last executing test programs: 14.303133139s ago: executing program 1 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x52) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x900000, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x60046000) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x3, 0x5000000, {0x80, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf4\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x06\x00\x00\x00@\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12[\x93\xa5\xd4\xdb\x9a\xb2\xe0\x16He\x81\xea[\x9c\xf9\xc4\xa2\x86F\xbct@\x97\x11Y\xa7\x1b\xc0v\xb0lJ\xc4\x9e\xc7m^\x86\xea'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xe9) mount$tmpfs(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x8a4428, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave:3\x0093,80765,huge=within_size,appraise,mask=^MAY_APPEND,fowner>', @ANYRESDEC=r2, @ANYBLOB="2c6f62653d2c706591278bea6966fad38b63746f6f2c61356469742c00533b9df0a9e48db4e72841a3e82193"]) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000480)=0x7) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0xa4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 14.176375011s ago: executing program 1 (id=2196): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x17, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005f1b00000400000018120000812ed6941d8fff79dbb291394220de5b0761d45530f683dd740f96ebdc44bc631a74497e410475dc78a1d21342cca642545230456cbc39ee5e19037d", @ANYRES32=0x1, @ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0xb9, &(0x7f0000000400)=""/185, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x4, 0x70c, 0x40}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x1, 0x1, 0x9, 0x3}, {0x2, 0x2, 0xf, 0xa}], 0x10, 0xa}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r4, r5, 0x25, 0x1, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r7}, &(0x7f0000000000)=0x0) timer_settime(r8, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) gettid() timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r9 = gettid() tkill(r9, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110bd000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xf}, 0x94) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r11 = openat$cgroup_subtree(r10, &(0x7f0000000340), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000380)=ANY=[@ANYBLOB="2b68756765d6c27050"], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip6_tables_matches\x00') 14.06878794s ago: executing program 1 (id=2197): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') close(0x3) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f0000009580)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}}}, 0x80, 0x0}}], 0x1, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) 13.128253516s ago: executing program 1 (id=2198): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x0, 0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x0, 0xfe}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="9b40f912a1"], 0xa) io_uring_enter(r1, 0x72ce, 0x8047, 0x2b1d29ecd03aeb89, &(0x7f0000000000)={[0x8]}, 0x8) syz_io_uring_setup(0x2c11, &(0x7f0000000400)={0x0, 0x6, 0x4000, 0x5, 0x41}, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x0, 0x8}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x0, 0xfe}) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="9b40f912a1"], 0xa) (async) io_uring_enter(r1, 0x72ce, 0x8047, 0x2b1d29ecd03aeb89, &(0x7f0000000000)={[0x8]}, 0x8) (async) syz_io_uring_setup(0x2c11, &(0x7f0000000400)={0x0, 0x6, 0x4000, 0x5, 0x41}, 0x0, 0x0) (async) 13.042638309s ago: executing program 1 (id=2199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async, rerun: 64) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) (rerun: 64) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="8f69f10cc15983cd0c0a6b8636f82e0eaa006b5475150d2081ddda04cbc125386f64112e62f47b24cc263d4b1612508182c068726fdd57d50c775c6d1792372c68", 0x41) 12.915088132s ago: executing program 1 (id=2200): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2010c00, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64666c747569643d53ec5b270dba03ebd7dfadfa34cc1a872db406000000f67ac243384c4afc89f541a762", @ANYRESHEX=0xee01, @ANYBLOB=',cache=readahead,pcr=00000000000000000014,\x00']) chdir(&(0x7f0000000300)='./file0\x00') socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000080), &(0x7f0000000300)=r3}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) (async) r4 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) socket(0x840000000002, 0x3, 0xff) (async) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x16, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r6, 0x8208200) open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) 8.198273894s ago: executing program 2 (id=2225): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000009500"/17], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0xf5, 0x8, 0x2eff, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x523ae98e3e2ab531, 0x7, 0x9, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2d, 0x9, 0x1, 0xfffffc00, 0x10, @private1, @private0, 0x700, 0x8, 0x2, 0x1}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="261025bd7000fcdbdf25100000002400018008000100", @ANYRES32=r2, @ANYBLOB="0800030001000000400000000200458e4f540100", @ANYRES32=r3, @ANYBLOB="080009000400000008000800f13300000800090081000000"], 0x50}, 0x1, 0x0, 0x0, 0x48810}, 0x4000004) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0012000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008051}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000740)={r5}) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1}}], 0x1, 0x8810) accept$packet(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x5, 0x3d, 0x2c, &(0x7f0000000100)="47cb580c50189a52e7e66b2a84cbc12ce814b9802a0fef4cdfb4e7d14e84b50bcf1b6693b9d6253300887d4e4618acf3857cf1f8d21486348f09cc3f66", 0x0, 0xd04, 0x80040000, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000009500"/17], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async) socket$kcm(0x10, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0xf5, 0x8, 0x2eff, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x523ae98e3e2ab531, 0x7, 0x9, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2d, 0x9, 0x1, 0xfffffc00, 0x10, @private1, @private0, 0x700, 0x8, 0x2, 0x1}}) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="261025bd7000fcdbdf25100000002400018008000100", @ANYRES32=r2, @ANYBLOB="0800030001000000400000000200458e4f540100", @ANYRES32=r3, @ANYBLOB="080009000400000008000800f13300000800090081000000"], 0x50}, 0x1, 0x0, 0x0, 0x48810}, 0x4000004) (async) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0012000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008051}, 0x8000) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000740)={r5}) (async) accept4(r5, 0x0, 0x0, 0x0) (async) sendmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1}}], 0x1, 0x8810) (async) accept$packet(r6, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x5, 0x3d, 0x2c, &(0x7f0000000100)="47cb580c50189a52e7e66b2a84cbc12ce814b9802a0fef4cdfb4e7d14e84b50bcf1b6693b9d6253300887d4e4618acf3857cf1f8d21486348f09cc3f66", 0x0, 0xd04, 0x80040000, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x50) (async) 8.008109659s ago: executing program 2 (id=2226): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000019dc0)=""/4090, 0xffa) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 64) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 7.940875034s ago: executing program 2 (id=2227): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) read$midi(r0, &(0x7f0000000180)=""/142, 0x8e) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000080)={0x80000000, 0x20, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x32314241, 0x3, 0x7, [{0x6, 0xd381}, {0xdc5, 0x5}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcf}, {0x5, 0x6}, {0x1, 0x80000005}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) 7.857819164s ago: executing program 2 (id=2228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000440)={{0x2, 0x4e23, @multicast2}, {0x1}, 0x78, {0x2, 0x4e23, @private=0xa010100}, 'veth0_to_team\x00'}) r4 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r4, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x800}) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000180)={'\x00', 0x2, 0x0, 0x0, 0x0, 0x7fff, 0x8000000, 0xffff1000, '\x00', 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000004c0)="baf80c66b82a58ed8f66efbafc0ced0f0966b92c08000066b8a1e6000066ba000000000f300fc72a66b97b0200000f32f26566660f070f01c4f30f21bd67eb00baf80c66b8b06a148266efbafc0c66b80040000066ef", 0xb7}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x445, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtaction={0x1fc, 0x31, 0x200, 0x0, 0x0, {0x9}, [{0x1e8, 0x1, [@m_bpf={0x90, 0x1c, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x6, 0x1, 0x8, 0x1}, {0x1, 0xcc, 0x7, 0x8}, {0x1, 0x10, 0x1, 0x3}, {0x1, 0x40, 0x8, 0x6}, {0x1, 0x1, 0x7}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x5, 0x4, 0x9, 0x2}}]}, {0x23, 0x6, "deb3af9c8497a142235023adc8488a1ee0b979fc388cd16955427a33402b60"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x154, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x8, 0x5, 0x78000000, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xb2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xf}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}]}, {0xe8, 0x6, "ce06d3b2eadd29877bc50653b1c0f81f48a6dc68e7dad90d781dfff19b945c9d470b985da6f2e52c7013aebd487571326d55776918cb8624bab5a814b70c9a0a47e9577e953c743b599eba8997e7133036a6dad9c3d108ea03e81bb5acdd81328c10fef947f3b49f55cb9ae3294e0c7a83194f32af8033280460ec01030ba748a528d7c3314ea2980dc14376379c7f5aa5c2aaf8e8353f8eb35a715b456a9b74ddcabfcb0e9a51ecd76647077bf178b4e1ad6aa60a8804c431d9fb3cdd5736a5879d84231bc95b66dcf6dd88e7b5d5410f3ef63f7f91aef98a4527da88de66d7bcf59f8d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1fc}}, 0x4000080) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) unshare(0x8000000) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$vcsa(0x0, 0x1, 0x20943) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) 6.852010287s ago: executing program 2 (id=2238): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f, 0x80000001, 0x9, 0x1, 0x0, 0x2, 0x1, 0x8, 0x6, 0x8, 0x1fd, 0x5, 0x8, 0xc, 0x9, 0xffffff57, [0x4, 0x6]}}) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x80, 0x60, 0xb, 0xda, {{0x17, 0x4, 0x3, 0x36, 0x5c, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x34, 0x4b, 0x1, 0x1, [{@empty, 0x6}, {@loopback, 0x9}, {@local, 0x5}, {@broadcast, 0x8b46}, {@multicast2, 0x50000000}, {@multicast1, 0x8}]}, @noop, @timestamp={0x44, 0xc, 0x71, 0x0, 0x4, [0x80, 0x5]}, @end, @generic={0x82, 0x2}, @noop]}}}}}) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r3, 0x80045440, 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000480)={0x0, 0x6, 0xa5}) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003920000009203"], 0x0, 0x0, 0x0}, 0x0) (async) ioctl$HIDIOCSREPORT(r9, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) (async) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x14, 0x4, 0x0, 0x4, 0xfe, 0x1, 0x1000}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_GETINFO(r10, 0xffffffff80000502, 0xffffffffffffffff, &(0x7f0000000440)) 3.550067293s ago: executing program 2 (id=2255): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x4001) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, r0, 0x200000) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) iopl(0x3) r3 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080)=0x2, 0x4) listen(r3, 0xa2b) listen(r3, 0x101) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x2) dup3(r7, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x46f, 0x10000, @value=r10}, 0x28) ioctl$VIDIOC_SUBDEV_S_EDID(r10, 0xc0285629, &(0x7f00000000c0)={0x0, 0x3, 0xffffffff, '\x00', &(0x7f0000000040)=0xad}) 1.646576336s ago: executing program 3 (id=2266): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc4, &(0x7f0000000140)=""/196, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = socket(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f00000000c0)={@void, @val={0x2, 0x0, 0x0, 0x9, 0x200, 0x4}, @arp=@generic={0xffff, 0x6001, 0x6, 0x9, 0x4, @local, "a7421daa7d7adee0e7", @multicast, "346d78be2e4fa606"}}, 0x2f) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmsg$qrtr(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x38, 0x40) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0xfffffffffffffedd}}, 0x1006) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bind$xdp(r5, &(0x7f0000000280)={0x2c, 0x1, r11, 0x16, r5}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000005180)=ANY=[@ANYBLOB="842300002d00090026bd70000000000004000000702318"], 0x2384}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$KVM_NMI(r2, 0xae9a) 1.177081241s ago: executing program 3 (id=2268): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc8302b063a7e25fe, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x1}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000030000000020004cb87d56af0cc4e005670447000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r3}, 0x38) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 948.789572ms ago: executing program 3 (id=2271): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x106, 0x4}}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'gre0\x00', 0x2}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000680)={{0xfffffff8, 0xb}, 0x100, './file0\x00'}) socket(0x28, 0x4, 0xfff) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x106, 0x4}}, 0x20) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'gre0\x00', 0x2}) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000680)={{0xfffffff8, 0xb}, 0x100, './file0\x00'}) (async) socket(0x28, 0x4, 0xfff) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) (async) 791.783014ms ago: executing program 3 (id=2273): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) read(r0, &(0x7f00000002c0)=""/215, 0xd7) syz_emit_ethernet(0x136, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x100, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1b, "703b744dc5c6a05fed0c0a28a5c04ec93b15911c51d9f1f265deed8eccd95784a601a0b0e6a4c3111b910f0173045fa2141e5b4595c5c99a9e655650a618f1e1b87d92c6bdc8822504781c5a026526818ceac3312187ff298ddd0b51e329a0555c732fabd5572626bc738bf5440cf57f442ac9bd7656e69c22df50f22d2bbe513c01be63f88b0536f418ebe0bf8f7e1c7ec73cf47ec436ed1d6060a46f881e8d701f56440e5259da2369e350ab54d342e18ac1fc323c56eee2eef13fd238914de7816db149570fe8ec5a49f055ba6a24df8c00000000"}]}}}}}}, 0x0) 728.18462ms ago: executing program 3 (id=2274): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000f8000/0x4000)=nil, 0x4000}}) 652.055968ms ago: executing program 3 (id=2275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x100000, 0x2000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0xa, 0x0, 0x4, {0x7ffd, 0x5, 0xffffffff, 0x6}}) (async) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0xa, 0x0, 0x4, {0x7ffd, 0x5, 0xffffffff, 0x6}}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 503.430867ms ago: executing program 0 (id=2277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x9}]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0x1, 0x2c000011) 427.044225ms ago: executing program 0 (id=2278): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$setregset(0x4205, r4, 0x6, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) 362.612228ms ago: executing program 0 (id=2279): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x144) (async, rerun: 64) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 256.255647ms ago: executing program 0 (id=2280): r0 = creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x3, 