last executing test programs: 1.468983516s ago: executing program 0 (id=640): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x103) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x8000, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) pipe2$9p(&(0x7f0000000000), 0x85080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='9p_client_res\x00', r4}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.389769887s ago: executing program 0 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)={0x3, 0x0, [{0x0, 0x0, 0x7, 0x7, 0x7, 0x3, 0x3}, {0x2, 0x6, 0x0, 0x800, 0x2, 0x8, 0x4}, {0xc0000009, 0x85, 0xf, 0x5, 0xe, 0x2e, 0x8000}]}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default t'], 0x34, 0xfffffffffffffffa) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x100000, @empty, 0x9}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x700) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) capset(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x5, 0x5}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getrandom(&(0x7f0000000240)=""/278, 0x116, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001280)=[@textreal={0x8, &(0x7f0000000000)="360fc7690f26e8000066b8bbab94d20f23d00f21f86635200000030f23f8c4c3edcff2792636660fd68d7a7866b99a0000400f3267640fc71f653e660f3a17700e08d3d40f01c9", 0x47}], 0x1, 0xca, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f00000001c0)={0xb, 0x0, 0x8, 0x1, 0x4a2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x8, 0xc5, 0x9, 0x0, 0x8000000000000000, 0x8, 0x0, 0x6, 0x4, 0x5, 0x1, 0x2, 0x7, 0x6, 0x4, 0x3], 0x0, 0x8a750}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000180)=0x7fffffff) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1.313316082s ago: executing program 1 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x168, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0xfd, 0x2a, [@chsw_timing={0x68, 0x4, {0x40, 0x9}}, @ht={0x2d, 0x1a, {0x80, 0x3, 0x3, 0x0, {0x90, 0xd9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x800, 0xc}}, @mesh_chsw={0x76, 0x6, {0xd, 0x7, 0x24, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb6, 0x1}}, @dsss={0x3, 0x1, 0x7c}, @measure_req={0x26, 0xc4, {0xc3, 0x9, 0x1, "08a92691e311464ea5edf7faca81067693f3ced836fd643869c17a4fbc3aaba1d2fe3f6e8936844c6aa88dc2cf614496ee78911bc28a671b1e184214a69944d3408735e75e97bd34c69e5776a0fb3b6291b882a23fa7da4d54ec2efc4e329e37ae5e7e13f27ad5ff8d6877e5dde7418b64ab39dd94859f79f96f4d278c68e8d809c5f716d9cbb9b230052e4ea7da0e930049d599742abd117ce6182dcd4b8b397942ccbda8f43b3e0100b9b07dd750862d41ecc5f718c0644483c10c8edd528547"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x92d8}, @NL80211_ATTR_IE={0xc, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0x6}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x0) 1.237789491s ago: executing program 1 (id=647): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf252100000009001f0070687933000000000a0001007770616e33000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008015}, 0x4042000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@alu={0x4, 0x0, 0x0, 0x2, 0x9, 0x1, 0x1}, @map_fd={0x18, 0x2}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0x1, 0x1, 0x9, 0x3, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000280)={0x31, 0x2d, 0x13, 0xf, 0xb, 0xf, 0x5, 0xfe, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002f00)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x4, r8}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r10}, 0x8) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r4) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)="c4fcc473dffe8e6412e6c0952fa5c88d9f60ed1423f26c3d10b8029e163fabfdc1d6db7f30398fe74b3b19dceaa2d1fb90fd9b981e8f4a41b8792b33157ac36eed7532114b761a6e4e3266a8369113fac25afd1de5da2bf1ec706a9ec45ea7e8e4590af7f844c0f404e7a450d7de014ac187f526f54bf06de37e1b06267584e0", 0x80}], 0x1}, 0x8001) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="7000000002060100000000060000000000000000140007800800134000000003050015000700000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800014080ffffff050000000000000005000500020000000500010006000000ffd43842bfba3074f90139c20d781be5ca2edf87b4146dfc1afb8040985fc462f8976e3b81bd1c755f1fb2fc139a7ef70b3f055353606532cc993cd1e1ace33ea9c1341136ed5cb8b882f08a33e1ee5ac8e0b25b3fca442fdb1c3949fa769b1cd776fc83e1014701ea425b30a2ecf4756f126b15c4631fb3b2d26d3c0daad5b9f6db4c486e7c95e937efde79c158f138280000000000000000000000ccb52cec26da815da92cdfa202d7eaf7cfa05d2ca5bdd7f844a5b2e188adb340d35fd2c691c3676f20baefb6deb2c5ed31e9a81386a9dc5262776cad28d743a48d71dd0b7d3f862ce1e46a04e236ee2b0c37df81668db504d729bcde0673ae775e543d1e7803ff26a629b40b8f78"], 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.11057247s ago: executing program 0 (id=651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000dc0)={0x4, 0x0, [{0x100000, 0x28, &(0x7f0000000200)=""/40}, {0xd000, 0xff, &(0x7f00000008c0)=""/255}, {0x4, 0x0, 0x0}, {0xeeee0000, 0x0, 0x0}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = eventfd(0x7e4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r8) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f00007aa000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x404080, 0x1c2, 0x2}, 0x18) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x5, 0x12}, {0x401, 0x6, 0x3e, 0x8000, [0xa, 0x2, 0x7ff, 0x10a, 0x66]}}}}, 0x1f) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r10, 0x40106614, &(0x7f0000000240)) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000100)={0x1, 0x8000000000000000, 0x2, 0x0, 0x9, 0x3}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1ff}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 890.767872ms ago: executing program 3 (id=654): r0 = mq_open(&(0x7f0000000140)='{\x00', 0x40, 0x8, 0x0) mq_notify(r0, &(0x7f0000000300)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000100), 0xfffffed7) r2 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000000c0)) close_range(r2, r1, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10022, 0x0) r4 = socket(0x11, 0x5, 0x400) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'dummy0\x00', {}, 0x4}) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) mq_open(&(0x7f0000000140)='{\x00', 0x40, 0x8, 0x0) (async) mq_notify(r0, &(0x7f0000000300)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000100), 0xfffffed7) (async) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x2000) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') (async) pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) (async) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000000c0)) (async) close_range(r2, r1, 0x0) (async) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10022, 0x0) (async) socket(0x11, 0x5, 0x400) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'dummy0\x00', {}, 0x4}) (async) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) (async) 810.575087ms ago: executing program 3 (id=656): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfffffffd, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x10125) 810.266298ms ago: executing program 3 (id=657): r0 = io_uring_setup(0x260d, &(0x7f0000001300)={0x0, 0x0, 0x1046, 0x0, 0x25c}) r1 = syz_io_uring_setup(0x3d2c, &(0x7f0000000000)={0x0, 0xd454, 0x40, 0x2, 0x232, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001280)=[{&(0x7f0000000100)=""/97, 0x61}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/205, 0xcd}], 0x3) 809.312916ms ago: executing program 2 (id=658): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000009e40)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/47, 0x2f}], 0x2, &(0x7f0000000300)=""/68, 0x44}, 0x4}, {{&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/247, 0xf7}, 0x9}, {{&(0x7f0000000780)=@caif=@util, 0x80, &(0x7f0000002900)=[{&(0x7f0000000800)=""/238, 0xee}, {&(0x7f000000a040)=""/4098, 0x1002}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002940)=""/18, 0x12}, 0x6}, {{&(0x7f0000002980)=@nfc, 0x80, &(0x7f0000003d80)=[{&(0x7f0000000400)=""/160, 0xa0}, {&(0x7f0000002ac0)=""/136, 0x88}, {&(0x7f0000002b80)=""/43, 0x2b}, {&(0x7f0000002bc0)=""/164, 0xa4}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/19, 0x13}, {&(0x7f0000003cc0)=""/137, 0x89}], 0x7, &(0x7f0000003e00)=""/223, 0xdf}}, {{&(0x7f0000003f00)=@phonet, 0x80, &(0x7f0000005200)=[{&(0x7f0000003f80)=""/151, 0x97}, {&(0x7f0000004040)=""/180, 0xb4}, {&(0x7f0000004100)=""/14, 0xe}, {&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x5, &(0x7f000000b080)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000006280)=@ieee802154, 0x80, &(0x7f00000098c0)=[{&(0x7f0000006300)=""/94, 0x5e}, {&(0x7f0000006380)=""/219, 0xdb}, {&(0x7f0000006480)=""/111, 0x6f}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/185, 0xb9}, {&(0x7f00000075c0)=""/229, 0xe5}, {&(0x7f00000076c0)=""/201, 0xc9}, {&(0x7f00000077c0)=""/4096, 0x1000}, {&(0x7f00000087c0)=""/247, 0xf7}, {&(0x7f00000088c0)=""/4096, 0x1000}], 0xa}, 0x8}, {{&(0x7f0000009980)=@pppol2tp, 0x80, &(0x7f0000000580)=[{&(0x7f0000009a00)=""/111, 0x6f}, {&(0x7f0000009a80)=""/146, 0x92}, {&(0x7f0000009b40)=""/99, 0x63}, {&(0x7f0000009bc0)=""/219, 0xdb}, {&(0x7f0000009cc0)=""/122, 0x7a}], 0x5, &(0x7f0000009dc0)=""/125, 0x7d}, 0x6e}], 0x7, 0x123, &(0x7f000000a000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00), 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x47524247, 0x2, @discrete={0x7, 0x6}}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x84) 745.178649ms ago: executing program 3 (id=659): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r1 = gettid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(0xffffffffffffffff, 0x4e1c) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002b80)=ANY=[], 0x1054}}, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x47a242, 0x39) syz_open_procfs(0x0, &(0x7f0000000240)='attr/keycreate\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020}, 0x2078) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x1000, 0x0, @loopback, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)=ANY=[@ANYBLOB="2800000068000100030001000000008000000000000000000c000200030000000600000004000b0068743687db41d554502212f26223bf29eb9b24ffec2fab8607f2485d0d4d70845e30d0e9c7c1f252f9fb10414d6b0779c66e"], 0x28}}, 0x40000) 744.857928ms ago: executing program 2 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x6, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 744.416318ms ago: executing program 0 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x100000, @empty, 0x9}, 0x1c) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/247, 0xf7}], 0x3}, 0x12000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x90) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) capset(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x5, 0x5}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x1, 0x5, 0x3, 0x73e, 'syz0\x00', 0x462}, 0x4, 0x2, 0x5, 0x0, 0x1, 0x8000000, 'syz1\x00', &(0x7f00000000c0)=['/dev/kvm\x00'], 0x9}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x1, 0x5, 0x3, 0x73e, 'syz0\x00', 0x462}, 0x4, 0x2, 0x5, 0x0, 0x1, 0x8000000, 'syz1\x00', &(0x7f00000000c0)=['/dev/kvm\x00'], 0x9}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="110200003e04040024bd7000bfdbdf25d03e4398380e34ea44201b76c11fc6d20971b9b8e88bf3d2efc8ddb1c6a6ab632151320b9de987235b162bee9b121277c89681d27e927eec0cec0005297a64a0f254cdb3c6763dd93b55e0eae3ba6cefb2da48dec351ff78472e4bee4d16b2d06748e9"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r6 = socket(0x27, 0x800, 0x3) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000004000000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3200000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'pimreg1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 744.065467ms ago: executing program 3 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c0000001a001100000000000000000002000000000000000000000005001b0006000000080001007f000001"], 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) 690.664238ms ago: executing program 2 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000120060ec97000fc81100fe800000000000000000000a000000aaff020000000000000000000000000001"], 0xffe) 690.371122ms ago: executing program 3 (id=664): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x3}}, 0x20) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000180)=0x8000000000000000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000200)=0x5) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000001b00000000000000000400000000001804000000000000000000000c0000000000000056000000000000000000000000000000000000000000000000000000000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f0000000000000000000000938d5e000000000000558d7a2006c2257800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4f500000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000040f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000080000001567cc0fb18ebd10677f000000000000000000000000b038562daba737bd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000000000000000000000000000000000000000c50000000000000000000000000011000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce113362da06ccfa83f39b50390000000000000000ed2c14bc1d077b4817d693d02c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d659920000000000e5c7ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff80000ff0f000000000000000000000000000000000000deffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002292091a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000f5000000000000000000000000000000000000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000008000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d1000000000000000000df0000ecffffff0000000000000000000000000000000010be099dac2faa3c6cb226eccfecd203000072656469726563740000697456a100"/2376]}, 0x9c0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES32=r7, @ANYBLOB="f11c02000a0002"], 0x28}}, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000008010040"]) 684.89005ms ago: executing program 0 (id=665): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB='huge=always,mpol=int\x00rleave', @ANYRESDEC=r1]) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYBLOB="5014c79e921c4a71d1f6b1ab9e5882c6a328c3912325d80b67f20b7e9592432af54da088e099987217e5072607f05f765c36f875fff28c64cd2aca"], 0x478) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x140c, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x40051) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x210200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 610.968888ms ago: executing program 0 (id=666): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfffffffd, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x10125) 610.58779ms ago: executing program 2 (id=667): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r5, 0x0, 0x0, 0x9, 0x0, [0x0], [0x0, 0x0, 0x0, 0x7f5], [0x0, 0x0, 0xfffffffc]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6], [0x2b8], [], [0xfffffffffffffffc]}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000019c0)={0x64, r0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0) 550.552932ms ago: executing program 2 (id=668): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) dup2(r1, r0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x800) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x25000001) 550.361231ms ago: executing program 2 (id=669): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)) 298.530143ms ago: executing program 1 (id=670): creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) (async) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe5) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) (async) chdir(&(0x7f0000000080)='./file0\x00') (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) ftruncate(r0, 0x7f) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x3c) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x180000000) 298.302544ms ago: executing program 1 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001a00010000000000000000458d00000000000000"], 0x18}}, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 180.424941ms ago: executing program 1 (id=672): r0 = memfd_secret(0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000001080)={0xc}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x39, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) syz_emit_ethernet(0x2e, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10}}}}}}}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd600a843500383300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB], 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000180)={0x1, {0x1, 0x0, 0x0, 0x6}}) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f00000002c0)=@sr0, &(0x7f0000000140)='./bus\x00', 0x0, 0x2001008, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) syz_emit_ethernet(0x101e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x6, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "d9", '\v\fT', 0x88f7, "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"}}}}}, &(0x7f0000001040)={0x0, 0x1, [0xf39, 0x4cc, 0xf4b, 0xf18]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) syz_io_uring_setup(0x759a, &(0x7f00000010c0)={0x0, 0x9ea1, 0x800, 0x1, 0x1c8, 0x0, r4}, &(0x7f0000001140), &(0x7f0000001180)) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7ff}) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000011c0)={0xe, 0x9, 0x3dc, 0x4000}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 0s ago: executing program 1 (id=673): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000020000000f"], 0x0, 0xa4d6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x6557, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1f, 0x4}}) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x20000084, &(0x7f0000000080)={0x11, 0x4305, r7, 0x306}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r8, @ANYBLOB="060028"], 0x24}}, 0x0) r9 = dup(r3) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r11, 0x0, 0x13, &(0x7f0000000040)=0xd, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x90c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x8f8, 0x1, [@m_police={0x8f4, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51ae]}]]}, {0x83, 0x6, "a6156c84954fc79ec0aa1df401c07efaba30e95639d03ed4fcad999c184ef8bb182955cdf6d0e6c342b161c6f29b91b717a8fa9d8637bf2bdafd8cb1ae5272603ddf422876cc07b7493ffd7781d302d6abe4e7a2d8e39414b191f62005ccae2224d6b5b0f0672a5d8875b4ecc3086d46af221bb30b68b6c47d1884e311b363"}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x90c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0286405, &(0x7f0000000180)={0x9, 0x0, {0xffffffffffffffff}, {0x0}, 0x7, 0x1}) setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000200)={{{@in=@broadcast, @in=@empty, 0x4e23, 0x0, 0x4e22, 0xc00, 0xa, 0x80, 0x0, 0x67, r7, r13}, {0x45, 0x3, 0x7, 0xfffffffffffffffd, 0x9, 0x58, 0x8, 0x1}, {0x3, 0xfffffffffffffffb, 0x101, 0x8}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x3, 0x3}, {{@in=@multicast2, 0x4d2, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3500, 0x4, 0x2, 0x8, 0x7, 0x401, 0x40d}}, 0xe8) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_RUN(r10, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 38.129043][ T39] audit: type=1400 audit(1737069822.838:80): avc: denied { write } for pid=5912 comm="sh" path="pipe:[2783]" dev="pipefs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.137948][ T39] audit: type=1400 audit(1737069822.838:81): avc: denied { rlimitinh } for pid=5912 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.145087][ T39] audit: type=1400 audit(1737069822.838:82): avc: denied { siginh } for pid=5912 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:13661' (ED25519) to the list of known hosts. [ 39.315038][ T39] audit: type=1400 audit(1737069824.038:83): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.321459][ T39] audit: type=1400 audit(1737069824.038:84): avc: denied { append } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.327872][ T39] audit: type=1400 audit(1737069824.038:85): avc: denied { open } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.334251][ T39] audit: type=1400 audit(1737069824.038:86): avc: denied { getattr } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.340615][ T39] audit: type=1400 audit(1737069824.048:87): avc: denied { name_bind } for pid=5918 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.824434][ T5920] cgroup: Unknown subsys name 'net' [ 40.971936][ T5920] cgroup: Unknown subsys name 'cpuset' [ 40.974877][ T5920] cgroup: Unknown subsys name 'rlimit' [ 41.151258][ T5925] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.776975][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.488400][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 43.488411][ T39] audit: type=1400 audit(1737069828.208:105): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.687658][ T39] audit: type=1400 audit(1737069828.408:106): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.698755][ T39] audit: type=1400 audit(1737069828.418:107): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.705440][ T39] audit: type=1400 audit(1737069828.418:108): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.715382][ T39] audit: type=1400 audit(1737069828.438:109): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[3573]" dev="sockfs" ino=3573 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.749459][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.753675][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.756988][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.759900][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.763340][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.766381][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.767062][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.769421][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.772879][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.775126][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.777556][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.779105][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.781295][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.782785][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.783215][ T5940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.783668][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.784137][ T5943] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.784222][ T5935] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.784266][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.784462][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.792393][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.793675][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.795344][ T39] audit: type=1400 audit(1737069828.508:110): avc: denied { read } for pid=5931 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.795365][ T39] audit: type=1400 audit(1737069828.508:111): avc: denied { open } for pid=5931 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.795911][ T39] audit: type=1400 audit(1737069828.508:112): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.798372][ T5944] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.832249][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.904661][ T39] audit: type=1400 audit(1737069828.628:113): avc: denied { module_request } for pid=5937 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 43.949060][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 44.012400][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 44.068421][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.070896][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.073234][ T5937] bridge_slave_0: entered allmulticast mode [ 44.075492][ T5937] bridge_slave_0: entered promiscuous mode [ 44.080709][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.082872][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.085056][ T5937] bridge_slave_1: entered allmulticast mode [ 44.087438][ T5937] bridge_slave_1: entered promiscuous mode [ 44.112887][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.120789][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 44.125121][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 44.132144][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.152586][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.155223][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.157868][ T5931] bridge_slave_0: entered allmulticast mode [ 44.160665][ T5931] bridge_slave_0: entered promiscuous mode [ 44.165368][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.168129][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.171096][ T5931] bridge_slave_1: entered allmulticast mode [ 44.174060][ T5931] bridge_slave_1: entered promiscuous mode [ 44.226483][ T5937] team0: Port device team_slave_0 added [ 44.243729][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.247813][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.251840][ T5937] team0: Port device team_slave_1 added [ 44.312753][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.314758][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.322130][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.341705][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.343780][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.345863][ T5932] bridge_slave_0: entered allmulticast mode [ 44.348001][ T5932] bridge_slave_0: entered promiscuous mode [ 44.352478][ T5931] team0: Port device team_slave_0 added [ 44.355133][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.357118][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.364529][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.367874][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.369956][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.371988][ T5939] bridge_slave_0: entered allmulticast mode [ 44.374108][ T5939] bridge_slave_0: entered promiscuous mode [ 44.376692][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.378917][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.381003][ T5939] bridge_slave_1: entered allmulticast mode [ 44.383122][ T5939] bridge_slave_1: entered promiscuous mode [ 44.385104][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.387144][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.389732][ T5932] bridge_slave_1: entered allmulticast mode [ 44.393272][ T5932] bridge_slave_1: entered promiscuous mode [ 44.397571][ T5931] team0: Port device team_slave_1 added [ 44.449859][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.452344][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.460825][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.465067][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.469166][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.479549][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.481509][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.490441][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.494535][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.498521][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.512627][ T5937] hsr_slave_0: entered promiscuous mode [ 44.515078][ T5937] hsr_slave_1: entered promiscuous mode [ 44.567440][ T5939] team0: Port device team_slave_0 added [ 44.598542][ T5931] hsr_slave_0: entered promiscuous mode [ 44.600697][ T5931] hsr_slave_1: entered promiscuous mode [ 44.602719][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.604947][ T5931] Cannot create hsr debugfs directory [ 44.607822][ T5939] team0: Port device team_slave_1 added [ 44.611049][ T5932] team0: Port device team_slave_0 added [ 44.649745][ T5932] team0: Port device team_slave_1 added [ 44.655132][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.657001][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.664294][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.704555][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.706584][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.713839][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.730371][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.732945][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.742706][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.751355][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.754012][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.763751][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.851698][ T5939] hsr_slave_0: entered promiscuous mode [ 44.853764][ T5939] hsr_slave_1: entered promiscuous mode [ 44.855774][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.857943][ T5939] Cannot create hsr debugfs directory [ 44.866070][ T5932] hsr_slave_0: entered promiscuous mode [ 44.869147][ T5932] hsr_slave_1: entered promiscuous mode [ 44.871892][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.874950][ T5932] Cannot create hsr debugfs directory [ 45.010259][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.023285][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.040330][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.060808][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.068873][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.074046][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.081343][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.085320][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.103484][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.106836][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.110407][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.113696][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.137076][ T5932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.140439][ T5932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.143966][ T5932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.147214][ T5932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.203849][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.210747][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.229677][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.236328][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.240515][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.248650][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.253195][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.255385][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.258447][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.260569][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.265624][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.272369][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.275280][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.284296][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.287096][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.298641][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.302359][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.304430][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.310637][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.312801][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.322048][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.324170][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.339003][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.341453][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.378301][ T39] audit: type=1400 audit(1737069830.098:114): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.422540][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.437635][ T5939] veth0_vlan: entered promiscuous mode [ 45.451316][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.454535][ T5939] veth1_vlan: entered promiscuous mode [ 45.457314][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.473734][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.483887][ T5939] veth0_macvtap: entered promiscuous mode [ 45.493294][ T5939] veth1_macvtap: entered promiscuous mode [ 45.503972][ T5932] veth0_vlan: entered promiscuous mode [ 45.512537][ T5937] veth0_vlan: entered promiscuous mode [ 45.515323][ T5932] veth1_vlan: entered promiscuous mode [ 45.520984][ T5937] veth1_vlan: entered promiscuous mode [ 45.526558][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.531882][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.540172][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.542679][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.545085][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.547460][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.551624][ T5931] veth0_vlan: entered promiscuous mode [ 45.557971][ T5937] veth0_macvtap: entered promiscuous mode [ 45.564406][ T5937] veth1_macvtap: entered promiscuous mode [ 45.571127][ T5931] veth1_vlan: entered promiscuous mode [ 45.588111][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.591561][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.594803][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.599892][ T5932] veth0_macvtap: entered promiscuous mode [ 45.603479][ T5932] veth1_macvtap: entered promiscuous mode [ 45.611300][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.614260][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.618322][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.623604][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.626938][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.630375][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.632880][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.651401][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.654398][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.657166][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.660440][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.663839][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.666504][ T5931] veth0_macvtap: entered promiscuous mode [ 45.669759][ T5931] veth1_macvtap: entered promiscuous mode [ 45.670226][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.673839][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.674704][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.679481][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.682276][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.685357][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.689681][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.695283][ T5932] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.697767][ T5932] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.700295][ T5932] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.702949][ T5932] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.725987][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.728311][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.737632][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.740750][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.743611][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.746621][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.749813][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.752814][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.756204][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.760065][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.762580][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.767702][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.772718][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.775519][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.778479][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.781299][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.784246][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.787784][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.792749][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.792845][ T5931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.795028][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.797449][ T5931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.802100][ T5931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.804728][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.811193][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.821944][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.824189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.849400][ T5942] Bluetooth: hci3: command tx timeout [ 45.849771][ T5944] Bluetooth: hci0: command tx timeout [ 45.850316][ T5934] Bluetooth: hci1: command tx timeout [ 45.850440][ T5934] Bluetooth: hci2: command tx timeout [ 45.866520][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.870155][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.878023][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.882795][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.885422][ T6000] afs: Unknown parameter '' [ 45.892206][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'. [ 45.895962][ T6002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5'. [ 45.899468][ T6002] Zero length message leads to an empty skb [ 45.899769][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.903431][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.913926][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.992556][ T6007] sd 0:0:0:0: PR command failed: 1026 [ 45.994391][ T6007] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 45.996598][ T6007] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 46.004317][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 46.059376][ T6025] 9pnet_fd: Insufficient options for proto=fd [ 46.199639][ T831] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 46.351288][ T831] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 46.353787][ T831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.357491][ T831] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 46.360407][ T831] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 46.362777][ T831] usb 6-1: Manufacturer: syz [ 46.365728][ T831] usb 6-1: config 0 descriptor?? [ 46.419013][ T831] rc_core: IR keymap rc-hauppauge not found [ 46.421539][ T831] Registered IR keymap rc-empty [ 46.424151][ T831] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 46.427372][ T831] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 46.443494][ T6047] netlink: 'syz.2.16': attribute type 13 has an invalid length. [ 46.576525][ T831] usb 6-1: USB disconnect, device number 2 [ 46.662123][ T6057] sd 0:0:0:0: PR command failed: 1026 [ 46.663843][ T6057] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 46.665916][ T6057] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 46.694431][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 46.809522][ T6069] fuse: Bad value for 'fd' [ 46.861595][ T6073] ieee802154 phy0 wpan0: encryption failed: -22 [ 47.012507][ T6083] sd 0:0:0:0: PR command failed: 1026 [ 47.014386][ T6083] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 47.016614][ T6083] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 47.029685][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 47.518256][ T6123] sd 0:0:0:0: PR command failed: 1026 [ 47.520122][ T6123] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 47.522185][ T6123] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 47.928779][ T5942] Bluetooth: hci3: command tx timeout [ 47.938799][ T5942] Bluetooth: hci0: command tx timeout [ 47.939063][ T5940] Bluetooth: hci2: command tx timeout [ 47.941080][ T5942] Bluetooth: hci1: command tx timeout [ 49.004488][ T39] kauditd_printk_skb: 118 callbacks suppressed [ 49.004498][ T39] audit: type=1400 audit(1737069833.728:233): avc: denied { create } for pid=6128 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.011958][ T39] audit: type=1400 audit(1737069833.738:234): avc: denied { bind } for pid=6128 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.017410][ T39] audit: type=1400 audit(1737069833.738:235): avc: denied { bind } for pid=6128 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.024139][ T39] audit: type=1400 audit(1737069833.738:236): avc: denied { write } for pid=6128 comm="syz.3.43" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.030885][ T39] audit: type=1400 audit(1737069833.738:237): avc: denied { create } for pid=6128 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.036665][ T39] audit: type=1400 audit(1737069833.738:238): avc: denied { write } for pid=6128 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.045097][ T39] audit: type=1400 audit(1737069833.738:239): avc: denied { write } for pid=6128 comm="syz.3.43" path="socket:[8586]" dev="sockfs" ino=8586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.065016][ T39] audit: type=1400 audit(1737069833.788:240): avc: denied { read write } for pid=6133 comm="syz.3.45" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 49.073205][ T39] audit: type=1400 audit(1737069833.788:241): avc: denied { open } for pid=6133 comm="syz.3.45" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 49.082768][ T39] audit: type=1400 audit(1737069833.788:242): avc: denied { map } for pid=6133 comm="syz.3.45" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 49.102538][ T6144] fuse: Unknown parameter 'grÿÿ' [ 49.156181][ T6147] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 49.156181][ T6147] The task syz.1.48 (6147) triggered the difference, watch for misbehavior. [ 49.164253][ T6147] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 49.167396][ T6147] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 49.183428][ T6151] fuse: Unknown parameter '€' [ 49.248854][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.277965][ T6158] netlink: 'syz.3.52': attribute type 21 has an invalid length. [ 49.280359][ T6158] netlink: 156 bytes leftover after parsing attributes in process `syz.3.52'. [ 49.345140][ T6160] ebt_limit: overflow, try lower: 570423552/2483027968 [ 49.399995][ T25] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 49.402942][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.406496][ T25] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 49.409326][ T25] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 49.411929][ T25] usb 5-1: Manufacturer: syz [ 49.414693][ T25] usb 5-1: config 0 descriptor?? [ 49.458845][ T25] rc_core: IR keymap rc-hauppauge not found [ 49.460728][ T25] Registered IR keymap rc-empty [ 49.463288][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 49.468123][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 49.620233][ T35] usb 5-1: USB disconnect, device number 2 [ 50.008885][ T5942] Bluetooth: hci2: command tx timeout [ 50.009023][ T5944] Bluetooth: hci0: command tx timeout [ 50.011073][ T5942] Bluetooth: hci1: command tx timeout [ 50.013036][ T5944] Bluetooth: hci3: command tx timeout [ 50.135905][ T6176] syz.2.57 uses obsolete (PF_INET,SOCK_PACKET) [ 50.161846][ T6179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.58'. [ 50.302966][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 50.312127][ T6192] netlink: 'syz.0.63': attribute type 39 has an invalid length. [ 50.448750][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 50.467236][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.470995][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.473721][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 50.474124][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'. [ 50.477346][ T35] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 50.477359][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.486738][ T35] usb 6-1: config 0 descriptor?? [ 50.649960][ T30] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.656952][ T6217] netlink: 'syz.0.72': attribute type 6 has an invalid length. [ 50.660249][ T6217] netlink: 'syz.0.72': attribute type 6 has an invalid length. [ 50.663139][ T6217] netlink: 'syz.0.72': attribute type 6 has an invalid length. [ 50.665998][ T6217] netlink: 'syz.0.72': attribute type 6 has an invalid length. [ 50.668234][ T6217] netlink: 'syz.0.72': attribute type 6 has an invalid length. [ 50.670913][ T6217] netlink: 'syz.0.72': attribute type 6 has an invalid length. [ 50.673125][ T6217] netlink: 'syz.0.72': attribute type 6 has an invalid length. [ 50.711476][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 50.714707][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 50.801089][ T30] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 50.804067][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.819953][ T30] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 50.823224][ T30] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 50.825918][ T30] usb 8-1: Manufacturer: syz [ 50.829790][ T30] usb 8-1: config 0 descriptor?? [ 50.879892][ T30] rc_core: IR keymap rc-hauppauge not found [ 50.884595][ T30] Registered IR keymap rc-empty [ 50.886320][ T30] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 50.896430][ T30] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input7 [ 50.903277][ T35] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 50.905317][ T35] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 50.907958][ T35] shield 0003:0955:7214.0002: unknown main item tag 0x1 [ 50.913403][ T35] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 50.916811][ T35] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 50.921829][ T35] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 50.968558][ T35] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 50.973683][ T35] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 51.014965][ T6234] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.034311][ T30] usb 8-1: USB disconnect, device number 2 [ 51.095919][ T6238] __nla_validate_parse: 2 callbacks suppressed [ 51.095930][ T6238] netlink: 500 bytes leftover after parsing attributes in process `syz.0.79'. [ 51.101773][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'. [ 51.102380][ T1481] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 51.105385][ T2296] usb 6-1: USB disconnect, device number 3 [ 51.107967][ T1481] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 51.112811][ T1481] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 51.116010][ T1481] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 51.644954][ T6248] overlay: ./file1 is not a directory [ 51.818797][ T831] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.998953][ T831] usb 8-1: Using ep0 maxpacket: 8 [ 52.009809][ T831] usb 8-1: unable to get BOS descriptor or descriptor too short [ 52.012120][ T831] usb 8-1: no configurations [ 52.013564][ T831] usb 8-1: can't read configurations, error -22 [ 52.099815][ T5940] Bluetooth: hci2: command tx timeout [ 52.100620][ T5942] Bluetooth: hci1: command tx timeout [ 52.608778][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.622634][ T6277] fuse: Invalid rootmode [ 52.760903][ T30] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 52.763466][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.767098][ T30] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 52.770049][ T30] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 52.772597][ T30] usb 5-1: Manufacturer: syz [ 52.775839][ T30] usb 5-1: config 0 descriptor?? [ 52.818747][ T30] rc_core: IR keymap rc-hauppauge not found [ 52.820496][ T30] Registered IR keymap rc-empty [ 52.822806][ T30] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 52.826240][ T30] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 52.950492][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 52.953144][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 52.955664][ T6284] validate_nla: 61 callbacks suppressed [ 52.955671][ T6284] netlink: 'syz.2.95': attribute type 12 has an invalid length. [ 52.980537][ T5976] usb 5-1: USB disconnect, device number 3 [ 53.229939][ T6287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.235700][ T6287] overlay: ./file0 is not a directory [ 53.452494][ T6277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.455192][ T6277] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.462852][ T6277] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.465164][ T6277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.467503][ T6277] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.470730][ T6277] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.473814][ T6277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.476225][ T6277] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.479108][ T6277] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.482839][ T6277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.484800][ T6277] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.489069][ T6277] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.539496][ T6294] Bluetooth: MGMT ver 1.23 [ 53.554793][ T6296] syz.3.99: attempt to access beyond end of device [ 53.554793][ T6296] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 53.558611][ T6296] syz.3.99: attempt to access beyond end of device [ 53.558611][ T6296] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 53.562482][ T6296] syz.3.99: attempt to access beyond end of device [ 53.562482][ T6296] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 53.566412][ T6296] syz.3.99: attempt to access beyond end of device [ 53.566412][ T6296] nbd3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 53.570727][ T6296] syz.3.99: attempt to access beyond end of device [ 53.570727][ T6296] nbd3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 53.574360][ T6296] syz.3.99: attempt to access beyond end of device [ 53.574360][ T6296] nbd3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 53.581566][ T6296] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 53.583780][ T6296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.728472][ T6310] netlink: 80 bytes leftover after parsing attributes in process `syz.3.103'. [ 53.756345][ T6312] process 'syz.0.104' launched './file2' with NULL argv: empty string added [ 53.988049][ T6321] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.991434][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 54.098758][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.260933][ T30] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 54.263501][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.267130][ T30] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 54.270109][ T30] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 54.272644][ T30] usb 5-1: Manufacturer: syz [ 54.276364][ T30] usb 5-1: config 0 descriptor?? [ 54.329256][ T30] rc_core: IR keymap rc-hauppauge not found [ 54.331525][ T30] Registered IR keymap rc-empty [ 54.334958][ T30] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 54.338464][ T30] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 54.392307][ T6325] fuse: Bad value for 'group_id' [ 54.394458][ T6325] fuse: Bad value for 'group_id' [ 54.397877][ T39] kauditd_printk_skb: 54 callbacks suppressed [ 54.397886][ T39] audit: type=1400 audit(1737069839.118:297): avc: denied { create } for pid=6324 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.406422][ T39] audit: type=1400 audit(1737069839.118:298): avc: denied { bind } for pid=6324 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.413213][ T39] audit: type=1400 audit(1737069839.128:299): avc: denied { write } for pid=6324 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.435174][ T6327] binder: 6326:6327 unknown command 0 [ 54.436905][ T6327] binder: 6326:6327 ioctl c0306201 200001c0 returned -22 [ 54.474428][ T6329] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 54.480240][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 54.482867][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 54.483277][ T30] usb 5-1: USB disconnect, device number 4 [ 54.627818][ T6332] netlink: 160 bytes leftover after parsing attributes in process `syz.3.111'. [ 54.631801][ T39] audit: type=1400 audit(1737069839.358:300): avc: denied { create } for pid=6331 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 54.635061][ T6334] netlink: 'syz.2.112': attribute type 3 has an invalid length. [ 54.637110][ T39] audit: type=1400 audit(1737069839.358:301): avc: denied { setopt } for pid=6331 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 54.639571][ T6334] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 54.644526][ T39] audit: type=1400 audit(1737069839.358:302): avc: denied { ioctl } for pid=6331 comm="syz.3.111" path="socket:[11716]" dev="sockfs" ino=11716 ioctlcmd=0x64a4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.646847][ T6334] netlink: 216 bytes leftover after parsing attributes in process `syz.2.112'. [ 54.656742][ T6334] NCSI netlink: No device for ifindex 33022 [ 54.692209][ T39] audit: type=1400 audit(1737069839.418:303): avc: denied { map } for pid=6336 comm="syz.2.113" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.699398][ T39] audit: type=1400 audit(1737069839.418:304): avc: denied { execute } for pid=6336 comm="syz.2.113" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.715507][ T39] audit: type=1400 audit(1737069839.438:305): avc: denied { write } for pid=6331 comm="syz.3.111" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.722577][ T39] audit: type=1400 audit(1737069839.438:306): avc: denied { ioctl } for pid=6331 comm="syz.3.111" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x64ab scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.739804][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 54.830881][ T6344] fuse: Unknown parameter 'fd5ŸèwÔ7±#ìQ¶Ý;ëÕbÄØyGÉÜÅø"J¿!iIvs@°f×pµR±Ì°€mÍ&A£ÚRíö‚Ÿ*gú‘_om”ØÛ*m ×a6?2ûaJùTì©õäs}p;ÒÂÓkî-™±éƒŽ.®§acÞÓ†:“s˜k7²ÌH/0I(UÝ÷$?KäHò€Þ貎˜yæ®CXpþñ€¥†ñpF\T^wÍUýx@´eR~ͦ{u ÎÒu¹Y}• /$›£á›PFµä0000000000000000000300000000000000000003000000000000000000000000000000000000000600000000000000000000' [ 54.891193][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 54.907607][ T6352] kAFS: No cell specified [ 54.910026][ T6352] overlayfs: missing 'lowerdir' [ 55.108141][ T6373] zonefs (nbd3) ERROR: Not a zoned block device [ 55.111672][ T6377] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 55.152560][ T6377] evm: overlay not supported [ 55.314711][ T6404] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 55.353977][ T6410] fuse: Unknown parameter 'f6' [ 55.357071][ T6410] tmpfs: Bad value for 'mpol' [ 55.385381][ T6414] warning: `syz.2.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.418849][ T5976] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 55.538801][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 55.538848][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 55.538930][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.580619][ T5976] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 55.583078][ T5976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.586621][ T5976] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 55.589455][ T5976] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 55.591791][ T5976] usb 8-1: Manufacturer: syz [ 55.594437][ T5976] usb 8-1: config 0 descriptor?? [ 55.648760][ T5976] rc_core: IR keymap rc-hauppauge not found [ 55.650620][ T5976] Registered IR keymap rc-empty [ 55.652528][ T5976] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 55.656013][ T5976] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input11 [ 55.708960][ T6434] raw_sendmsg: syz.2.146 forgot to set AF_INET. Fix it! [ 55.803323][ T6439] afs: Unknown parameter 'd•|' [ 55.803452][ T831] usb 8-1: USB disconnect, device number 5 [ 56.018790][ T5940] Bluetooth: hci4: command 0xfc11 tx timeout [ 56.019312][ T5942] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 56.808819][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 56.809040][ T1481] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 56.960756][ T1481] usb 8-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.964945][ T1481] usb 8-1: config 1 interface 0 has no altsetting 0 [ 57.129037][ T6490] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.222503][ T6494] __nla_validate_parse: 1 callbacks suppressed [ 57.222519][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 57.229778][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 57.337944][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 57.345542][ T6504] serio: Serial port ptm0 [ 57.380515][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 57.383775][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 57.386944][ T6508] netlink: 'syz.0.170': attribute type 5 has an invalid length. [ 57.608942][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.608968][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.608985][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.668751][ T6078] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.818884][ T6078] usb 5-1: Using ep0 maxpacket: 32 [ 57.821761][ T6078] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.824395][ T6078] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.827138][ T6078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.830016][ T6078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.833191][ T6078] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.837764][ T6078] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.842237][ T6078] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.844938][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.849075][ T6078] usb 5-1: config 0 descriptor?? [ 58.057420][ T6078] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 58.148091][ T6513] block device autoloading is deprecated and will be removed. [ 58.150291][ T6515] xt_TPROXY: Can be used only with -p tcp or -p udp [ 58.151716][ T6513] syz.1.172: attempt to access beyond end of device [ 58.151716][ T6513] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.196673][ T6519] netlink: 'syz.1.174': attribute type 2 has an invalid length. [ 58.207754][ T6519] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 58.246771][ T6523] loop6: detected capacity change from 0 to 524287999 [ 58.251880][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.255496][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.259099][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.262467][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.265066][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.268586][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.271913][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.275583][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.279094][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.281770][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.284296][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.287363][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.291776][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.294462][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.297482][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.300219][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.303133][ T6523] ldm_validate_partition_table(): Disk read failed. [ 58.306086][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.308376][ C3] usblp0: nonzero read bulk status received: -71 [ 58.308494][ T5995] usb 5-1: USB disconnect, device number 5 [ 58.309480][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.311809][ T6511] usblp0: removed [ 58.313597][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.318303][ T6527] pim6reg527: entered allmulticast mode [ 58.320354][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.321966][ T6523] Dev loop6: unable to read RDB block 0 [ 58.327013][ T6523] loop6: unable to read partition table [ 58.329953][ T6523] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 58.434409][ T6530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.178'. [ 58.440004][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'. [ 58.442864][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'. [ 58.859406][ T6539] xt_hashlimit: size too large, truncated to 1048576 [ 58.888835][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.998963][ T6553] team0: Device gtp0 is of different type [ 59.176895][ T6559] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.188'. [ 59.241871][ T6564] fuse: Unknown parameter 'õgrouÅ{³•00000000000000000000' [ 59.412016][ T1481] usb 8-1: string descriptor 0 read error: -71 [ 59.414125][ T1481] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.416820][ T1481] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.419435][ T39] kauditd_printk_skb: 66 callbacks suppressed [ 59.419442][ T39] audit: type=1400 audit(1737069844.138:373): avc: denied { search } for pid=5330 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.430821][ T1481] usb 8-1: can't set config #1, error -71 [ 59.433431][ T1481] usb 8-1: USB disconnect, device number 6 [ 59.451447][ T39] audit: type=1400 audit(1737069844.178:374): avc: denied { search } for pid=5648 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.512452][ T39] audit: type=1400 audit(1737069844.238:375): avc: denied { read } for pid=6577 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.521899][ T39] audit: type=1400 audit(1737069844.238:376): avc: denied { open } for pid=6577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.530310][ T39] audit: type=1400 audit(1737069844.238:377): avc: denied { getattr } for pid=6577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.537346][ T39] audit: type=1400 audit(1737069844.248:378): avc: denied { write } for pid=6574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.544387][ T39] audit: type=1400 audit(1737069844.248:379): avc: denied { add_name } for pid=6574 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.599109][ T39] audit: type=1400 audit(1737069844.328:380): avc: denied { remove_name } for pid=6579 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=2593 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.642009][ T39] audit: type=1400 audit(1737069844.368:381): avc: denied { ioctl } for pid=6581 comm="syz.3.193" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.652637][ T39] audit: type=1400 audit(1737069844.378:382): avc: denied { search } for pid=5648 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=11150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.661417][ T6582] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.193'. [ 59.668833][ T6582] openvswitch: netlink: Flow key attribute not present in set flow. [ 59.688748][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 59.691439][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.693459][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.076966][ T6609] tipc: Started in network mode [ 60.079291][ T6609] tipc: Node identity 4, cluster identity 4711 [ 60.081215][ T6609] tipc: Node number set to 4 [ 60.123786][ T6616] cgroup: subsys name conflicts with all [ 60.202107][ T6614] kvm: user requested TSC rate below hardware speed [ 60.204506][ T6614] kvm: vcpu 0: requested 8 ns lapic timer period limited to 200000 ns [ 60.394424][ T6639] overlayfs: failed to resolve './file1': -2 [ 60.500074][ T6656] x_tables: duplicate underflow at hook 3 [ 60.501078][ T5975] IPVS: starting estimator thread 0... [ 60.548806][ T6662] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 60.552115][ T6662] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 60.556895][ T6662] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 60.559963][ T6662] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 60.599061][ T6658] IPVS: using max 39 ests per chain, 93600 per kthread [ 60.774538][ T6672] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 60.855940][ T6680] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 61.181697][ T6696] input: syz1 as /devices/virtual/input/input14 [ 61.415507][ T6704] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.768933][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.059347][ T6732] IPv6: addrconf: prefix option has invalid lifetime [ 62.064845][ T6732] IPv6: addrconf: prefix option has invalid lifetime [ 62.068027][ T6732] IPv6: addrconf: prefix option has invalid lifetime [ 62.071648][ T6732] IPv6: addrconf: prefix option has invalid lifetime [ 62.074285][ T6732] IPv6: addrconf: prefix option has invalid lifetime [ 62.076424][ T6732] IPv6: addrconf: prefix option has invalid lifetime [ 62.078622][ T6732] IPv6: addrconf: prefix option has invalid lifetime [ 62.081882][ T6732] IPv6: addrconf: prefix option has invalid lifetime [ 62.084729][ T6732] IPv6: addrconf: prefix option has invalid lifetime [ 62.114982][ T6735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 62.181694][ T6743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6743 comm=syz.1.241 [ 62.326206][ T6737] xt_hashlimit: size too large, truncated to 1048576 [ 62.409468][ T6761] __nla_validate_parse: 70 callbacks suppressed [ 62.409484][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 62.458085][ T6773] sctp: [Deprecated]: syz.3.250 (pid 6773) Use of int in maxseg socket option. [ 62.458085][ T6773] Use struct sctp_assoc_value instead [ 62.461389][ T6771] fuse: Invalid rootmode [ 62.471222][ T6774] 9pnet_virtio: no channels available for device syz [ 62.581359][ T6785] Invalid ELF header type: 0 != 1 [ 62.610478][ T6792] netlink: 'syz.1.255': attribute type 2 has an invalid length. [ 62.613211][ T6792] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 62.616854][ T6792] nbd: illegal input index -1996488704 [ 62.671378][ T6799] misc userio: The device must be registered before sending interrupts [ 62.799170][ T6819] futex_wake_op: syz.3.263 tries to shift op by 32; fix this program [ 62.807035][ T6819] program syz.3.263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.338697][ T5976] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.490056][ T5976] usb 7-1: config index 0 descriptor too short (expected 43794, got 18) [ 63.493446][ T5976] usb 7-1: config 150 has too many interfaces: 163, using maximum allowed: 32 [ 63.497153][ T5976] usb 7-1: config 150 has an invalid descriptor of length 137, skipping remainder of the config [ 63.501366][ T5976] usb 7-1: config 150 has 0 interfaces, different from the descriptor's value: 163 [ 63.505027][ T5976] usb 7-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 63.507935][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.518040][ T6843] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 63.780975][ T5976] usb 7-1: string descriptor 0 read error: -71 [ 63.786086][ T5976] usb 7-1: USB disconnect, device number 2 [ 63.813278][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 64.179638][ T6881] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 64.182442][ T6881] netlink: 'syz.2.282': attribute type 4 has an invalid length. [ 64.185046][ T6881] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.282'. [ 64.190150][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 64.229401][ T5942] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 64.665520][ T6888] syzkaller1: entered promiscuous mode [ 64.668211][ T6888] syzkaller1: entered allmulticast mode [ 64.824324][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 64.824335][ T39] audit: type=1400 audit(2000000002.460:445): avc: denied { write } for pid=6898 comm="syz.3.288" name="ip_vs_stats" dev="proc" ino=4026533196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 64.825686][ T5942] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 64.881476][ T6907] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 64.895439][ T39] audit: type=1400 audit(2000000002.530:446): avc: denied { setattr } for pid=6905 comm="syz.0.291" name="/" dev="9p" ino=37618206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.903278][ T39] audit: type=1400 audit(2000000002.540:447): avc: denied { associate } for pid=6905 comm="syz.0.291" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.922137][ T39] audit: type=1800 audit(2000000002.560:448): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.291" name="file0" dev="9p" ino=37618207 res=0 errno=0 [ 64.949000][ T39] audit: type=1400 audit(2000000002.580:449): avc: denied { mount } for pid=6911 comm="syz.1.292" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.960527][ T39] audit: type=1400 audit(2000000002.590:450): avc: denied { search } for pid=6911 comm="syz.1.292" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.968963][ T6912] fuse: Bad value for 'fd' [ 64.971911][ T39] audit: type=1400 audit(2000000002.590:451): avc: denied { mounton } for pid=6911 comm="syz.1.292" path="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.979131][ T39] audit: type=1400 audit(2000000002.600:452): avc: denied { remount } for pid=6911 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.992777][ T39] audit: type=1400 audit(2000000002.610:453): avc: denied { read } for pid=6911 comm="syz.1.292" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.999006][ T39] audit: type=1400 audit(2000000002.610:454): avc: denied { open } for pid=6911 comm="syz.1.292" path="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.042364][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 65.046348][ T6920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.293'. [ 65.056185][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.293'. [ 65.060515][ T6920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.293'. [ 65.063160][ T6920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.293'. [ 65.068280][ C0] Unknown status report in ack skb [ 65.102571][ T6926] Failed to get privilege flags for destination (handle=0x2:0x40) [ 65.107441][ T6926] geneve2: entered promiscuous mode [ 65.109055][ T6926] geneve2: entered allmulticast mode [ 65.111749][ T6926] batman_adv: batadv0: Adding interface: geneve2 [ 65.113633][ T6926] batman_adv: batadv0: Interface activated: geneve2 [ 65.147008][ T6932] binder: 6931:6932 ioctl c018620c 20000000 returned -1 [ 65.185365][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 65.412734][ T6951] fuseblk: Unknown parameter 'obj_user' [ 65.419022][ T5942] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 65.808615][ T6078] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.958692][ T6078] usb 6-1: Using ep0 maxpacket: 8 [ 65.962250][ T6078] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.966197][ T6078] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.970091][ T6078] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.973742][ T6078] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.978173][ T6078] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.980960][ T6078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.068607][ T5995] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.086273][ T6991] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 66.089054][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.092508][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.097933][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.100057][ T6991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.103028][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.105097][ T6991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.109114][ T6991] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 66.112706][ T6991] bridge_slave_1: left allmulticast mode [ 66.114390][ T6991] bridge_slave_1: left promiscuous mode [ 66.116102][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.120339][ T6991] bridge_slave_0: left allmulticast mode [ 66.122018][ T6991] bridge_slave_0: left promiscuous mode [ 66.123783][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.139603][ T6991] bond0: (slave bridge0): Releasing backup interface [ 66.189284][ T6078] usb 6-1: GET_CAPABILITIES returned 0 [ 66.191555][ T6078] usbtmc 6-1:16.0: can't read capabilities [ 66.198937][ T5995] usb 7-1: device descriptor read/64, error -71 [ 66.392425][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.395910][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.399361][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.402126][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.404720][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.407370][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.411399][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.414048][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.416801][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.419834][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.422415][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.424982][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.427642][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.430437][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.432979][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.435523][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 66.443629][ T6078] usb 6-1: USB disconnect, device number 4 [ 66.462558][ T5995] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.512574][ T7007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7007 comm=syz.3.324 [ 66.599209][ T5995] usb 7-1: device descriptor read/64, error -71 [ 66.718742][ T5995] usb usb7-port1: attempt power cycle [ 