250.051447][ T40] audit: type=1400 audit(1748609096.557:804): avc: denied { accept } for pid=9270 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 250.075600][ T40] audit: type=1400 audit(1748609096.617:805): avc: denied { write } for pid=9270 comm="syz.0.882" path="socket:[24447]" dev="sockfs" ino=24447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 250.088797][ T40] audit: type=1400 audit(1748609096.617:806): avc: denied { write } for pid=9270 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 250.111548][ T40] audit: type=1400 audit(1748609096.617:807): avc: denied { ioctl } for pid=9275 comm="syz.2.884" path="socket:[23475]" dev="sockfs" ino=23475 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.371237][ T9288] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 251.039575][ T9302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.891'. [ 251.138552][ T9309] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.190099][ T9306] fuse: root generation should be zero [ 251.210471][ T9311] bridge_slave_0: left allmulticast mode [ 251.217165][ T9311] bridge_slave_0: left promiscuous mode [ 251.229239][ T9311] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.248348][ T9311] bridge_slave_1: left allmulticast mode [ 251.251665][ T9311] bridge_slave_1: left promiscuous mode [ 251.258030][ T9311] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.368673][ T9311] bond0: (slave bond_slave_0): Releasing backup interface [ 251.430113][ T9311] bond0: (slave bond_slave_1): Releasing backup interface [ 251.619260][ T9311] team0: Port device team_slave_0 removed [ 251.663313][ T9311] team0: Port device team_slave_1 removed [ 251.666836][ T9311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.671831][ T9311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.723017][ T9311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.726209][ T9311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.863862][ T9312] vlan2: entered allmulticast mode [ 251.866334][ T9312] bond0: entered allmulticast mode [ 251.871598][ T9312] bridge0: port 1(vlan2) entered blocking state [ 251.880132][ T9312] bridge0: port 1(vlan2) entered disabled state [ 251.905683][ C1] [ 251.906774][ C1] ============================= [ 251.908759][ C1] [ BUG: Invalid wait context ] [ 251.923513][ C1] 6.15.0-syzkaller-08486-gf66bc387efbe #0 Not tainted [ 251.931550][ C1] ----------------------------- [ 251.934003][ C1] syz.5.897/9323 is trying to lock: [ 251.936450][ C1] ffffc90004214410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 251.951134][ C1] other info that might help us debug this: [ 251.959796][ C1] context-{2:2} [ 251.961550][ C1] 5 locks held by syz.5.897/9323: [ 251.967791][ C1] #0: ffffffff8e480a28 (bpf_stats_enabled_mutex){+.+.}-{4:4}, at: bpf_stats_release+0x17/0x40 [ 251.972333][ C1] #1: ffffffff8e266f70 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_slow_dec+0x53/0xc0 [ 251.977404][ C1] #2: ffffffff8e4e9448 (jump_label_mutex){+.+.}-{4:4}, at: __static_key_slow_dec_cpuslocked.part.0+0x18/0xf0 [ 251.983208][ C1] #3: ffffffff8e283228 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 251.989927][ C1] #4: ffffc90004214960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 251.994425][ C1] stack backtrace: [ 251.996031][ C1] CPU: 1 UID: 0 PID: 9323 Comm: syz.5.897 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) [ 251.996055][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.996066][ C1] Call Trace: [ 251.996074][ C1] [ 251.996081][ C1] dump_stack_lvl+0x116/0x1f0 [ 251.996116][ C1] __lock_acquire+0xa12/0x1c90 [ 251.996137][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 251.996159][ C1] lock_acquire+0x179/0x350 [ 251.996178][ C1] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 251.996202][ C1] _raw_read_lock_irqsave+0x46/0x90 [ 251.996219][ C1] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 251.996239][ C1] kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 251.996258][ C1] ? kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 251.996281][ C1] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 251.996302][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 251.996325][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 251.996342][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 251.996379][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 251.996398][ C1] xen_timer_callback+0x1db/0x2a0 [ 251.996417][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 251.996437][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 251.996461][ C1] __hrtimer_run_queues+0x5ed/0xad0 [ 251.996489][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 251.996511][ C1] ? read_tsc+0x9/0x20 [ 251.996537][ C1] ? rcu_is_watching+0x12/0xc0 [ 251.996553][ C1] hrtimer_interrupt+0x397/0x8e0 [ 251.996581][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 251.996605][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 251.996624][ C1] [ 251.996629][ C1] [ 251.996634][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 251.996652][ C1] RIP: 0010:kvm_smp_send_call_func_ipi+0x1e5/0x250 [ 251.996683][ C1] Code: 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 5d 8b 1b b8 0b 00 00 00 0f 01 c1 3a ff ff ff e8 a1 d5 51 00 90 0f 0b 48 89 df e8 26 66 b8 00 e9 [ 251.996699][ C1] RSP: 0018:ffffc90003b27aa8 EFLAGS: 00000246 [ 251.996714][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8169f3bf [ 251.996725][ C1] RDX: 0000000000000000 RSI: ffffffff8169f3cd RDI: ffffffff8dd13db8 [ 251.996736][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 251.996746][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: fffffbfff1c44f25 [ 251.996756][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000003 [ 251.996770][ C1] ? kvm_smp_send_call_func_ipi+0x16f/0x250 [ 251.996794][ C1] ? kvm_smp_send_call_func_ipi+0x17d/0x250 [ 251.996821][ C1] ? kvm_smp_send_call_func_ipi+0x17d/0x250 [ 251.996858][ C1] smp_call_function_many_cond+0xbac/0x1490 [ 251.996884][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 251.996908][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 251.996933][ C1] ? perf_event_text_poke+0x130/0x180 [ 251.996955][ C1] ? kcm_parse_func_strparser+0x54/0x190 [ 251.996973][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 251.996997][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 251.997018][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 251.997043][ C1] smp_text_poke_batch_finish+0x5ae/0xdb0 [ 251.997071][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 251.997097][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 251.997127][ C1] ? __pfx_bpf_stats_release+0x10/0x10 [ 251.997150][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 251.997204][ C1] jump_label_update+0x376/0x550 [ 251.997231][ C1] ? __pfx_bpf_stats_release+0x10/0x10 [ 251.997253][ C1] __static_key_slow_dec_cpuslocked.part.0+0xc0/0xf0 [ 251.997279][ C1] static_key_slow_dec+0x7c/0xc0 [ 251.997303][ C1] bpf_stats_release+0x23/0x40 [ 251.997324][ C1] __fput+0x402/0xb70 [ 251.997346][ C1] task_work_run+0x150/0x240 [ 251.997368][ C1] ? __pfx_task_work_run+0x10/0x10 [ 251.997391][ C1] ? __pfx___do_sys_close_range+0x10/0x10 [ 251.997412][ C1] exit_to_user_mode_loop+0xeb/0x110 [ 251.997436][ C1] do_syscall_64+0x3f6/0x4c0 [ 251.997457][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.997474][ C1] RIP: 0033:0x7f0e5db8e969 [ 251.997495][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.997510][ C1] RSP: 002b:00007ffd72423198 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 251.997527][ C1] RAX: 0000000000000000 RBX: 00007f0e5ddb7ba0 RCX: 00007f0e5db8e969 [ 251.997537][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 251.997546][ C1] RBP: 00007f0e5ddb7ba0 R08: 0000000000000234 R09: 0000001e7242348f [ 251.997561][ C1] R10: 00000000003ffba8 R11: 0000000000000246 R12: 000000000003d98a [ 251.997572][ C1] R13: 00007ffd72423290 R14: ffffffffffffffff R15: 00007ffd724232b0 [ 251.997588][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 252.603017][ T6724] caif:caif_disconnect_client(): nothing to disconnect [ 253.950366][ T13] bridge_slave_1: left allmulticast mode [ 253.953234][ T13] bridge_slave_1: left promiscuous mode [ 253.957035][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.973697][ T13] bridge_slave_0: left allmulticast mode [ 253.976461][ T13] bridge_slave_0: left promiscuous mode [ 253.979213][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.678748][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.711273][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.725536][ T13] bond0 (unregistering): Released all slaves [ 254.852930][ T13] IPVS: stopping backup sync thread 9288 ... [ 255.477045][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.483807][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.791908][ T13] team0 (unregistering): Port device team_slave_1 removed [ 258.202349][ T13] team0 (unregistering): Port device team_slave_0 removed [ 260.405088][ T13] lo (unregistering): left allmulticast mode [ 