0x9}, {0xe686, 0x7}]}, 0x14, 0x2) creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) (async) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) (async) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x3, 0x9}, {0xe686, 0x7}]}, 0x14, 0x2) (async) 193.034874ms ago: executing program 0 (id=2281): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xffffffffffffff48, 0xf989, "bb653c93cf1b5dd85ce7fcfa766bb601"}]}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) close_range(r3, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) syz_open_procfs(r1, &(0x7f0000000100)='pagemap\x00') syz_open_procfs(r1, &(0x7f0000000240)='net/netfilter\x00') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r5, &(0x7f0000000200)={0x11, 0x2, r6, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8d0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0xc8, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xb1, 0x6, "957426fe6764225ae4be3075944fa0d945ec7ff4763bd1267c70be7bf2215ac1c26c6599c1d929835800cd90e4b6935baadc619e4e2283c608507ca17b1a0aa89d8c4304c1e387e886b21a150d70310d60e6caf8e386172eb1fe90037510054f7cb12162c5199ecc4859b9addc8c9b82497c0b66cd1ddaa86c985740633e06e20581e94e06d8ee947ca3c3991521c2c4122ce251817f9b6e2ef9223b0e2f1f31b7b675552ed0625aee97a15bd7"}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x40041) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c"], 0x28}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xcc, 0x0, 0x1}) 0s ago: executing program 0 (id=2282): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) r4 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0x1, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (rerun: 64) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) io_uring_enter(r4, 0x27e2, 0x0, 0x7, 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x98) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xff) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0xff) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0), &(0x7f00000004c0), 0x1000, r0}, 0x38) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x4010}, 0x18) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="373cdf2d4bf820427c000000", @ANYRES32, @ANYBLOB="0000000004000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xb, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000180)=[{0x1, 0x1, 0xa, 0x7}, {0x4, 0x3, 0x5}, {0x0, 0x4, 0xe, 0x4}, {0x2, 0x5, 0xb, 0x4}], 0x10, 0xfffffffd}, 0x94) (async) r9 = io_uring_setup(0x7939, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x1, 0x215}) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r10, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r11}, 0x3f) recvfrom(r11, &(0x7f00000004c0)=""/186, 0xba, 0x10021, 0x0, 0x0) (async) close_range(r9, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0xbb, 0x7c, &(0x7f0000000280)="6628a6a944266cf8e553ad03a0d85ddf63644d1d7d3348e88d6c5607104cc2bcc9fbc7f42b4a3d7703ecb18736ca17e2d1ddd1b9b37420f9a4c8a9eb05aa7a87901b7aea21f6a187572c2d40c796efa9ce617119ec001ef640a4b515905750157f4b28947b15eb19a3f1fc8cdbe6d28ded3911e1a56599ba83f3f9fef6d8e53e59dbc8a99d448a2bb18d61c41f810a8b7e9b7439409b7cf4960fb4624de27edbfc61c1f0a4bbe6f04224cd2cc927a51e36b0dc74a4b903e1a54ba2", &(0x7f0000000340)=""/124, 0x8, 0x0, 0xbf, 0xfc, &(0x7f00000003c0)="228c7426340ea5249d1bd981187cc2f15d9b65016f3742bf639b8c393e6b1016a81e310550c00673ecd77a9b5c16fb964357644642363c2aeffb2a15cfd25871c66d4592b2022d83515e45a114cc19f8eb68c8ced59d1b18e407a959c3fbb8defef9920e8683f0af8d44d437a6d5c085bc8a4a6d4d046991ec999aaaaa3c74436c98f5ba50a124c58145862ac6fec96a4a94def20d69ae28c574b05f4486172f8a0d03ea24b62d50ac57c76b376a39df3d8422559dac476679001c12413ca2", &(0x7f0000000480)="40ea46f298b42c048143d9ffcad011026fa5202f9e59e8a50dc449ae37b78084203d626e382dc80c4c2b62268784bb615376d092a0a3bedbac6fe5788e4cda5c5d8487d9d92c36bf2b500cf098961ef7f60a1d69f592949ec8d06c3c327a340363e64c8e9026dbeb83e9f5acc6dfe013aadc519b62949f90e2087ab70c280edd2877d006153a4d83f4714d6f3f62f5806ff297aad4b7db853b2cd6b74631aad552f738237f7d15cbbb757a89d60a8d72a28c6531afa3d73abb33ec7f97578c46749898c10b328015c53126b2ef1dde430719d9ae8c96443cacafd16f43efd7427a32a010098686a4d815ad62044a78729b70402bc679126820c2332b", 0x4, 0x0, 0x80}, 0x50) kernel console output (not intermixed with test programs): for pid=9957 comm="syz.3.1135" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.648816][ T40] audit: type=1400 audit(150.591:8725): avc: denied { ioctl } for pid=9957 comm="syz.3.1135" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.656430][ T40] audit: type=1400 audit(150.591:8726): avc: denied { create } for pid=9976 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.664362][ T40] audit: type=1400 audit(150.601:8727): avc: denied { setopt } for pid=9976 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.673174][ T40] audit: type=1400 audit(150.601:8728): avc: denied { map } for pid=9976 comm="syz.2.1141" path="socket:[37992]" dev="sockfs" ino=37992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.683030][ T40] audit: type=1400 audit(150.601:8729): avc: denied { execmem } for pid=9976 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 150.788809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.100090][T10005] hugetlbfs: syz.2.1149 (10005): Using mlock ulimits for SHM_HUGETLB is obsolete [ 151.151803][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 151.597556][T10014] overlayfs: upper fs does not support tmpfile. [ 151.650452][T10017] sp0: Synchronizing with TNC [ 151.719968][T10027] dvmrp8: entered allmulticast mode [ 151.723274][T10029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=10029 comm=syz.2.1158 [ 151.725680][T10026] dvmrp8: left allmulticast mode [ 151.776338][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.780118][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.845138][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.848735][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.113720][T10047] usb usb8: usbfs: process 10047 (syz.3.1164) did not claim interface 0 before use [ 152.186232][T10057] pim6reg: entered allmulticast mode [ 152.192848][T10057] pim6reg: left allmulticast mode [ 152.425859][T10066] mmap: syz.1.1170 (10066): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 152.489316][T10074] fuse: Bad value for 'fd' [ 152.497585][ T982] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 152.649426][ T982] usb 8-1: config 0 has no interfaces? [ 152.651318][ T982] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 152.654755][ T982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.659205][ T982] usb 8-1: config 0 descriptor?? [ 152.760658][T10081] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 152.889205][ T54] usb 8-1: USB disconnect, device number 22 [ 153.614394][T10100] tipc: Started in network mode [ 153.616025][T10100] tipc: Node identity ee3b907512c, cluster identity 4711 [ 153.618492][T10100] tipc: Enabled bearer , priority 0 [ 153.700176][T10102] "syz.1.1181" (10102) uses obsolete ecb(arc4) skcipher [ 153.984388][ T1156] tipc: Resetting bearer [ 154.357785][T10098] tipc: Resetting bearer [ 154.640924][ T60] tipc: Node number set to 4244344949 [ 154.874777][T10122] binder: 10121:10122 ioctl c0306201 0 returned -14 [ 154.927854][T10126] usb usb9: usbfs: process 10126 (syz.1.1188) did not claim interface 0 before use [ 155.049750][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 155.360479][T10132] netlink: 'syz.2.1190': attribute type 28 has an invalid length. [ 155.363152][T10132] netlink: 'syz.2.1190': attribute type 3 has an invalid length. [ 155.365872][T10132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1190'. [ 155.729501][T10098] tipc: Disabling bearer [ 155.741335][ T221] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 155.746607][ T221] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.750360][ T221] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.753580][ T221] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.815991][ T40] kauditd_printk_skb: 600 callbacks suppressed [ 155.816009][ T40] audit: type=1400 audit(155.791:9330): avc: denied { read write } for pid=5970 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.826161][ T40] audit: type=1400 audit(155.791:9331): avc: denied { open } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.834526][ T40] audit: type=1400 audit(155.791:9332): avc: denied { ioctl } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.843926][ T40] audit: type=1400 audit(155.821:9333): avc: denied { create } for pid=10139 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.886393][ T40] audit: type=1400 audit(155.861:9334): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.894078][ T40] audit: type=1400 audit(155.861:9335): avc: denied { open } for pid=5978 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.902135][ T40] audit: type=1400 audit(155.861:9336): avc: denied { ioctl } for pid=5978 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.910350][ T40] audit: type=1400 audit(155.881:9337): avc: denied { read } for pid=10141 comm="syz.0.1193" dev="nsfs" ino=4026533253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 155.917463][ T40] audit: type=1400 audit(155.881:9338): avc: denied { open } for pid=10141 comm="syz.0.1193" path="net:[4026533253]" dev="nsfs" ino=4026533253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 155.924859][ T40] audit: type=1400 audit(155.881:9339): avc: denied { create } for pid=10141 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.978980][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 155.988557][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 156.108391][T10168] comedi comedi0: Cannot bond this driver to itself! [ 156.179740][T10182] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1205'. [ 156.342018][T10194] netlink: 'syz.3.1210': attribute type 1 has an invalid length. [ 156.414386][T10204] tmpfs: Invalid gid '0x00000000ffffffff' [ 156.426342][T10207] Bluetooth: MGMT ver 1.23 [ 156.457775][T10209] netlink: 'syz.1.1214': attribute type 21 has an invalid length. [ 156.559663][T10216] IPv4: Oversized IP packet from 127.202.26.0 [ 156.564473][T10216] macsec0: entered promiscuous mode [ 156.566759][T10216] macsec0: entered allmulticast mode [ 156.570082][T10216] veth1_macvtap: entered allmulticast mode [ 156.596277][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 156.768813][T10242] netlink: 700 bytes leftover after parsing attributes in process `syz.1.1222'. [ 156.900650][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 156.903587][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1227'. [ 156.913077][ T8711] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.916774][ T8711] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.920359][ T8711] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.923096][ T8711] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.924487][T10259] ip6_tunnel: non-ECT from fc00:0000:0900:0000:0000:0000:0000:0000 with DS=0xf [ 157.537198][ T840] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 157.716602][ T840] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.720819][ T840] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.726486][ T840] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.729635][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.833767][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.838137][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.940409][ T840] usb 8-1: GET_CAPABILITIES returned 0 [ 157.942250][ T840] usbtmc 8-1:16.0: can't read capabilities [ 158.159253][ T1335] usb 8-1: USB disconnect, device number 23 [ 158.495951][T10317] netlink: 'syz.2.1244': attribute type 1 has an invalid length. [ 158.532976][T10317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.537371][T10317] bond2: (slave bond3): making interface the new active one [ 158.540912][T10317] bond2: (slave bond3): Enslaving as an active interface with an up link [ 159.588980][T10351] Driver unsupported XDP return value 0 on prog (id 234) dev N/A, expect packet loss! [ 159.765449][T10361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 159.947872][ T60] IPVS: starting estimator thread 0... [ 160.047221][T10369] IPVS: using max 45 ests per chain, 108000 per kthread [ 160.451703][T10405] fuse: Unknown parameter '1' [ 160.455078][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'. [ 160.576394][T10419] ALSA: mixer_oss: invalid OSS volume '' [ 160.670978][T10421] netlink: 'syz.3.1276': attribute type 21 has an invalid length. [ 160.674478][T10421] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1276'. [ 160.820169][ T40] kauditd_printk_skb: 908 callbacks suppressed [ 160.820182][ T40] audit: type=1400 audit(160.801:10248): avc: denied { create } for pid=10433 comm="syz.1.1280" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 160.830339][ T40] audit: type=1400 audit(160.801:10249): avc: denied { map } for pid=10433 comm="syz.1.1280" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 160.838851][ T40] audit: type=1400 audit(160.801:10250): avc: denied { read write } for pid=10433 comm="syz.1.1280" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 160.846451][ T40] audit: type=1400 audit(160.801:10251): avc: denied { execute } for pid=10433 comm="syz.1.1280" path="/334/cpu.stat" dev="tmpfs" ino=1809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.854569][ T40] audit: type=1400 audit(160.801:10252): avc: denied { write } for pid=10435 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.862847][ T40] audit: type=1400 audit(160.801:10253): avc: denied { write } for pid=10433 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.870292][ T40] audit: type=1400 audit(160.801:10254): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.878103][ T40] audit: type=1400 audit(160.801:10255): avc: denied { open } for pid=5978 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.885495][ T40] audit: type=1400 audit(160.801:10256): avc: denied { ioctl } for pid=5978 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.894243][ T40] audit: type=1400 audit(160.821:10257): avc: denied { read } for pid=10440 comm="syz.0.1283" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.948334][T10449] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 160.965392][T10449] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 160.982135][T10449] veth7: entered promiscuous mode [ 160.983804][T10449] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 161.444331][T10463] netlink: 'syz.3.1289': attribute type 7 has an invalid length. [ 161.596368][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 161.637305][T10471] 9p: Unknown Cache mode or invalid value fs [ 161.735778][T10478] fuse: Bad value for 'fd' [ 161.792980][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.795789][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.833174][T10485] kvm: pic: non byte write [ 161.835084][T10485] kvm: pic: non byte read [ 161.842605][T10485] ipvlan2: entered promiscuous mode [ 161.845131][T10485] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 161.848241][T10485] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.341321][T10505] input: syz1 as /devices/virtual/input/input16 [ 162.341878][T10507] netlink: 'syz.3.1303': attribute type 29 has an invalid length. [ 162.502825][T10521] 9pnet_fd: Insufficient options for proto=fd [ 162.514027][T10525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.516866][T10525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.737265][ T54] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.867156][ T54] usb 5-1: device descriptor read/64, error -71 [ 163.060138][T10551] syzkaller1: entered promiscuous mode [ 163.061929][T10551] syzkaller1: entered allmulticast mode [ 163.068762][T10551] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1318'. [ 