66.904678][ T7038] "syz.0.334" (7038) uses obsolete ecb(arc4) skcipher [ 66.946362][ T7046] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 66.949073][ T7046] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.951994][ T7048] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 66.954601][ T7048] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.958372][ T7048] vhci_hcd vhci_hcd.0: Device attached [ 66.958788][ T7046] vhci_hcd vhci_hcd.0: Device attached [ 67.033182][ T7058] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 67.035090][ T7058] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.037382][ T7058] vhci_hcd vhci_hcd.0: Device attached [ 67.079400][ T5995] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.109135][ T5995] usb 7-1: device descriptor read/8, error -71 [ 67.148908][ T831] vhci_hcd: vhci_device speed not set [ 67.208586][ T831] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 67.218622][ T25] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 67.278498][ T8] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 67.348538][ T25] usb 5-1: device descriptor read/64, error -71 [ 67.358925][ T5995] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 67.389045][ T5995] usb 7-1: device descriptor read/8, error -71 [ 67.508774][ T5995] usb usb7-port1: unable to enumerate USB device [ 67.553243][ T7059] vhci_hcd: connection reset by peer [ 67.561461][ T75] vhci_hcd: stop threads [ 67.563544][ T75] vhci_hcd: release socket [ 67.566329][ T75] vhci_hcd: disconnect device [ 67.569378][ T7062] net_ratelimit: 24 callbacks suppressed [ 67.569390][ T7062] openvswitch: netlink: Duplicate key (type 32). [ 67.575988][ T7062] syzkaller1: entered promiscuous mode [ 67.577512][ T7062] syzkaller1: entered allmulticast mode [ 67.580517][ T7062] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 67.582704][ T7062] __nla_validate_parse: 5 callbacks suppressed [ 67.582711][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 67.589835][ T7062] sock: sock_timestamping_bind_phc: sock not bind to device [ 67.598490][ T25] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 67.702151][ T7067] : entered promiscuous mode [ 67.728473][ T25] usb 5-1: device descriptor read/64, error -71 [ 67.838594][ T25] usb usb5-port1: attempt power cycle [ 68.010536][ T7080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.345'. [ 68.015763][ T7079] delete_channel: no stack [ 68.201065][ T25] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 68.220483][ T25] usb 5-1: device descriptor read/8, error -71 [ 68.468480][ T25] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 68.509057][ T25] usb 5-1: device descriptor read/8, error -71 [ 68.509267][ T7121] 9pnet_fd: Insufficient options for proto=fd [ 68.540919][ T7124] trusted_key: syz.3.356 sent an empty control message without MSG_MORE. [ 68.618763][ T25] usb usb5-port1: unable to enumerate USB device [ 68.829994][ T7140] binder: BINDER_SET_CONTEXT_MGR already set [ 68.832009][ T7140] binder: 7139:7140 ioctl 4018620d 20000100 returned -16 [ 68.849222][ T7145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.362'. [ 68.860800][ T7147] netlink: zone id is out of range [ 68.862318][ T7147] netlink: zone id is out of range [ 68.863809][ T7147] netlink: zone id is out of range [ 68.865281][ T7147] netlink: zone id is out of range [ 68.866767][ T7147] netlink: zone id is out of range [ 68.868238][ T7147] netlink: zone id is out of range [ 68.869870][ T7147] netlink: zone id is out of range [ 68.871353][ T7147] netlink: zone id is out of range [ 68.872827][ T7147] netlink: zone id is out of range [ 68.889347][ T7152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64513 sclass=netlink_route_socket pid=7152 comm=syz.2.364 [ 68.894591][ T7152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64513 sclass=netlink_route_socket pid=7152 comm=syz.2.364 [ 69.050512][ T7162] cgroup: fork rejected by pids controller in /syz3 [ 69.540282][ T7131] block nbd1: shutting down sockets [ 69.557192][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.374'. [ 69.559986][ T5995] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 69.688520][ T5995] usb 7-1: device descriptor read/64, error -71 [ 69.738998][ T7813] syz.1.376: attempt to access beyond end of device [ 69.738998][ T7813] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 69.744025][ T7813] XFS (nbd1): SB validate failed with error -5. [ 69.827488][ T7820] wireguard0: entered promiscuous mode [ 69.830139][ T7820] wireguard0: entered allmulticast mode [ 69.870336][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 69.870350][ T39] audit: type=1400 audit(2000000007.510:479): avc: denied { mount } for pid=7822 comm="syz.1.378" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.879756][ T39] audit: type=1400 audit(2000000007.510:480): avc: denied { getopt } for pid=7822 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.928389][ T5995] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 69.934520][ T7827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7827 comm=syz.1.379 [ 69.955244][ T7049] vhci_hcd: connection closed [ 69.955448][ T7050] vhci_hcd: connection reset by peer [ 69.956379][ T1136] vhci_hcd: stop threads [ 69.962909][ T1136] vhci_hcd: release socket [ 69.964334][ T1136] vhci_hcd: disconnect device [ 69.967727][ T1136] vhci_hcd: stop threads [ 69.969791][ T1136] vhci_hcd: release socket [ 69.971966][ T1136] vhci_hcd: disconnect device [ 70.019451][ T7832] tipc: Started in network mode [ 70.021305][ T7832] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 70.025452][ T7832] tipc: Enabled bearer , priority 10 [ 70.034867][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 70.040982][ T7832] netlink: 'syz.1.381': attribute type 21 has an invalid length. [ 70.057045][ T39] audit: type=1400 audit(2000000007.690:481): avc: denied { accept } for pid=7835 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.062926][ T5995] usb 7-1: device descriptor read/64, error -71 [ 70.065268][ T39] audit: type=1400 audit(2000000007.700:482): avc: denied { read } for pid=7835 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.133139][ T39] audit: type=1400 audit(2000000007.770:483): avc: denied { bind } for pid=7842 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 70.168466][ T5995] usb usb7-port1: attempt power cycle [ 70.232237][ T39] audit: type=1400 audit(2000000007.870:484): avc: denied { ioctl } for pid=7845 comm="syz.1.385" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.306445][ T7849] ======================================================= [ 70.306445][ T7849] WARNING: The mand mount option has been deprecated and [ 70.306445][ T7849] and is ignored by this kernel. Remove the mand [ 70.306445][ T7849] option from the mount to silence this warning. [ 70.306445][ T7849] ======================================================= [ 70.346299][ T39] audit: type=1400 audit(2000000007.980:485): avc: denied { setopt } for pid=7850 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.431756][ T39] audit: type=1400 audit(2000000008.070:486): avc: denied { connect } for pid=7859 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.518333][ T5995] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 70.539103][ T5995] usb 7-1: device descriptor read/8, error -71 [ 70.569833][ T39] audit: type=1400 audit(2000000008.210:487): avc: denied { ioctl } for pid=7871 comm="syz.1.392" path="socket:[13974]" dev="sockfs" ino=13974 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.700848][ T7876] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.703814][ T7876] overlayfs: failed to set xattr on upper [ 70.706142][ T7876] overlayfs: ...falling back to redirect_dir=nofollow. [ 70.709601][ T7876] overlayfs: ...falling back to index=off. [ 70.712018][ T7876] overlayfs: ...falling back to uuid=null. [ 70.720676][ T39] audit: type=1400 audit(2000000008.360:488): avc: denied { create } for pid=7875 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 70.749714][ T7878] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 70.753197][ T7878] NCSI netlink: No device for ifindex 0 [ 70.755913][ T7878] ipt_REJECT: ECHOREPLY no longer supported. [ 70.808335][ T5995] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 70.839202][ T5995] usb 7-1: device descriptor read/8, error -71 [ 70.846905][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.397'. [ 70.852442][ T7890] overlayfs: unescaped trailing colons in lowerdir mount option. [ 70.938365][ T7899] dlm: plock device version mismatch: kernel (1.2.0), user (6.0.0) [ 70.941527][ T5942] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 70.959107][ T5995] usb usb7-port1: unable to enumerate USB device [ 71.020567][ T5995] tipc: Node number set to 4269801488 [ 71.045576][ T7918] netlink: 84 bytes leftover after parsing attributes in process `syz.1.407'. [ 71.056225][ T7918] autofs: Unknown parameter '¨' [ 71.132684][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.135252][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.178010][ T7928] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.182433][ T7928] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 71.401026][ T7947] batadv_slave_1: entered promiscuous mode [ 71.403266][ T7947] batadv_slave_1: left promiscuous mode [ 71.707881][ T7960] xt_SECMARK: invalid mode: 0 [ 72.071070][ T7977] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.423'. [ 72.136787][ T7981] netlink: 830 bytes leftover after parsing attributes in process `syz.1.424'. [ 72.160390][ T7983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.425'. [ 72.328485][ T831] vhci_hcd: vhci_device speed not set [ 72.398396][ T8] vhci_hcd: vhci_device speed not set [ 72.407922][ T7996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7996 comm=syz.3.431 [ 72.448187][ T5995] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 72.598214][ T5995] usb 5-1: Using ep0 maxpacket: 8 [ 72.601803][ T5995] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 72.605116][ T5995] usb 5-1: config 179 has no interface number 0 [ 72.607705][ T5995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 72.616097][ T5995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 72.620702][ T5995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 72.625153][ T5995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 72.630179][ T5995] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 72.635502][ T5995] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 72.635525][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.637679][ T7985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.778187][ T5994] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 72.854090][ T5995] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input16 [ 72.949345][ T5994] usb 8-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 72.952021][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.955730][ T5994] usb 8-1: config 0 descriptor?? [ 72.960200][ T5994] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input17 [ 73.068530][ T7985] netlink: 'syz.0.426': attribute type 27 has an invalid length. [ 73.154182][ T8021] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 73.156404][ T8021] netlink: 224 bytes leftover after parsing attributes in process `syz.1.437'. [ 73.160134][ T8021] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 73.163123][ T8021] netlink: 224 bytes leftover after parsing attributes in process `syz.1.437'. [ 73.230598][ T5976] usb 5-1: USB disconnect, device number 10 [ 73.230622][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 73.235856][ T5976] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 73.235866][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 73.482007][ T6078] usb 8-1: USB disconnect, device number 7 [ 73.485902][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'. [ 73.606968][ T8053] dlm: no locking on control device [ 73.615880][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 73.741657][ T8059] pim6reg: entered allmulticast mode [ 73.744651][ T8059] pim6reg: left allmulticast mode [ 73.752882][ T8044] block nbd2: shutting down sockets [ 73.767873][ T8064] 9pnet_fd: Insufficient options for proto=fd [ 73.822475][ T8044] overlay: Unknown parameter 'subj_type' [ 73.903439][ T8076] program syz.2.