261.393316][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.464486][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.542570][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.823233][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 VM DIAGNOSIS: 12:44:58 Registers: info registers vcpu 0 CPU#0 RAX=000000000008951c RBX=0000000000000000 RCX=ffffffff8b7be449 RDX=ffffed100d48663e RSI=ffffffff8bf52f40 RDI=ffffffff8191d841 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e08 R8 =0000000000000000 R9 =ffffed100d48663d R10=ffff88806a4331eb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90877550 R15=0000000000000000 RIP=ffffffff8b7bcfaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6971000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f91fffc CR3=0000000029d4a000 CR4=00352ef0 DR0=0000040000000000 DR1=0000000000000652 DR2=0000000000000006 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003072 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b383488 00007f4d3b383480 00007f4d3b383478 00007f4d3b383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3beed100 00007f4d3b383440 00007f4d3b383458 00007f4d3b3834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b383498 00007f4d3b383490 00007f4d3b383488 00007f4d3b383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000009c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000067 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85585bc5 RDI=ffffffff9ae6a6a0 RBP=ffffffff9ae6a660 RSP=ffffc900006a06a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e35312e36 R12=0000000000000000 R13=0000000000000067 R14=ffffffff9ae6a660 R15=ffffffff85585b60 RIP=ffffffff85585bef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555933d500 ffffffff 00c01300 GS =0000 ffff8880d6a71000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2e47c0 CR3=0000000032188000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e5dc11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e5dc11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e5dc11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e5dc11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e5dc11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e5dc11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0948adb4e1a9bc03 e62f06c5036ed57b a3ee3384955006ad 3c47f6e2e9ad2638 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a979acba8766ce98 cf0e595202ab4e37 5bb140e85f1a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1365bc56fc9d89e8 a4dfa20f8b593f8a e9394cafed3452c5 739c52d9d5a90ab5 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c07ceb9181365bc 56fc9d89e8a4dfa2 0f8b593f8ae9394c afed3452c5739c52 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d9d5a90ab5a979ac ba8766ce98cf0e59 5202ab4e375bb140 e85f1a35acf107bd ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dba7b920980948ad b4e1a9bc03e62f06 c5036ed57ba3ee33 84955006ad3c47f6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2e9ad2638a0b0f9 328657eeb6171f0f 425e848243cfc3c8 5ce7c56cf8009f89 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000079a04 RBX=0000000000000002 RCX=ffffffff8b7be449 RDX=ffffed100d4c663e RSI=ffffffff8bf52f40 RDI=ffffffff8191d841 RBP=ffffed1003b58910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c663d R10=ffff88806a6331eb R11=0000000000005c83 R12=0000000000000002 R13=ffff88801dac4880 R14=ffffffff90877550 R15=0000000000000000 RIP=ffffffff8b7bcfaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555555b3b808 CR3=000000004d4b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee33f6000 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc44211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc44211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc44211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc44211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc44211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc44211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000067bdc RBX=0000000000000003 RCX=ffffffff8b7be449 RDX=ffffed100d4e663e RSI=ffffffff8bf52f40 RDI=ffffffff8191d841 RBP=ffffed1003bdb000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e663d R10=ffff88806a7331eb R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded8000 R14=ffffffff90877550 R15=0000000000000000 RIP=ffffffff8b7bcfaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4d3c047f98 CR3=000000004e6d9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd47494410 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d3b211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000009c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000009c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000