163.076694][T10551] dvmrp17: entered allmulticast mode [ 163.080830][T10551] dvmrp17: left allmulticast mode [ 163.137606][ T54] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.206553][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 163.277335][ T54] usb 5-1: device descriptor read/64, error -71 [ 163.388553][ T54] usb usb5-port1: attempt power cycle [ 163.727492][ T54] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.748317][ T54] usb 5-1: device descriptor read/8, error -71 [ 163.987545][ T54] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 164.008197][ T54] usb 5-1: device descriptor read/8, error -71 [ 164.118266][ T54] usb usb5-port1: unable to enumerate USB device [ 164.359110][T10601] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1333'. [ 164.363055][T10601] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1333'. [ 164.365964][T10601] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1333'. [ 164.414093][T10606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=10606 comm=syz.3.1336 [ 164.590246][T10621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1341'. [ 164.640196][T10625] overlayfs: failed lookup in lower (newroot/347, name='file1', err=-40): overlapping layers [ 164.665804][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.670391][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.677620][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.713532][T10628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1344'. [ 164.751064][T10631] netlink: 'syz.3.1345': attribute type 20 has an invalid length. [ 164.838013][T10631] netlink: 'syz.3.1345': attribute type 20 has an invalid length. [ 164.961106][T10634] ip6tnl2: entered promiscuous mode [ 164.962876][T10634] ip6tnl2: entered allmulticast mode [ 165.269032][T10644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10644 comm=syz.1.1350 [ 165.399565][T10646] team0 (unregistering): Port device team_slave_0 removed [ 165.400277][T10646] team0 (unregistering): Port device team_slave_1 removed [ 165.525540][T10655] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 165.530326][T10657] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 165.602715][T10669] openvswitch: netlink: Unknown key attributes 2 [ 166.551708][ T40] kauditd_printk_skb: 894 callbacks suppressed [ 166.551720][ T40] audit: type=1400 audit(166.531:11152): avc: denied { read write } for pid=5974 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.561721][ T40] audit: type=1400 audit(166.541:11153): avc: denied { open } for pid=5974 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.569385][ T40] audit: type=1400 audit(166.541:11154): avc: denied { ioctl } for pid=5974 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.590117][ T40] audit: type=1400 audit(166.571:11155): avc: denied { read write } for pid=5970 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.597694][ T40] audit: type=1400 audit(166.571:11156): avc: denied { open } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.606737][ T40] audit: type=1400 audit(166.571:11157): avc: denied { ioctl } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.841304][ T40] audit: type=1400 audit(178.821:11158): avc: denied { create } for pid=10696 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.842691][T10698] __nla_validate_parse: 6 callbacks suppressed [ 178.842701][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 178.849591][ T40] audit: type=1400 audit(178.821:11159): avc: denied { setopt } for pid=10696 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.853460][T10698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10698 comm=syz.1.1362 [ 178.853755][ T40] audit: type=1400 audit(178.821:11160): avc: denied { create } for pid=10696 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.860124][T10698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10698 comm=syz.1.1362 [ 178.863496][ T40] audit: type=1400 audit(178.831:11161): avc: denied { create } for pid=10696 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.872924][T10698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10698 comm=syz.1.1362 [ 178.873341][ T40] audit: type=1400 audit(178.831:11162): avc: denied { prog_load } for pid=10694 comm="syz.0.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.880456][T10698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10698 comm=syz.1.1362 [ 178.883644][ T40] audit: type=1400 audit(178.831:11163): avc: denied { bpf } for pid=10694 comm="syz.0.1361" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.899753][ T40] audit: type=1400 audit(178.831:11164): avc: denied { perfmon } for pid=10694 comm="syz.0.1361" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.908116][ T40] audit: type=1400 audit(178.851:11165): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.915461][ T40] audit: type=1400 audit(178.851:11166): avc: denied { open } for pid=5978 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.923822][ T40] audit: type=1400 audit(178.851:11167): avc: denied { ioctl } for pid=5978 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.931292][T10707] random: crng reseeded on system resumption [ 178.941895][T10713] program syz.1.1367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.945522][T10713] SELinux: policydb version 871592192 does not match my version range 15-35 [ 178.950276][T10713] SELinux: failed to load policy [ 179.025605][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 179.280541][T10747] Invalid source name [ 179.281889][T10747] UBIFS error (pid: 10747): cannot open "/dev/sg0", error -22 [ 179.488039][T10762] tmpfs: Invalid gid '0x00000000ffffffff' [ 179.530193][T10764] can: request_module (can-proto-0) failed. [ 179.769827][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'. [ 179.840028][T10794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1397'. [ 179.883033][T10803] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 180.042504][T10814] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1403'. [ 180.364942][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1409'. [ 180.409740][T10850] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1410'. [ 180.564796][T10860] bond4: entered allmulticast mode [ 180.702161][T10883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1422'. [ 180.938938][T10911] l2tp_ppp: sess 2/0: no socket in recv [ 180.941014][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1431'. [ 180.943990][T10911] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1431'. [ 181.420110][T10960] loop2: detected capacity change from 0 to 7 [ 181.425450][T10817] Dev loop2: unable to read RDB block 7 [ 181.427519][T10817] loop2: AHDI p1 p2 p3 [ 181.428834][T10817] loop2: partition table partially beyond EOD, truncated [ 181.432211][T10817] loop2: p1 start 1601398130 is beyond EOD, truncated [ 181.434312][T10817] loop2: p2 start 1702059890 is beyond EOD, truncated [ 181.439242][T10960] Dev loop2: unable to read RDB block 7 [ 181.440980][T10960] loop2: AHDI p1 p2 p3 [ 181.443064][T10960] loop2: partition table partially beyond EOD, truncated [ 181.445851][T10960] loop2: p1 start 1601398130 is beyond EOD, truncated [ 181.448583][T10960] loop2: p2 start 1702059890 is beyond EOD, truncated [ 181.474176][T10970] zonefs (nbd1) ERROR: Not a zoned block device [ 181.605274][T10987] dvmrp1: entered allmulticast mode [ 181.847407][T11000] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 181.877743][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.880558][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.889748][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.893067][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.238073][T11027] support for the xor transformation has been removed. [ 182.242452][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.245000][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.247458][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.251392][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.254125][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.256604][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.259054][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.261656][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.264123][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.266732][T11027] netlink: 'syz.0.1468': attribute type 3 has an invalid length. [ 182.333853][T11031] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 182.525544][T11039] nbd: must specify a device to reconfigure [ 182.570443][ T54] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 182.730798][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 182.734332][ T54] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 182.737439][ T54] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10 [ 182.742983][ T54] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024 [ 182.747601][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.752339][ T54] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 182.755192][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.757798][ T54] usb 5-1: Product: syz [ 182.759162][ T54] usb 5-1: Manufacturer: syz [ 182.760891][ T54] usb 5-1: SerialNumber: syz [ 182.767672][ T54] usb 5-1: config 0 descriptor?? [ 182.782094][T11049] openvswitch: netlink: Tunnel attr 5 has unexpected len 8 expected 0 [ 182.990632][ T54] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input17 [ 182.994529][T11055] input: syz0 as /devices/virtual/input/input18 [ 183.180117][T11061] 9pnet: Unknown protocol version 9p20\++} [ 183.293531][ T8294] usb 5-1: USB disconnect, device number 13 [ 183.356879][T11101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.953462][T11138] tap0: tun_chr_ioctl cmd 1074025675 [ 183.955150][T11138] tap0: persist disabled [ 183.956578][T11139] tap0: tun_chr_ioctl cmd 1074025675 [ 183.958242][T11139] tap0: persist disabled [ 184.032388][ T40] kauditd_printk_skb: 1679 callbacks suppressed [ 184.032399][ T40] audit: type=1400 audit(183.844:12847): avc: denied { create } for pid=11146 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.046381][ T40] audit: type=1400 audit(183.844:12848): avc: denied { bind } for pid=11146 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.052925][ T40] audit: type=1400 audit(183.844:12849): avc: denied { wake_alarm } for pid=11146 comm="syz.1.1501" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.059872][ T40] audit: type=1400 audit(183.844:12850): avc: denied { write } for pid=11146 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.065775][ T40] audit: type=1400 audit(183.872:12851): avc: denied { read write } for pid=5970 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.073324][ T40] audit: type=1400 audit(183.872:12852): avc: denied { open } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.080852][ T40] audit: type=1400 audit(183.872:12853): avc: denied { ioctl } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.088783][ T40] audit: type=1400 audit(183.881:12854): avc: denied { map_create } for pid=11148 comm="syz.1.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.094635][ T40] audit: type=1400 audit(183.881:12855): avc: denied { create } for pid=11148 comm="syz.1.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.101481][ T40] audit: type=1400 audit(183.891:12856): avc: denied { create } for pid=11148 comm="syz.1.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.216693][T11155] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 184.242822][T11155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.266285][T11155] veth9: entered promiscuous mode [ 184.310745][T11158] sd 0:0:0:0: PR command failed: 1026 [ 184.312607][T11158] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 184.314774][T11158] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 185.726034][T11191] binder: 11190:11191 ioctl c0306201 200000000640 returned -22 [ 185.739139][T11191] bond4: entered promiscuous mode [ 185.740903][T11191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.753964][T11191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.756856][T11191] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 185.759857][T11191] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 185.765372][T11191] bond4: (slave ip6gre1): making interface the new active one [ 185.769162][T11191] ip6gre1: entered promiscuous mode [ 185.772742][T11191] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 185.811948][T11194] binder: 11193:11194 ioctl c0306201 200000000080 returned -14 [ 186.011322][T11212] __nla_validate_parse: 15 callbacks suppressed [ 186.011336][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 186.016407][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 186.051806][T11214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1523'. [ 186.184480][ T63] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 186.184951][ T5977] Bluetooth: hci4: command 0xfc11 tx timeout [ 186.954498][T11234] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 187.112899][T11238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1530'. [ 187.591270][T11256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 187.630853][T11258] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 187.790730][T11261] kvm: kvm [11260]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 187.794318][T11261] kvm: kvm [11260]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 187.796872][T11269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1541'. [ 187.800609][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 187.803652][T11269] ip_vti0: entered promiscuous mode [ 187.807695][T11269] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 188.065030][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 188.108934][T11277] Mount JFS Failure: -22 [ 188.236385][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 188.241381][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 188.245891][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 188.249999][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.253204][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.257355][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.260450][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.291534][T11290] validate_nla: 43 callbacks suppressed [ 188.291545][T11290] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 188.296163][T11290] NCSI netlink: No device for ifindex 0 [ 188.369312][T11293] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1548'. [ 188.406524][T11297] IPv4: Oversized IP packet from 127.202.26.0 [ 188.485070][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 188.487316][ T24] usbtmc 5-1:16.0: can't read capabilities [ 188.539348][T11303] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 188.539348][T11303] program syz.2.1552 not setting count and/or reply_len properly [ 188.552154][T11304] binder: Unknown parameter 'hash' [ 188.617564][T11317] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1556'. [ 188.706535][ T6012] usb 5-1: USB disconnect, device number 14 [ 189.032765][T11322] openvswitch: netlink: Missing key (keys=40, expected=100) [ 189.175797][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 189.335435][T11327] veth1_vlan: Device is already in use. [ 189.340615][T11327] cgroup: Need name or subsystem set [ 189.403941][ T40] kauditd_printk_skb: 655 callbacks suppressed [ 189.403954][ T40] audit: type=1400 audit(188.877:13512): avc: denied { dac_read_search } for pid=11331 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 189.414415][ T40] audit: type=1400 audit(188.877:13513): avc: denied { read } for pid=11329 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.421189][ T40] audit: type=1400 audit(188.877:13514): avc: denied { write } for pid=11329 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.428669][ T40] audit: type=1400 audit(188.886:13515): avc: denied { create } for pid=11329 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.435289][ T40] audit: type=1400 audit(188.886:13516): avc: denied { ioctl } for pid=11329 comm="syz.0.1561" path="socket:[45341]" dev="sockfs" ino=45341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.442684][ T40] audit: type=1400 audit(188.886:13517): avc: denied { create } for pid=11329 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.449497][ T40] audit: type=1400 audit(188.886:13518): avc: denied { write } for pid=11329 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.456252][ T40] audit: type=1400 audit(188.886:13519): avc: denied { module_request } for pid=11329 comm="syz.0.1561" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.463187][ T40] audit: type=1400 audit(188.895:13520): avc: denied { dac_read_search } for pid=11334 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 189.471519][ T40] audit: type=1400 audit(188.905:13521): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.515422][T11342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40062 sclass=netlink_route_socket pid=11342 comm=syz.0.1563 [ 190.025592][T11358] SELinux: failed to load policy [ 190.140086][T11365] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 190.458988][T11371] fuse: Bad value for 'rootmode' [ 190.641732][T11377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11377 comm=syz.0.1571 [ 191.072897][T11417] tmpfs: Unknown parameter 'ie' [ 191.099922][T11423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.103358][T11423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.118143][ T6012] hid (null): unknown global tag 0xd [ 191.120507][ T6012] hid (null): unknown global tag 0x4f [ 191.132947][ T6012] hid_parser_main: 5 callbacks suppressed [ 191.132960][ T6012] hid-generic 8000:0000:0B09.0005: unknown main item tag 0x6 [ 191.139314][ T6012] hid-generic 8000:0000:0B09.0005: unexpected long global item [ 191.141990][ T6012] hid-generic 8000:0000:0B09.0005: probe with driver hid-generic failed with error -22 [ 191.332191][T11442] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.673610][T11445] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.741351][T11453] bridge: RTM_NEWNEIGH with invalid ether address [ 191.751888][T11453] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.822213][T11459] tap0: tun_chr_ioctl cmd 1074025675 [ 191.824017][T11459] tap0: persist enabled [ 191.825804][T11459] tap0: tun_chr_ioctl cmd 1074025675 [ 191.827637][T11459] tap0: persist disabled [ 191.831136][T11459] netlink: 'syz.2.1596': attribute type 10 has an invalid length. [ 191.840649][T11459] team0: Port device netdevsim0 added [ 191.926631][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.931664][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.952735][T11464] Unsupported ieee802154 address type: 0 [ 191.959546][T11464] __nla_validate_parse: 4 callbacks suppressed [ 191.959556][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 192.170967][ T6131] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 192.273177][T11498] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1607'. [ 192.276640][T11499] overlayfs: failed to set uuid (457/file1, err=-1); falling back to uuid=null. [ 192.280821][T11499] overlayfs: failed to verify upper root origin [ 192.781671][T11510] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 192.792437][T11510] CIFS mount error: No usable UNC path provided in device string! [ 192.792437][T11510] [ 192.796751][T11510] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 193.394484][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'. [ 193.400409][T11538] bridge0: entered promiscuous mode [ 193.403772][T11538] bridge0: port 3(macvlan4) entered blocking state [ 193.405978][T11538] bridge0: port 3(macvlan4) entered disabled state [ 193.408106][T11538] macvlan4: entered allmulticast mode [ 193.409863][T11538] bridge0: entered allmulticast mode [ 193.413260][T11538] macvlan4: left allmulticast mode [ 193.414897][T11538] bridge0: left allmulticast mode [ 193.417459][T11538] bridge0: left promiscuous mode [ 193.527943][ T1335] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 193.594931][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 193.597941][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1622'. [ 193.599733][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 193.657295][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'. [ 193.683657][T11545] team0 (unregistering): Port device team_slave_0 removed [ 193.688404][ T1335] usb 5-1: Using ep0 maxpacket: 8 [ 193.689541][T11545] team0 (unregistering): Port device team_slave_1 removed [ 193.691578][ T1335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.695931][ T1335] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.698851][ T1335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.702895][T11545] team0 (unregistering): Port device netdevsim0 removed [ 193.703431][ T1335] usb 5-1: config 0 descriptor?? [ 193.927281][ T1335] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 194.154069][ T6131] usb 5-1: USB disconnect, device number 15 [ 194.184492][T11555] syz_tun: entered promiscuous mode [ 194.186839][T11555] macvtap1: entered promiscuous mode [ 194.190762][T11555] syz_tun: left promiscuous mode [ 194.280425][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 194.320891][T11560] fuseblk: Unknown parameter 'Rd' [ 194.322920][T11560] afs: Unknown parameter '00000000000000000003' [ 194.323965][T11561] afs: Unknown parameter '00000000000000000003' [ 194.327348][T11560] kAFS: No cell specified [ 194.459833][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1628'. [ 194.462757][T11568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.465100][T11568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.594137][T11587] netlink: 'syz.3.1633': attribute type 4 has an invalid length. [ 194.603212][T11587] netlink: 'syz.3.1633': attribute type 4 has an invalid length. [ 194.684892][T11591] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 194.700358][T11589] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 194.701674][T11596] block nbd2: Attempted send on invalid socket [ 194.702670][T11589] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.703631][T11589] vhci_hcd vhci_hcd.0: Device attached [ 194.705205][T11596] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.712355][T11596] (syz.2.1636,11596,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 194.716545][T11596] (syz.2.1636,11596,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 194.718973][T11596] (syz.2.1636,11596,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 194.721805][T11596] (syz.2.1636,11596,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 194.770162][ T40] kauditd_printk_skb: 780 callbacks suppressed [ 194.770174][ T40] audit: type=1400 audit(193.890:14302): avc: denied { read write } for pid=5979 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.780644][ T40] audit: type=1400 audit(193.890:14303): avc: denied { open } for pid=5979 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.787863][ T40] audit: type=1400 audit(193.890:14304): avc: denied { ioctl } for pid=5979 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.796603][ T40] audit: type=1400 audit(193.900:14305): avc: denied { create } for pid=11606 comm="syz.2.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.803190][ T40] audit: type=1400 audit(193.900:14306): avc: denied { write } for pid=11606 comm="syz.2.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.809357][ T40] audit: type=1400 audit(193.900:14307): avc: denied { read } for pid=11606 comm="syz.2.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.816063][ T40] audit: type=1400 audit(193.900:14308): avc: denied { read write } for pid=11606 comm="syz.2.1639" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.824351][ T40] audit: type=1400 audit(193.900:14309): avc: denied { open } for pid=11606 comm="syz.2.1639" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.831326][ T40] audit: type=1400 audit(193.900:14310): avc: denied { ioctl } for pid=11606 comm="syz.2.1639" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.838871][ T40] audit: type=1400 audit(193.956:14311): avc: denied { ioctl } for pid=11602 comm="syz.0.1637" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.960614][ T6131] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 194.983550][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 194.984582][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.989513][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.130615][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 195.136291][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.140057][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.152909][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 195.157286][ T9] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 195.161129][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.167080][ T9] usb 5-1: config 0 descriptor?? [ 195.176667][ T9] as10x_usb: device has been detected [ 195.179685][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 195.199217][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 195.219588][ T9] as10x_usb: error during firmware upload part1 [ 195.222591][ T9] Registered device nBox DVB-T Dongle [ 195.250289][T11599] vhci_hcd: connection reset by peer [ 195.257196][T10683] vhci_hcd: stop threads [ 195.259066][T10683] vhci_hcd: release socket [ 195.261249][T10683] vhci_hcd: disconnect device [ 195.388654][T11603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.391516][T11603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.403097][ T6027] usb 5-1: USB disconnect, device number 16 [ 195.420933][ T6027] Unregistered device nBox DVB-T Dongle [ 195.421735][ T6027] as10x_usb: device has been disconnected [ 195.440842][T11619] kvm: kvm [11618]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 195.445627][T11619] kvm: kvm [11618]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 195.736928][T11634] "syz.3.1649" (11634) uses obsolete ecb(arc4) skcipher [ 195.744736][T11634] comedi comedi2: dt2814: a I/O base address must be specified [ 195.836506][T11636] futex_wake_op: syz.3.1650 tries to shift op by -1; fix this program [ 196.087231][T11656] netlink: 'syz.3.1655': attribute type 10 has an invalid length. [ 198.063714][T11684] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 198.162828][T11688] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 198.165527][T11688] __nla_validate_parse: 27 callbacks suppressed [ 198.165536][T11688] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1664'. [ 198.211232][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'. [ 198.214912][T11690] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 198.220834][T11690] bridge0: entered allmulticast mode [ 198.224999][T11692] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 198.227461][T11692] netlink: 'syz.3.1666': attribute type 3 has an invalid length. [ 198.229990][T11692] netlink: 'syz.3.1666': attribute type 3 has an invalid length. [ 198.234038][T11692] netlink: 'syz.3.1666': attribute type 21 has an invalid length. [ 198.236631][T11692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1666'. [ 198.277812][T11698] omfs: Invalid superblock (0) [ 198.399832][T11711] tipc: Started in network mode [ 198.401471][T11711] tipc: Node identity d6904a703d05, cluster identity 4711 [ 198.404423][T11711] tipc: Enabled bearer , priority 0 [ 198.407497][T11711] syzkaller0: entered promiscuous mode [ 198.409259][T11711] syzkaller0: entered allmulticast mode [ 198.414637][T11713] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 198.419929][T11709] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 198.423811][T11709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.425107][T11711] syzkaller0: mtu less than device minimum [ 198.426834][T11709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.439397][T11708] tipc: Resetting bearer [ 198.442103][T11706] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 198.454510][T11708] tipc: Disabling bearer [ 198.470315][T11717] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1676'. [ 198.473215][T11717] NCSI netlink: No device for ifindex 0 [ 198.565141][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1679'. [ 198.576487][T11728] bridge3: port 1(veth0_to_bond) entered blocking state [ 198.578735][T11728] bridge3: port 1(veth0_to_bond) entered disabled state [ 198.581039][T11728] veth0_to_bond: entered allmulticast mode [ 198.583793][T11728] veth0_to_bond: entered promiscuous mode [ 198.589278][T11728] tipc: Enabled bearer , priority 10 [ 198.629171][T11733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11733 comm=syz.2.1680 [ 198.664601][T11737] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=11737 comm=syz.2.1682 [ 198.775503][T11746] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1685'. [ 198.928465][ T54] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 199.048362][T11775] loop3: detected capacity change from 0 to 1 [ 199.056674][T10817] Dev loop3: unable to read RDB block 1 [ 199.058546][T10817] loop3: unable to read partition table [ 199.060418][T10817] loop3: partition table beyond EOD, truncated [ 199.068202][T11775] Dev loop3: unable to read RDB block 1 [ 199.070173][T11775] loop3: unable to read partition table [ 199.072142][T11775] loop3: partition table beyond EOD, truncated [ 199.074294][T11775] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 199.102975][ T54] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.105965][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.109153][ T54] usb 5-1: Product: syz [ 199.110484][ T54] usb 5-1: Manufacturer: syz [ 199.111998][ T54] usb 5-1: SerialNumber: syz [ 199.115004][ T54] usb 5-1: config 0 descriptor?? [ 199.334035][T11788] overlay: Unknown parameter 'subj_type' [ 199.392743][T11791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.400064][T11791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1699'. [ 199.486084][T11793] overlay: ./bus is not a directory [ 199.551986][ T9] usb 5-1: USB disconnect, device number 17 [ 199.664397][ T1335] tipc: Node number set to 3952429680 [ 200.137838][ T40] kauditd_printk_skb: 627 callbacks suppressed [ 200.137850][ T40] audit: type=1400 audit(198.913:14939): avc: denied { create } for pid=11801 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.150110][ T40] audit: type=1400 audit(198.913:14940): avc: denied { read write } for pid=11801 comm="syz.0.1702" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 200.160089][ T40] audit: type=1400 audit(198.913:14941): avc: denied { read write open } for pid=11801 comm="syz.0.1702" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 200.169910][ T40] audit: type=1400 audit(198.913:14942): avc: denied { ioctl } for pid=11801 comm="syz.0.1702" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 200.170092][T11804] netlink: 'syz.2.1703': attribute type 25 has an invalid length. [ 200.180398][ T40] audit: type=1400 audit(198.913:14943): avc: denied { create } for pid=11801 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.191728][T11804] netdevsim netdevsim2: Direct firmware load for Mf failed with error -2 [ 200.195494][ T40] audit: type=1400 audit(198.913:14944): avc: denied { getopt } for pid=11801 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.197177][T11804] netdevsim netdevsim2: Falling back to sysfs fallback for: Mf [ 200.203169][ T40] audit: type=1400 audit(198.913:14945): avc: denied { ioctl } for pid=11801 comm="syz.0.1702" path="socket:[49194]" dev="sockfs" ino=49194 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.211853][ T40] audit: type=1400 audit(198.913:14946): avc: denied { ioctl } for pid=11801 comm="syz.0.1702" path="socket:[49193]" dev="sockfs" ino=49193 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.219450][ T40] audit: type=1400 audit(198.941:14947): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.227301][ T40] audit: type=1400 audit(198.941:14948): avc: denied { read write open } for pid=5978 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.317382][T11812] overlayfs: conflicting lowerdir path [ 200.455924][ T6131] vhci_hcd: vhci_device speed not set [ 200.497061][T11816] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 200.499666][T11816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.504009][T11816] vhci_hcd vhci_hcd.0: Device attached [ 200.507584][T11817] usbip_core: unknown command [ 200.509675][T11817] vhci_hcd: unknown pdu 0 [ 200.511484][T11817] usbip_core: unknown command [ 200.515436][ T8719] vhci_hcd: stop threads [ 200.517096][ T8719] vhci_hcd: release socket [ 200.519079][ T8719] vhci_hcd: disconnect device [ 201.267169][T11843] could not allocate digest TFM handle sha256-avx2 [ 201.570063][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 201.812068][T11878] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 201.816563][T11878] syz_tun: entered promiscuous mode [ 201.821199][T11878] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 201.849339][T11879] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 201.998643][T11881] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 202.002795][T11880] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 202.340715][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'. [ 202.407859][T11895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=11895 comm=syz.3.1728 [ 202.477080][T11908] program syz.1.1733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.546538][T11895] veth1_vlan: left promiscuous mode [ 202.611653][T11911] netlink: 'syz.1.1733': attribute type 4 has an invalid length. [ 202.651118][T11914] input: syz0 as /devices/virtual/input/input20 [ 202.694228][T11914] wg2: entered promiscuous mode [ 202.696042][T11914] wg2: entered allmulticast mode [ 202.711738][ T1335] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 202.875682][T11930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1739'. [ 202.897886][ T1335] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 202.905525][ T1335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.909035][ T1335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.913498][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.920998][ T1335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.924742][ T1335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.930035][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.938598][ T1335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.945793][ T1335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.948281][T11931] cdrom: dropping to single frame dma [ 202.952728][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.959004][ T1335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.962906][ T1335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.967594][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.975208][ T1335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.979542][ T1335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.985294][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.992835][ T1335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.996447][ T1335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.003460][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.013850][ T1335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.017416][ T1335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.024843][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.033428][T11932] delete_channel: no stack [ 203.037874][ T1335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.041349][ T1335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.057029][T11936] binder: 11935:11936 ioctl c0306201 2000000003c0 returned -14 [ 203.064483][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.085035][ T1335] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 203.090146][ T1335] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 203.093059][ T1335] usb 5-1: Product: syz [ 203.098170][ T1335] usb 5-1: Manufacturer: syz [ 203.099833][ T1335] usb 5-1: SerialNumber: syz [ 203.109924][ T1335] usb 5-1: config 0 descriptor?? [ 203.143097][ T1335] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 203.189479][T11948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.346804][ T8294] usb 5-1: USB disconnect, device number 18 [ 203.350644][ T8294] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 203.353167][T11955] dns_resolver: Unsupported content type (234) [ 203.776663][T11995] 9pnet_fd: Insufficient options for proto=fd [ 203.885204][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1759'. [ 203.985726][T12005] netlink: 27924 bytes leftover after parsing attributes in process `syz.0.1761'. [ 204.055569][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 204.166824][T12024] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1765'. [ 204.209114][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 204.538590][T12034] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 204.690126][ T6131] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 204.877120][ T6131] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.880531][ T6131] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.888040][ T6131] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.891309][ T6131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.053709][T12081] 9pnet_fd: Insufficient options for proto=fd [ 205.127954][ T6131] usb 5-1: usb_control_msg returned -32 [ 205.129768][ T6131] usbtmc 5-1:16.0: can't read capabilities [ 205.468578][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.473642][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.484970][T12103] No control pipe specified [ 205.495084][ T40] kauditd_printk_skb: 2197 callbacks suppressed [ 205.495100][ T40] audit: type=1400 audit(203.927:17146): avc: denied { create } for pid=12101 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.508508][ T40] audit: type=1400 audit(203.927:17147): avc: denied { read } for pid=12101 comm="syz.1.1784" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.515741][ T40] audit: type=1400 audit(203.927:17148): avc: denied { read open } for pid=12101 comm="syz.1.1784" path="net:[4026532882]" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.525937][ T40] audit: type=1400 audit(203.927:17149): avc: denied { create } for pid=12101 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.531991][ T40] audit: type=1400 audit(203.927:17150): avc: denied { ioctl } for pid=12101 comm="syz.1.1784" path="socket:[51554]" dev="sockfs" ino=51554 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.540468][ T40] audit: type=1400 audit(203.936:17151): avc: denied { write } for pid=12028 comm="syz.0.1767" name="usbtmc0" dev="devtmpfs" ino=3092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 205.548576][ T40] audit: type=1400 audit(203.936:17152): avc: denied { write } for pid=12028 comm="syz.0.1767" path="/dev/usbtmc0" dev="devtmpfs" ino=3092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 205.558778][ T40] audit: type=1400 audit(203.955:17153): avc: denied { prog_load } for pid=12105 comm="syz.3.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.567246][ T40] audit: type=1400 audit(203.955:17154): avc: denied { bpf } for pid=12105 comm="syz.3.1785" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.575617][ T40] audit: type=1400 audit(203.955:17155): avc: denied { perfmon } for pid=12105 comm="syz.3.1785" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.819920][T12114] fuse: Bad value for 'fd' [ 205.937801][T12116] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1790'. [ 206.039114][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 206.045692][T12121] binder: 12120:12121 ioctl 40046207 0 returned -16 [ 206.048582][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 206.050572][T12121] binder: 12120:12121 ioctl 40046207 0 returned -16 [ 206.053412][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 206.057331][T12121] binder: 12120:12121 ioctl 40046207 0 returned -16 [ 206.060127][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 206.062355][T12121] binder: 12120:12121 ioctl 40046207 0 returned -16 [ 206.065137][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 206.067070][T12121] binder: 12120:12121 ioctl 40046207 0 returned -16 [ 206.071560][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 206.073662][T12121] binder: 12120:12121 ioctl 40046207 0 returned -16 [ 206.077714][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 206.086201][T12121] binder: 12120:12121 ioctl 40046207 0 returned -16 [ 206.089846][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 206.092655][T12121] binder: 12120:12121 ioctl 40046207 0 returned -16 [ 206.439665][T12139] ipvlan0: entered promiscuous mode [ 206.441871][T12139] bridge0: port 1(ipvlan0) entered blocking state [ 206.444306][T12139] bridge0: port 1(ipvlan0) entered disabled state [ 206.446436][T12139] ipvlan0: entered allmulticast mode [ 206.448416][T12139] bridge0: entered allmulticast mode [ 206.451116][T12139] ipvlan0: left allmulticast mode [ 206.452751][T12139] bridge0: left allmulticast mode [ 206.661889][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 206.704163][T12154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.707905][T12154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.717674][T12154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.721951][T12154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.851558][T12158] fuse: Unknown parameter '' [ 207.507225][T12180] Mount JFS Failure: -22 [ 207.554313][ T8294] usb 5-1: USB disconnect, device number 19 [ 208.416795][T12233] FAT-fs (sr0): bogus number of reserved sectors [ 208.418848][T12233] FAT-fs (sr0): Can't find a valid FAT filesystem [ 208.427070][T12242] overlayfs: workdir and upperdir must reside under the same mount [ 208.680110][T12258] overlay: Bad value for 'workdir' [ 208.906062][T12268] usb usb8: usbfs: process 12268 (syz.0.1837) did not claim interface 0 before use [ 208.979705][T12274] overlayfs: conflicting options: nfs_export=on,index=off [ 209.051191][T12276] devpts: Unknown parameter 'fd' [ 209.290565][T12285] sctp: [Deprecated]: syz.2.1843 (pid 12285) Use of int in max_burst socket option deprecated. [ 209.290565][T12285] Use struct sctp_assoc_value instead [ 209.526469][T12296] virtio-fs: tag not found [ 209.529352][T12296] virtio-fs: tag not found [ 209.532694][T12296] virtio-fs: tag not found [ 209.535742][T12296] virtio-fs: tag not found [ 209.538776][T12296] virtio-fs: tag not found [ 209.541814][T12296] virtio-fs: tag not found [ 209.544631][T12296] virtio-fs: tag not found [ 209.547641][T12296] virtio-fs: tag not found [ 209.551539][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1848'. [ 209.554869][T12296] virtio-fs: tag not found [ 209.557928][T12296] virtio-fs: tag not found [ 209.562215][T12296] virtio-fs: tag not found [ 209.569986][T12296] virtio-fs: tag not found [ 209.576461][T12296] virtio-fs: tag not found [ 209.579799][T12296] virtio-fs: tag not found [ 209.583238][T12296] virtio-fs: tag not found [ 209.586379][T12296] virtio-fs: tag not found [ 209.589522][T12296] virtio-fs: tag not found [ 209.592431][T12296] virtio-fs: tag not found [ 209.595598][T12296] virtio-fs: tag not found [ 209.598808][T12296] virtio-fs: tag not found [ 209.601884][T12296] virtio-fs: tag not found [ 209.604470][T12296] virtio-fs: tag not found [ 209.607698][T12296] virtio-fs: tag not found [ 209.610522][T12296] virtio-fs: tag not found [ 209.613465][T12296] virtio-fs: tag not found [ 209.616572][T12296] virtio-fs: tag not found [ 209.619647][T12296] virtio-fs: tag not found [ 209.622715][T12296] virtio-fs: tag not found [ 209.625808][T12296] virtio-fs: tag not found [ 209.628811][T12296] virtio-fs: tag not found [ 209.633010][T12296] virtio-fs: tag not found [ 209.639080][T12296] virtio-fs: tag not found [ 209.647384][T12296] virtio-fs: tag not found [ 209.689445][T12298] 9pnet_fd: Insufficient options for proto=fd [ 209.919838][T12315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 209.941780][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 210.027819][T12324] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1858'. [ 210.142419][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'. [ 210.145414][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'. [ 210.148292][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'. [ 210.523176][T12348] SELinux: ebitmap start bit (4279173120) is beyond the end of the bitmap (1088) [ 210.529640][T12348] SELinux: failed to load policy [ 210.854972][ T40] kauditd_printk_skb: 1606 callbacks suppressed [ 210.854983][ T40] audit: type=1400 audit(208.932:18762): avc: denied { read write } for pid=5979 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.883385][ T40] audit: type=1400 audit(208.941:18763): avc: denied { read write open } for pid=5979 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.893911][ T40] audit: type=1400 audit(208.941:18764): avc: denied { ioctl } for pid=5979 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.903342][ T40] audit: type=1400 audit(208.950:18765): avc: denied { dac_read_search } for pid=12366 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 210.911061][ T40] audit: type=1400 audit(208.950:18766): avc: denied { dac_read_search } for pid=12366 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 210.920232][ T40] audit: type=1400 audit(208.950:18767): avc: denied { read write } for pid=5970 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.930049][ T40] audit: type=1400 audit(208.950:18768): avc: denied { read write open } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.939540][ T40] audit: type=1400 audit(208.950:18769): avc: denied { ioctl } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.949802][ T40] audit: type=1400 audit(208.978:18770): avc: denied { create } for pid=12372 comm="syz.2.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.956802][ T40] audit: type=1400 audit(208.978:18771): avc: denied { create } for pid=12372 comm="syz.2.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.961884][T12379] netlink: 'syz.2.1874': attribute type 13 has an invalid length. [ 210.965770][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1874'. [ 210.973732][T12379] netlink: 'syz.2.1874': attribute type 13 has an invalid length. [ 210.976297][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1874'. [ 211.286905][T12390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.354237][T12390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.463343][T12390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.526058][T12390] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.636367][T10684] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.650686][T10682] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.662478][T10684] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.670957][T10682] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.916031][T12418] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1885'. [ 211.931805][T12413] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 211.931879][T12418] syzkaller1: entered promiscuous mode [ 211.936729][T12418] syzkaller1: entered allmulticast mode [ 211.942775][T12418] gfs2meta: Unknown parameter 'barrier' [ 212.682962][T12413] overlayfs: statfs failed on './file0' [ 212.769825][ T8714] Bluetooth: hci4: Frame reassembly failed (-84) [ 212.799818][T12423] syz_tun: entered promiscuous mode [ 212.801616][T12423] macvtap1: entered promiscuous mode [ 212.807664][T12423] syz_tun: left promiscuous mode [ 213.176826][T12425] netlink: 'syz.1.1887': attribute type 6 has an invalid length. [ 213.486542][T12432] netlink: 'syz.1.1889': attribute type 30 has an invalid length. [ 213.715135][T12440] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 214.131070][T12460] fuse: Bad value for 'user_id' [ 214.132633][T12460] fuse: Bad value for 'user_id' [ 214.264379][T12465] afs: Unknown parameter 'dy.' [ 214.665816][T12475] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 214.669252][T12475] qnx6: wrong signature (magic) in superblock #1. [ 214.671289][T12475] qnx6: unable to read the first superblock [ 214.698384][T12475] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 214.909266][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 214.909296][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 215.387476][T12508] __nla_validate_parse: 2 callbacks suppressed [ 215.387488][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1914'. [ 215.471238][T12512] overlay: ./bus is not a directory [ 215.472772][T12516] overlay: ./bus is not a directory [ 216.009204][T12561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1930'. [ 216.013423][T12561] unsupported nlmsg_type 40 [ 216.032657][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 216.082131][T12573] syz.0.1933 (12573): attempted to duplicate a private mapping with mremap. This is not supported. [ 216.098240][T12573] pim6reg9: entered allmulticast mode [ 216.214924][ T40] kauditd_printk_skb: 1101 callbacks suppressed [ 216.214937][ T40] audit: type=1400 audit(213.955:19873): avc: denied { read write } for pid=5970 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.228042][ T40] audit: type=1400 audit(213.955:19874): avc: denied { read write open } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.236947][ T40] audit: type=1400 audit(213.955:19875): avc: denied { ioctl } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.246795][ T40] audit: type=1400 audit(213.973:19876): avc: denied { read write } for pid=12578 comm="syz.1.1934" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.255587][ T40] audit: type=1400 audit(213.983:19877): avc: denied { read write open } for pid=12578 comm="syz.1.1934" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.263850][ T40] audit: type=1400 audit(213.983:19878): avc: denied { ioctl } for pid=12578 comm="syz.1.1934" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.273514][ T40] audit: type=1400 audit(214.001:19879): avc: denied { read write } for pid=12578 comm="syz.1.1934" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.281831][ T40] audit: type=1400 audit(214.001:19880): avc: denied { read write open } for pid=12578 comm="syz.1.1934" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.289606][ T40] audit: type=1400 audit(214.001:19881): avc: denied { ioctl } for pid=12578 comm="syz.1.1934" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.298118][ T40] audit: type=1400 audit(214.001:19882): avc: denied { read write } for pid=12578 comm="syz.1.1934" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.347088][T12579] input: syz1 as /devices/virtual/input/input21 [ 216.730066][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'. [ 216.732967][T12585] bridge_slave_1: left allmulticast mode [ 216.734870][T12585] bridge_slave_1: left promiscuous mode [ 216.737363][T12585] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.741222][T12585] bridge_slave_0: left allmulticast mode [ 216.743042][T12585] bridge_slave_0: left promiscuous mode [ 216.744990][T12585] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.360246][T12601] netlink: 'syz.0.1939': attribute type 2 has an invalid length. [ 217.593979][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1944'. [ 217.694251][T12631] syz.1.1947: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.698872][T12631] CPU: 2 UID: 0 PID: 12631 Comm: syz.1.1947 Not tainted syzkaller #0 PREEMPT(full) [ 217.698888][T12631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.698895][T12631] Call Trace: [ 217.698900][T12631] [ 217.698905][T12631] dump_stack_lvl+0x16c/0x1f0 [ 217.698943][T12631] warn_alloc+0x248/0x3a0 [ 217.698980][T12631] ? __pfx_warn_alloc+0x10/0x10 [ 217.698990][T12631] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.699013][T12631] ? kasan_save_stack+0x42/0x60 [ 217.699024][T12631] ? kasan_save_stack+0x33/0x60 [ 217.699033][T12631] ? kasan_save_track+0x14/0x30 [ 217.699044][T12631] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 217.699060][T12631] ? __vb2_queue_alloc+0x8c9/0x1280 [ 217.699075][T12631] ? vb2_core_create_bufs+0x559/0xab0 [ 217.699091][T12631] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 217.699107][T12631] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 217.699134][T12631] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 217.699153][T12631] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.699174][T12631] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 217.699189][T12631] vmalloc_user_noprof+0x9e/0xe0 [ 217.699206][T12631] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 217.699223][T12631] vb2_vmalloc_alloc+0x135/0x3f0 [ 217.699240][T12631] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 217.699256][T12631] __vb2_queue_alloc+0x8c9/0x1280 [ 217.699279][T12631] vb2_core_create_bufs+0x559/0xab0 [ 217.699308][T12631] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 217.699328][T12631] ? __mutex_trylock_common+0xe9/0x250 [ 217.699347][T12631] vb2_create_bufs+0x5e8/0x840 [ 217.699364][T12631] ? __pfx_vb2_create_bufs+0x10/0x10 [ 217.699378][T12631] ? v4l_sanitize_colorspace+0x213/0x400 [ 217.699394][T12631] vb2_ioctl_create_bufs+0x244/0x3e0 [ 217.699408][T12631] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.699424][T12631] vidioc_create_bufs+0x7d/0xf0 [ 217.699437][T12631] v4l_create_bufs+0x156/0x270 [ 217.699456][T12631] __video_do_ioctl+0xb40/0xfc0 [ 217.699469][T12631] ? __might_fault+0xe3/0x190 [ 217.699480][T12631] ? __pfx___video_do_ioctl+0x10/0x10 [ 217.699497][T12631] video_usercopy+0x4d0/0x1720 [ 217.699509][T12631] ? __pfx___video_do_ioctl+0x10/0x10 [ 217.699520][T12631] ? selinux_kernel_read_file+0x130/0x130 [ 217.699537][T12631] ? __pfx_video_usercopy+0x10/0x10 [ 217.699559][T12631] v4l2_ioctl+0x1bd/0x250 [ 217.699568][T12631] ? __pfx_v4l2_ioctl+0x10/0x10 [ 217.699580][T12631] __x64_sys_ioctl+0x18e/0x210 [ 217.699598][T12631] do_syscall_64+0xcd/0x4c0 [ 217.699611][T12631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.699623][T12631] RIP: 0033:0x7f05ec78ebe9 [ 217.699632][T12631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.699643][T12631] RSP: 002b:00007f05ed5d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.699653][T12631] RAX: ffffffffffffffda RBX: 00007f05ec9b5fa0 RCX: 00007f05ec78ebe9 [ 217.699660][T12631] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000006 [ 217.699667][T12631] RBP: 00007f05ec811e19 R08: 0000000000000000 R09: 0000000000000000 [ 217.699674][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.699680][T12631] R13: 00007f05ec9b6038 R14: 00007f05ec9b5fa0 R15: 00007ffe73277428 [ 217.699694][T12631] [ 217.802558][T12631] Mem-Info: [ 217.803667][T12631] active_anon:31815 inactive_anon:0 isolated_anon:0 [ 217.803667][T12631] active_file:7910 inactive_file:13180 isolated_file:0 [ 217.803667][T12631] unevictable:3304 dirty:52 writeback:0 [ 217.803667][T12631] slab_reclaimable:14081 slab_unreclaimable:83872 [ 217.803667][T12631] mapped:27776 shmem:22627 pagetables:1864 [ 217.803667][T12631] sec_pagetables:311 bounce:0 [ 217.803667][T12631] kernel_misc_reclaimable:0 [ 217.803667][T12631] free:441084 free_pcp:14925 free_cma:0 [ 217.818610][T12631] Node 0 active_anon:127108kB inactive_anon:0kB active_file:31640kB inactive_file:52564kB unevictable:9680kB isolated(anon):0kB isolated(file):0kB mapped:111076kB dirty:204kB writeback:0kB shmem:86972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:14896kB pagetables:7260kB sec_pagetables:1244kB all_unreclaimable? no Balloon:0kB [ 217.829092][T12631] Node 1 active_anon:152kB inactive_anon:0kB active_file:0kB inactive_file:156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.838772][T12631] Node 0 DMA free:13484kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:72kB free_cma:0kB [ 217.847681][T12631] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 217.849602][T12631] Node 0 DMA32 free:148488kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:127108kB inactive_anon:0kB active_file:31640kB inactive_file:52564kB unevictable:9680kB writepending:204kB present:2080628kB managed:1263488kB mlocked:6144kB bounce:0kB free_pcp:50008kB local_pcp:11200kB free_cma:0kB [ 217.860846][T12631] lowmem_reserve[]: 0 0 0 0 0 [ 217.862935][T12631] Node 1 Normal free:1602364kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:152kB inactive_anon:0kB active_file:0kB inactive_file:156kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:9344kB local_pcp:3176kB free_cma:0kB [ 217.876836][T12631] lowmem_reserve[]: 0 0 0 0 0 [ 217.878905][T12631] Node 0 DMA: 13*4kB (UME) 13*8kB (UME) 11*16kB (UME) 15*32kB (UME) 8*64kB (UME) 5*128kB (UME) 3*256kB (UM) 3*512kB (ME) 3*1024kB (ME) 3*2048kB (UM) 0*4096kB = 13484kB [ 217.886318][T12631] Node 0 DMA32: 889*4kB (UM) 217*8kB (UME) 6*16kB (UE) 76*32kB (UM) 101*64kB (UME) 76*128kB (UM) 74*256kB (UME) 52*512kB (UME) 41*1024kB (UM) 12*2048kB (UM) 3*4096kB (M) = 148428kB [ 217.893788][T12631] Node 1 Normal: 23*4kB (UME) 44*8kB (UME) 36*16kB (UME) 152*32kB (UME) 61*64kB (UME) 30*128kB (UME) 18*256kB (M) 10*512kB (UME) 6*1024kB (M) 6*2048kB (UM) 381*4096kB (UM) = 1602364kB [ 217.901035][T12631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.905096][T12631] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 217.908857][T12631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.912795][T12631] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 217.916652][T12631] 43733 total pagecache pages [ 217.918599][T12631] 0 pages in swap cache [ 217.920027][T12631] Free swap = 124992kB [ 217.921362][T12631] Total swap = 124996kB [ 217.922678][T12631] 1048443 pages RAM [ 217.925231][T12631] 0 pages HighMem/MovableOnly [ 217.927173][T12631] 283258 pages reserved [ 217.928734][T12631] 0 pages cma reserved [ 218.547820][T12642] netlink: 'syz.0.1952': attribute type 12 has an invalid length. [ 218.550358][T12642] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1952'. [ 219.198575][T12687] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1963'. [ 219.236338][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 219.254811][T12691] random: crng reseeded on system resumption [ 219.460281][T12706] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1970'. [ 219.493124][T12708] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 219.497405][T12708] tipc: Enabled bearer , priority 10 [ 219.501709][T12708] overlayfs: failed to resolve './file1': -2 [ 219.554555][T12710] rpc_pipefs: Unknown parameter 'trans' [ 219.608485][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.611268][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.848719][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.851592][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.137653][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1977'. [ 220.474037][T12725] comedi comedi3: comedi_config --init_data is deprecated [ 220.791523][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 220.801711][T12744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1983'. [ 220.819264][T12744] net veth1_virt_wifi : renamed from virt_wifi0 [ 221.137540][T12766] orangefs_devreq_open: device cannot be opened in blocking mode [ 221.142025][T12763] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1989'. [ 221.356280][T12786] affs: No valid root block on device nullb0 [ 221.376082][T12789] xt_time: unknown flags 0xf4 [ 221.386662][T12789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1996'. [ 221.417790][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 221.422385][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 221.574125][ T40] kauditd_printk_skb: 2151 callbacks suppressed [ 221.574136][ T40] audit: type=1400 audit(218.959:22035): avc: denied { read write } for pid=5979 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.585486][ T40] audit: type=1400 audit(218.950:22034): avc: denied { remove_name } for pid=12801 comm="syz.1.2000" name="file0" dev="9p" ino=35913932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.595880][ T40] audit: type=1400 audit(218.959:22036): avc: denied { rename } for pid=12801 comm="syz.1.2000" name="file0" dev="9p" ino=35913932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.603442][ T40] audit: type=1400 audit(218.959:22037): avc: denied { add_name remove_name } for pid=12801 comm="syz.1.2000" name="file1" dev="9p" ino=35913944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.611470][ T40] audit: type=1400 audit(218.959:22038): avc: denied { unlink } for pid=12801 comm="syz.1.2000" name="file1" dev="9p" ino=35913944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.623527][ T40] audit: type=1400 audit(218.959:22039): avc: denied { read write open } for pid=5979 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.630717][T12806] geneve3: entered promiscuous mode [ 221.631392][ T40] audit: type=1400 audit(218.959:22040): avc: denied { ioctl } for pid=5979 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.632997][T12806] geneve3: entered allmulticast mode [ 221.633321][T10683] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.642203][ T40] audit: type=1400 audit(218.978:22041): avc: denied { read append } for pid=12809 comm="syz.3.2002" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.653558][T10683] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.658093][ T40] audit: type=1400 audit(218.978:22042): avc: denied { read open } for pid=12809 comm="syz.3.2002" path="/dev/v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.665463][ T40] audit: type=1400 audit(218.978:22043): avc: denied { ioctl } for pid=12809 comm="syz.3.2002" path="/dev/v4l-subdev5" dev="devtmpfs" ino=970 ioctlcmd=0x5657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.665930][T10683] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.675715][T10683] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.708742][T12816] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2005'. [ 221.756572][T12819] nftables ruleset with unbound chain [ 221.849416][T12828] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 222.074012][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 222.133671][T12843] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 222.202142][T12847] input: syz1 as /devices/virtual/input/input23 [ 222.551246][T12864] tmpfs: Unknown parameter '00000000000000000000003N7g> h#Bwvy' [ 222.594295][T12866] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.598951][T12866] FAT-fs (loop2): unable to read boot sector [ 222.674357][ T63] block nbd0: Receive control failed (result -32) [ 222.674659][T12829] block nbd0: shutting down sockets [ 222.737046][T12877] bridge_slave_0: entered promiscuous mode [ 222.738946][T12877] bridge_slave_0: entered allmulticast mode [ 222.820541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.823534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 223.002759][T12900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.006299][T12900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.038208][T12900] syz.1.2031 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 223.044508][T12900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2031'. [ 223.099695][T12904] 9pnet: Could not find request transport: \irtio [ 223.388670][T12923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12923 comm=syz.2.2037 [ 223.400641][T12923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12923 comm=syz.2.2037 [ 223.508700][T12929] overlayfs: failed to resolve './file1': -2 [ 223.601967][T12933] tmpfs: Bad value for 'mpol' [ 223.665548][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 223.852181][T12949] netlink: 'syz.1.2046': attribute type 4 has an invalid length. [ 223.910960][ T6131] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 223.961730][T12953] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 223.975433][T12953] CUSE: unknown device info "&b%ZW)3\my " [ 223.977748][T12953] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 223.982079][T12953] CUSE: DEVNAME unspecified [ 224.096891][ T6131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.100370][ T6131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.104244][ T6131] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.108152][ T6131] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.111011][ T6131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.116596][ T6131] usb 5-1: config 0 descriptor?? [ 224.348609][ T6131] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 225.109625][T12967] Invalid ELF header type: 3 != 1 [ 225.165471][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.171564][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.222588][T12999] __nla_validate_parse: 4 callbacks suppressed [ 226.222600][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'. [ 226.317533][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 226.472628][ T24] usb 5-1: USB disconnect, device number 20 [ 226.482768][T13008] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 226.573850][T12990] ceph: No mds server is up or the cluster is laggy [ 226.601863][T13012] input: syz0 as /devices/virtual/input/input24 [ 226.759805][ T8715] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.763348][ T8715] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.767082][ T8715] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 226.872057][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 226.940162][ T40] kauditd_printk_skb: 1075 callbacks suppressed [ 226.940204][ T40] audit: type=1400 audit(223.982:23119): avc: denied { read } for pid=13024 comm="syz.1.2070" name="v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.949890][ T40] audit: type=1400 audit(223.982:23120): avc: denied { read open } for pid=13024 comm="syz.1.2070" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.957796][ T40] audit: type=1400 audit(223.982:23121): avc: denied { ioctl } for pid=13024 comm="syz.1.2070" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.966460][ T40] audit: type=1400 audit(223.991:23122): avc: denied { ioctl } for pid=13009 comm="syz.0.2063" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.976157][ T40] audit: type=1400 audit(223.991:23123): avc: denied { setattr } for pid=13022 comm="syz.2.2069" name="sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 226.984641][ T40] audit: type=1400 audit(224.020:23124): avc: denied { read write } for pid=5979 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.993593][ T40] audit: type=1400 audit(224.020:23125): avc: denied { read write open } for pid=5979 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.001296][ T40] audit: type=1400 audit(224.020:23126): avc: denied { ioctl } for pid=5979 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.011321][ T40] audit: type=1400 audit(224.048:23127): avc: denied { read write } for pid=5970 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.018979][ T40] audit: type=1400 audit(224.048:23128): avc: denied { read write open } for pid=5970 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.032370][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 227.041569][T13032] random: crng reseeded on system resumption [ 227.049274][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.056909][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.060799][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.067440][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 227.071468][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.086624][ T24] usb 5-1: config 0 descriptor?? [ 227.544578][T13010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.557162][T13010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.575802][T13052] syz.2.2077 (13052): drop_caches: 1 [ 227.579952][T13051] syz.2.2077 (13051): drop_caches: 1 [ 228.228870][T13079] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 228.232443][T13079] overlayfs: missing 'lowerdir' [ 228.237277][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 228.241191][T13079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2082'. [ 228.394201][T13083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2084'. [ 228.714206][T13091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.867264][T13098] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2090'. [ 229.211242][T13115] tmpfs: Unknown parameter 'usrquota_inoFe_harlimit' [ 229.274086][T13115] overlayfs: missing 'workdir' [ 229.290208][T13117] vivid-001: disconnect [ 229.292820][T13117] vivid-001: reconnect [ 229.301366][T13117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13117 comm=syz.3.2096 [ 229.555080][T13126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.722146][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 229.727454][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.731850][ T24] usb 5-1: USB disconnect, device number 21 [ 229.788543][T13130] 8021q: adding VLAN 0 to HW filter on device bond7 [ 229.831648][T13130] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 229.910612][ T8713] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 229.947937][T13141] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.026525][ T8713] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 230.554060][T13160] block nbd1: Attempted send on invalid socket [ 230.557056][T13160] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.561060][T13160] befs: (nbd1): unable to read superblock [ 230.697469][ T8294] libceph: connect (1)[c::]:6789 error -13 [ 230.706752][ T8294] libceph: mon0 (1)[c::]:6789 connect error [ 230.746251][T13164] ceph: No mds server is up or the cluster is laggy [ 231.027774][T13178] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2113'. [ 231.781306][T13219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13219 comm=syz.1.2123 [ 232.007567][T13225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.231437][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2127'. [ 232.293084][ T40] kauditd_printk_skb: 2363 callbacks suppressed [ 232.293098][ T40] audit: type=1400 audit(228.909:25492): avc: denied { create } for pid=13249 comm="syz.3.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.310939][T13210] syz.0.2119 (13210): drop_caches: 2 [ 232.316030][ T40] audit: type=1400 audit(228.909:25493): avc: denied { write } for pid=13249 comm="syz.3.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.323612][ T40] audit: type=1400 audit(228.918:25494): avc: denied { read } for pid=13249 comm="syz.3.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.330919][ T40] audit: type=1400 audit(228.918:25495): avc: denied { read } for pid=13249 comm="syz.3.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.338564][ T40] audit: type=1400 audit(228.946:25496): avc: denied { write } for pid=13249 comm="syz.3.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.344786][ T40] audit: type=1400 audit(228.946:25497): avc: denied { write } for pid=13249 comm="syz.3.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.356250][ T40] audit: type=1400 audit(228.946:25498): avc: denied { create } for pid=13249 comm="syz.3.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.362217][ T40] audit: type=1400 audit(228.946:25499): avc: denied { ioctl } for pid=13249 comm="syz.3.2127" path="socket:[57717]" dev="sockfs" ino=57717 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.399003][ T40] audit: type=1400 audit(229.003:25500): avc: denied { read write } for pid=5974 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.408501][ T40] audit: type=1400 audit(229.012:25501): avc: denied { read write open } for pid=5974 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.085597][T13278] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2136'. [ 233.150842][T13281] netlink: 'syz.1.2135': attribute type 9 has an invalid length. [ 233.153443][T13281] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.2135'. [ 233.387907][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 233.387960][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 233.409876][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 233.412761][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 233.593459][T13319] netlink: 'syz.2.2147': attribute type 1 has an invalid length. [ 233.596140][T13319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2147'. [ 233.817603][T13328] kAFS: No cell specified [ 233.823562][T13328] binder: 13326:13328 ioctl 4018620d 0 returned -22 [ 233.872751][T13335] loop6: detected capacity change from 0 to 7 [ 233.883797][T13335] Dev loop6: unable to read RDB block 7 [ 233.894762][T13335] loop6: unable to read partition table [ 233.897019][T13335] loop6: partition table beyond EOD, truncated [ 233.899009][T13335] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 233.918089][T13334] overlayfs: failed lookup in lower (newroot/523, name='bus', err=-40): overlapping layers [ 234.289157][T13358] bpf: Bad value for 'uid' [ 234.298369][T13350] veth1_macvtap: left allmulticast mode [ 234.338070][ T8719] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.341689][ T8719] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.344849][ T8719] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.347684][ T8719] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.351112][ T8719] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.354728][ T8719] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.359746][ T8719] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.362969][ T8719] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.366490][T13361] netlink: 'syz.0.2164': attribute type 4 has an invalid length. [ 234.372981][T13362] netlink: 'syz.0.2164': attribute type 4 has an invalid length. [ 234.684725][T13328] binder: 13326:13328 ioctl c0306201 200000000280 returned -14 [ 234.828848][T13387] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.832913][T13387] qnx4: unable to read the superblock [ 234.843313][T13387] /dev/nullb0: Can't open blockdev [ 235.368251][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 235.524647][T13422] input: syz1 as /devices/virtual/input/input25 [ 235.579735][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 235.581478][T13425] netlink: 'syz.2.2184': attribute type 19 has an invalid length. [ 235.583664][T13426] netlink: 'syz.2.2184': attribute type 19 has an invalid length. [ 235.607637][T13430] netlink: 'syz.3.2185': attribute type 2 has an invalid length. [ 235.971835][T13448] netlink: 'syz.1.2193': attribute type 4 has an invalid length. [ 235.986648][T13448] netlink: 'syz.1.2193': attribute type 4 has an invalid length. [ 236.169039][ T5977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.174266][ T5977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.178527][ T5977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.182280][ T5977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.191267][ T5977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.206390][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.209019][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.223269][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.232408][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.235008][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.512101][T13451] chnl_net:caif_netlink_parms(): no params data found [ 236.602468][T13451] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.604783][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.607336][T13451] bridge_slave_0: entered allmulticast mode [ 236.610049][T13451] bridge_slave_0: entered promiscuous mode [ 236.615444][T13451] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.617785][T13451] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.620110][T13451] bridge_slave_1: entered allmulticast mode [ 236.623087][T13451] bridge_slave_1: entered promiscuous mode [ 236.660091][T13451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.666369][T13451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.701874][T13451] team0: Port device team_slave_0 added [ 236.706485][T13451] team0: Port device team_slave_1 added [ 236.741863][T13451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.744127][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.752680][T13451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.758754][T13451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.761077][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.769164][T13451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.813722][T13451] hsr_slave_0: entered promiscuous mode [ 236.816059][T13451] hsr_slave_1: entered promiscuous mode [ 236.818289][T13451] debugfs: 'hsr0' already exists in 'hsr' [ 236.820274][T13451] Cannot create hsr debugfs directory [ 237.387967][ T13] gretap0 (unregistering): left promiscuous mode [ 237.419571][ T13] dvmrp1 (unregistering): left allmulticast mode [ 238.166579][ T13] bond0 (unregistering): Released all slaves [ 238.247686][ T13] bond1 (unregistering): Released all slaves [ 238.328081][ T13] bond2 (unregistering): Released all slaves [ 238.340540][ T13] bond3 (unregistering): Released all slaves [ 238.349499][ T13] bond4 (unregistering): Released all slaves [ 238.396569][ T40] kauditd_printk_skb: 1290 callbacks suppressed [ 238.396585][ T40] audit: type=1400 audit(234.615:26792): avc: denied { create } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.400529][T13451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.408873][ T40] audit: type=1400 audit(234.615:26793): avc: denied { write } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.417390][ T40] audit: type=1400 audit(234.615:26794): avc: denied { read } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.420118][T13451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.425577][ T40] audit: type=1400 audit(234.624:26795): avc: denied { read } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.430866][ T63] Bluetooth: hci1: command tx timeout [ 238.434165][ T40] audit: type=1400 audit(234.624:26796): avc: denied { write } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.439854][T13451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.443122][ T40] audit: type=1400 audit(234.624:26797): avc: denied { read } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.453811][T13451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.473744][ T13] tipc: Disabling bearer [ 238.475018][ T40] audit: type=1400 audit(234.690:26798): avc: denied { create } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.478084][ T13] tipc: Left network mode [ 238.489669][ T40] audit: type=1400 audit(234.699:26799): avc: denied { write } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.498313][ T40] audit: type=1400 audit(234.699:26800): avc: denied { read } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.507348][ T40] audit: type=1400 audit(234.699:26801): avc: denied { read } for pid=13451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.521749][ T13] IPVS: stopping backup sync thread 8750 ... [ 238.639503][T13451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.697936][T13451] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.707858][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.710843][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.724007][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.727142][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.731204][T13485] cgroup: none used incorrectly [ 238.832134][ T13] batadv_slave_1: left promiscuous mode [ 238.842540][ T13] hsr_slave_0: left promiscuous mode [ 238.848250][ T13] hsr_slave_1: left promiscuous mode [ 239.373151][T13513] netlink: 'syz.2.2206': attribute type 178 has an invalid length. [ 240.299715][T13533] program syz.2.2211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.430969][T13451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.495121][T13451] veth0_vlan: entered promiscuous mode [ 240.519352][ T13] IPVS: stop unused estimator thread 0... [ 240.531033][T13451] veth1_vlan: entered promiscuous mode [ 240.571878][T13542] binder: 13541:13542 ioctl c0306201 200000000080 returned -14 [ 240.594247][T13451] veth0_macvtap: entered promiscuous mode [ 240.606373][T13451] veth1_macvtap: entered promiscuous mode [ 240.631583][T13451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.643929][T13451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.652568][ T63] Bluetooth: hci1: command tx timeout [ 240.666363][T13543] mkiss: ax0: crc mode is auto. [ 240.672739][ T8717] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.678450][ T8717] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.681592][T13543] __nla_validate_parse: 6 callbacks suppressed [ 240.681601][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2214'. [ 240.687620][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2214'. [ 240.692432][ T8717] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.702660][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.806993][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.809469][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.836929][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.840241][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.978857][T13545] random: crng reseeded on system resumption [ 242.027218][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 242.543320][T13540] kvm: emulating exchange as write [ 242.877864][ T63] Bluetooth: hci1: command tx timeout [ 243.012643][T13604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2229'. [ 243.050338][T13604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13604 comm=syz.0.2229 [ 243.234285][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805875fc00: rx timeout, send abort [ 243.239601][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805875e000: rx timeout, send abort [ 243.242295][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88805875fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 243.249061][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88805875e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 243.387155][T13614] tmpfs: Bad value for 'mpol' [ 243.421693][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'. [ 243.425242][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2234'. [ 243.490640][T13616] bridge_slave_0: default FDB implementation only supports local addresses [ 243.497803][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'. [ 243.502847][T13616] bridge_slave_0: default FDB implementation only supports local addresses [ 243.712562][T13631] loop2: detected capacity change from 0 to 7 [ 243.716835][T13631] Dev loop2: unable to read RDB block 7 [ 243.719299][T13631] loop2: unable to read partition table [ 243.722391][T13631] loop2: partition table beyond EOD, truncated [ 243.724577][T13631] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 243.762880][ T40] kauditd_printk_skb: 667 callbacks suppressed [ 243.762891][ T40] audit: type=1400 audit(239.629:27469): avc: denied { create } for pid=13634 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.772733][ T40] audit: type=1400 audit(239.647:27470): avc: denied { create } for pid=13634 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.785987][ T40] audit: type=1400 audit(239.657:27471): avc: denied { write } for pid=13634 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.792529][ T40] audit: type=1400 audit(239.666:27472): avc: denied { read } for pid=13634 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.800165][ T40] audit: type=1400 audit(239.666:27473): avc: denied { read } for pid=13634 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.807481][ T40] audit: type=1400 audit(239.675:27474): avc: denied { write } for pid=13634 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.836098][ T40] audit: type=1400 audit(239.704:27475): avc: denied { read write } for pid=13451 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.843755][ T40] audit: type=1400 audit(239.704:27476): avc: denied { read write open } for pid=13451 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.853016][ T40] audit: type=1400 audit(239.704:27477): avc: denied { ioctl } for pid=13451 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.863460][ T40] audit: type=1400 audit(239.722:27478): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.904175][T13641] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 243.908235][T13640] overlayfs: conflicting lowerdir path [ 244.002672][T13644] program syz.0.2242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.099550][ T63] Bluetooth: hci1: command tx timeout [ 248.757819][T13716] Invalid logical block size (7) [ 249.117387][ T40] kauditd_printk_skb: 1021 callbacks suppressed [ 249.117399][ T40] audit: type=1400 audit(244.642:28500): avc: denied { write } for pid=13731 comm="syz.0.2267" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 249.127381][ T40] audit: type=1400 audit(244.642:28501): avc: denied { write open } for pid=13731 comm="syz.0.2267" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 249.138400][ T40] audit: type=1400 audit(244.642:28502): avc: denied { read } for pid=13731 comm="syz.0.2267" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.150044][ T40] audit: type=1400 audit(244.642:28503): avc: denied { read open } for pid=13731 comm="syz.0.2267" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.158287][ T40] audit: type=1400 audit(244.652:28504): avc: denied { ioctl } for pid=13731 comm="syz.0.2267" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.175249][ T40] audit: type=1400 audit(244.699:28505): avc: denied { bpf } for pid=13731 comm="syz.0.2267" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.178619][T13732] program syz.0.2267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.182114][ T40] audit: type=1400 audit(244.699:28506): avc: denied { prog_load } for pid=13731 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.191080][ T40] audit: type=1400 audit(244.699:28507): avc: denied { bpf } for pid=13731 comm="syz.0.2267" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.197643][ T40] audit: type=1400 audit(244.699:28508): avc: denied { perfmon } for pid=13731 comm="syz.0.2267" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.204136][ T40] audit: type=1400 audit(244.699:28509): avc: denied { perfmon } for pid=13731 comm="syz.0.2267" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.544936][T13742] block nbd0: not configured, cannot reconfigure [ 249.625006][T13749] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 249.627424][T13749] SELinux: failed to load policy [ 249.895247][T13766] random: crng reseeded on system resumption [ 249.908504][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 250.055086][T13770] binder: 13769:13770 ioctl 4018620d 0 returned -22 [ 250.179004][T13776] overlayfs: missing 'lowerdir' [ 250.180664][T13775] overlayfs: failed to resolve './file0': -2 [ 250.568195][T13792] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 250.571959][T13792] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 250.575086][T13792] CPU: 3 UID: 0 PID: 13792 Comm: syz.0.2282 Not tainted syzkaller #0 PREEMPT(full) [ 250.579424][T13792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.582887][T13792] RIP: 0010:h5_recv+0x104/0x950 [ 250.584486][T13792] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 b6 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 250.590557][T13792] RSP: 0018:ffffc90006347c00 EFLAGS: 00010293 [ 250.592472][T13792] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ad56a [ 250.594975][T13792] RDX: ffff888056532440 RSI: ffffffff887ad5af RDI: 0000000000000005 [ 250.597609][T13792] RBP: ffffc90006347d88 R08: 0000000000000005 R09: 0000000000000000 [ 250.600122][T13792] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 250.602563][T13792] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb478e0 [ 250.605041][T13792] FS: 00007fd9ad3726c0(0000) GS:ffff8880d69b9000(0000) knlGS:0000000000000000 [ 250.607814][T13792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.609870][T13792] CR2: 0000000000000040 CR3: 000000002b3de000 CR4: 0000000000352ef0 [ 250.612118][T13792] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 250.614574][T13792] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 250.617115][T13792] Call Trace: [ 250.618181][T13792] [ 250.619133][T13792] ? __pfx_h5_recv+0x10/0x10 [ 250.620602][T13792] hci_uart_tty_receive+0x251/0x7e0 [ 250.622239][T13792] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 250.624041][T13792] tty_ioctl+0x583/0x1680 [ 250.625432][T13792] ? __pfx_tty_ioctl+0x10/0x10 [ 250.626946][T13792] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 250.629071][T13792] ? hook_file_ioctl_common+0x145/0x410 [ 250.630835][T13792] ? selinux_file_ioctl+0x180/0x270 [ 250.632466][T13792] ? selinux_file_ioctl+0xb4/0x270 [ 250.634068][T13792] ? __pfx_tty_ioctl+0x10/0x10 [ 250.635588][T13792] __x64_sys_ioctl+0x18e/0x210 [ 250.637105][T13792] do_syscall_64+0xcd/0x4c0 [ 250.638542][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.640404][T13792] RIP: 0033:0x7fd9af38ebe9 [ 250.641839][T13792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.647806][T13792] RSP: 002b:00007fd9ad372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.650386][T13792] RAX: ffffffffffffffda RBX: 00007fd9af5b6180 RCX: 00007fd9af38ebe9 [ 250.652856][T13792] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 250.655312][T13792] RBP: 00007fd9af411e19 R08: 0000000000000000 R09: 0000000000000000 [ 250.657755][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.660209][T13792] R13: 00007fd9af5b6218 R14: 00007fd9af5b6180 R15: 00007ffeada93838 [ 250.662680][T13792] [ 250.663664][T13792] Modules linked in: [ 250.665283][T13792] ---[ end trace 0000000000000000 ]--- [ 250.695100][T13792] RIP: 0010:h5_recv+0x104/0x950 [ 250.704640][T13792] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 b6 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 250.713812][T13792] RSP: 0018:ffffc90006347c00 EFLAGS: 00010293 [ 250.718623][ T6027] usb 6-1: USB disconnect, device number 11 [ 250.721030][T13792] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ad56a [ 250.732802][T13792] RDX: ffff888056532440 RSI: ffffffff887ad5af RDI: 0000000000000005 [ 250.759888][T13792] RBP: ffffc90006347d88 R08: 0000000000000005 R09: 0000000000000000 [ 250.762594][T13792] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 250.765203][T13792] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb478e0 [ 250.768008][T13792] FS: 00007fd9ad3726c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 250.770878][T13792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.772937][T13792] CR2: 00007fd9b01d0880 CR3: 000000002b3de000 CR4: 0000000000352ef0 [ 250.779623][T13792] Kernel panic - not syncing: Fatal exception [ 250.782482][T13792] Kernel Offset: disabled [ 250.783885][T13792] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:26:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806430d280 RCX=0000000000000000 RDX=0000000000004402 RSI=0000000000000000 RDI=ffff88806430d280 RBP=0000000000000001 RSP=ffffc90005fff9b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88806430f22e R13=0000000000000001 R14=ffff88806430f218 R15=0000000000000000 RIP=ffffffff8b93605a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f7cf31666c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d66b9000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000027365000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0041 [ST=0] FTW=01 MXCSR=00001f80 FPR0=c000000000000000 ffff FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffd4000315219 RBX=ffff888039b3b5c0 RCX=ffffffff82072401 RDX=ffff888025f62440 RSI=ffffffff820738ed RDI=ffffea00018a90c8 RBP=0000000000000114 RSP=ffffc9000363f830 R8 =0000000000000006 R9 =0000000000013da6 R10=0000000000062a43 R11=0000000000007bcc R12=000055556c608000 R13=ffff8880274e6040 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff82073902 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd9cb8e7d60 CR3=000000002b4ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd9cad876c3 00007fd9cad876c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd41543c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c627f3c 000055556c61b470 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c5ff498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c6185c4 000055556c616a10 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000401080008 0143d80002000700 30656c69662f2e01 ffffffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104100028100002 8004018004010000 0808060a01079800 0200070e080002a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03079a8c08000298 0312080002900306 0800028803208080 8008000280030079 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74696c6962617061 632e797469727563 657301ffffffffff ffffffd708018003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000880800800 0004010800080143 d800020007003065 6c69662f2e01ffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=fffff9400032e940 RBX=fffff9400032e941 RCX=ffffffff81fd48fa RDX=fffff9400032e941 RSI=0000000000000008 RDI=ffffea0001974a00 RBP=fffff9400032e940 RSP=ffffc90006316ad0 R8 =0000000000000000 R9 =fffff9400032e940 R10=ffffea0001974a07 R11=0000000000015644 R12=ffffea0001974a00 R13=ffff888026281738 R14=dffffc0000000000 R15=ffffea0001974a00 RIP=ffffffff8221df10 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd9b01d0880 CR3=000000002a255000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced115a50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced115bd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced115bd6 00007ffced115bdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cf2412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cf2412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cf2412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cf2412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cf2412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cf2412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643ac5 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90006347570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b111060 R15=ffffffff85643a60 RIP=ffffffff85643aef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd9ad3726c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000040 CR3=000000002b3de000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c67178f2bef9a3f7 c67178f2bef9a3f7 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 50ff55dc9cdbbe9e 625e95cc23e4953c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7b3038a1a5a3f68 d3dfc557ff25defc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff25defcd3dfc557 23e4953c625e95cc ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c12c71e9fe81ca5 055ebb0fa2d7b507 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44a126ecc5a076b0 a2218f5ce20e7629 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000