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.943822][ T8079] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 73.947053][ T8079] overlayfs: missing 'lowerdir' [ 73.969819][ T8081] dlm: non-version read from control device 8224 [ 74.047212][ T8088] xt_ipvs: protocol family 7 not supported [ 74.115246][ T8113] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.181738][ T8118] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 74.302943][ T8126] kvm: emulating exchange as write [ 74.303406][ T8131] program syz.3.474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.603642][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 74.607848][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 74.641770][ T8170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=8170 comm=syz.2.485 [ 74.648605][ T8170] net_ratelimit: 2 callbacks suppressed [ 74.648619][ T8170] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 74.753058][ T8181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8181 comm=syz.0.488 [ 74.952110][ T8213] fuse: Bad value for 'fd' [ 74.959774][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 74.959783][ T39] audit: type=1326 audit(2000000012.600:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8212 comm="syz.2.497" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7996185d29 code=0x0 [ 75.011052][ T39] audit: type=1400 audit(2000000012.650:519): avc: denied { setattr } for pid=8212 comm="syz.2.497" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 75.196434][ T39] audit: type=1400 audit(2000000012.830:520): avc: denied { sqpoll } for pid=8229 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.203047][ T39] audit: type=1400 audit(2000000012.840:521): avc: denied { nlmsg_read } for pid=8229 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.216603][ T39] audit: type=1400 audit(2000000012.850:522): avc: denied { create } for pid=8229 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.251362][ T831] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 75.298432][ T39] audit: type=1400 audit(2000000012.940:523): avc: denied { ioctl } for pid=8236 comm="syz.1.505" path="socket:[17142]" dev="sockfs" ino=17142 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 75.418121][ T831] usb 8-1: Using ep0 maxpacket: 16 [ 75.421537][ T831] usb 8-1: config 113 has an invalid interface number: 81 but max is 0 [ 75.423930][ T831] usb 8-1: config 113 has an invalid interface number: 255 but max is 0 [ 75.426461][ T831] usb 8-1: config 113 has an invalid interface number: 22 but max is 0 [ 75.429033][ T831] usb 8-1: config 113 has 3 interfaces, different from the descriptor's value: 1 [ 75.431703][ T831] usb 8-1: config 113 has no interface number 0 [ 75.433489][ T831] usb 8-1: config 113 has no interface number 1 [ 75.435359][ T831] usb 8-1: config 113 has no interface number 2 [ 75.437307][ T831] usb 8-1: config 113 interface 81 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 75.440498][ T831] usb 8-1: config 113 interface 81 altsetting 2 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 75.443890][ T831] usb 8-1: config 113 interface 81 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 75.447032][ T831] usb 8-1: config 113 interface 81 altsetting 2 endpoint 0xE has an invalid bInterval 117, changing to 7 [ 75.450341][ T831] usb 8-1: config 113 interface 81 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 75.453507][ T831] usb 8-1: config 113 interface 81 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 75.456616][ T831] usb 8-1: config 113 interface 81 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 75.460002][ T831] usb 8-1: config 113 interface 81 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 75.463740][ T831] usb 8-1: too many endpoints for config 113 interface 255 altsetting 138: 203, using maximum allowed: 30 [ 75.466985][ T831] usb 8-1: config 113 interface 255 altsetting 138 endpoint 0x6 has an invalid bInterval 109, changing to 7 [ 75.470310][ T831] usb 8-1: config 113 interface 255 altsetting 138 endpoint 0x6 has invalid wMaxPacketSize 0 [ 75.473329][ T831] usb 8-1: config 113 interface 255 altsetting 138 has 1 endpoint descriptor, different from the interface descriptor's value: 203 [ 75.477408][ T831] usb 8-1: config 113 interface 22 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.481393][ T831] usb 8-1: config 113 interface 81 has no altsetting 0 [ 75.483470][ T831] usb 8-1: config 113 interface 255 has no altsetting 0 [ 75.485559][ T831] usb 8-1: config 113 interface 22 has no altsetting 0 [ 75.489614][ T831] usb 8-1: New USB device found, idVendor=0543, idProduct=152e, bcdDevice=72.5d [ 75.492504][ T831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.495001][ T831] usb 8-1: Product: Ð… [ 75.496325][ T831] usb 8-1: Manufacturer: Ѓ [ 75.497766][ T831] usb 8-1: SerialNumber: ë…磴鿶â¹ã¥•äŽ†Ã«ã……ﳘ紗晴姌ê€æœ¥î¥£é¯²ì«¼îƒŠà£§êḘ⼈ᙡ葷ᤞ৕갅䋪⢽㗘⚡忴௿媪渓ê”⛃ê®á©­í™–﬋ں躰æ½à«–⡆ቃᾊ☪⻌æ³â°·ä¥ã€¸è¤°Ñ¸ë˜§ë¾‚芉áŸç§€äŽî’´âµâ³¨ë´¿á´¹ê“• [ 75.714761][ T8208] program syz.3.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.731412][ T831] usb 8-1: USB disconnect, device number 8 [ 75.829851][ T39] audit: type=1400 audit(2000000013.470:524): avc: denied { getopt } for pid=8240 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 76.092010][ T39] audit: type=1400 audit(2000000013.730:525): avc: denied { read } for pid=5333 comm="acpid" name="mouse6" dev="devtmpfs" ino=2866 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 76.102991][ T39] audit: type=1400 audit(2000000013.730:526): avc: denied { open } for pid=5333 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=2866 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 76.112727][ T39] audit: type=1400 audit(2000000013.730:527): avc: denied { ioctl } for pid=5333 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=2866 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 76.126980][ T8237] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 76.213654][ T8254] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 76.264220][ T9] cfg80211: failed to load regulatory.db [ 76.277628][ T8263] binder: BINDER_SET_CONTEXT_MGR already set [ 76.280256][ T8263] binder: 8262:8263 ioctl 4018620d 20000040 returned -16 [ 76.282122][ T8264] binder: BINDER_SET_CONTEXT_MGR already set [ 76.288074][ T8264] binder: 8262:8264 ioctl 4018620d 20000040 returned -16 [ 76.303860][ T8266] capability: warning: `syz.3.512' uses deprecated v2 capabilities in a way that may be insecure [ 76.435411][ T8275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.515'. [ 76.511231][ T8285] binder: 8279:8285 ioctl c0306201 20000180 returned -14 [ 76.514310][ T8283] kvm: pic: non byte write [ 76.687848][ T8287] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 76.703322][ T8290] random: crng reseeded on system resumption [ 76.830831][ T8298] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.841157][ T8298] CIFS mount error: No usable UNC path provided in device string! [ 76.841157][ T8298] [ 76.845776][ T8298] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 76.967118][ T8322] syz.2.528: attempt to access beyond end of device [ 76.967118][ T8322] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 76.975867][ T8317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.976068][ T8322] syz.2.528: attempt to access beyond end of device [ 76.976068][ T8322] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 76.976123][ T8322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 76.976437][ T8322] syz.2.528: attempt to access beyond end of device [ 76.976437][ T8322] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 76.976464][ T8322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 76.976474][ T8322] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 76.976481][ T8322] UDF-fs: Scanning with blocksize 512 failed [ 76.977322][ T8322] syz.2.528: attempt to access beyond end of device [ 76.977322][ T8322] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 77.018123][ T8322] syz.2.528: attempt to access beyond end of device [ 77.018123][ T8322] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 77.018151][ T8322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 77.018205][ T8322] syz.2.528: attempt to access beyond end of device [ 77.018205][ T8322] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 77.018845][ T8322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 77.018864][ T8322] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 77.018900][ T8322] UDF-fs: Scanning with blocksize 1024 failed [ 77.019198][ T8322] syz.2.528: attempt to access beyond end of device [ 77.019198][ T8322] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 77.019264][ T8322] syz.2.528: attempt to access beyond end of device [ 77.019264][ T8322] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 77.019304][ T8322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 77.019455][ T8322] syz.2.528: attempt to access beyond end of device [ 77.019455][ T8322] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 77.019491][ T8322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 77.019507][ T8322] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 77.019514][ T8322] UDF-fs: Scanning with blocksize 2048 failed [ 77.019659][ T8322] syz.2.528: attempt to access beyond end of device [ 77.019659][ T8322] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 77.019728][ T8322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 77.019783][ T8322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 77.019793][ T8322] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 77.019799][ T8322] UDF-fs: Scanning with blocksize 4096 failed [ 77.019803][ T8322] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 77.021532][ T8308] cgroup: fork rejected by pids controller in /syz0 [ 77.207985][ T8452] nbd2: detected capacity change from 0 to 12 [ 77.216075][ T5948] block nbd2: Send control failed (result -89) [ 77.219351][ T5948] block nbd2: Request send failed, requeueing [ 77.224303][ T5942] block nbd2: Receive control failed (result -32) [ 77.224958][ T8455] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 77.225990][ T2482] block nbd2: Dead connection, failed to find a fallback [ 77.226038][ T2482] block nbd2: shutting down sockets [ 77.226071][ T2482] blk_print_req_error: 8 callbacks suppressed [ 77.226081][ T2482] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.226124][ T2482] buffer_io_error: 7 callbacks suppressed [ 77.226132][ T2482] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.226309][ T5948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.249798][ T5948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.253163][ T5948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.256642][ T5948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.261494][ T5948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.265244][ T5948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.270036][ T5948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.273693][ T5948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.276957][ T5948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.280913][ T5948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.284223][ T5948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.287938][ T5948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.291097][ T5948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.294762][ T5948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.298181][ T5948] ldm_validate_partition_table(): Disk read failed. [ 77.300980][ T5948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.305002][ T5948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.308620][ T5948] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.312296][ T5948] Buffer I/O error on dev nbd2, logical block 0, async page read [ 77.316105][ T5948] Dev nbd2: unable to read RDB block 0 [ 77.318835][ T5948] nbd2: unable to read partition table [ 77.321288][ T5948] nbd2: partition table beyond EOD, truncated [ 77.329797][ T5948] ldm_validate_partition_table(): Disk read failed. [ 77.332473][ T5948] Dev nbd2: unable to read RDB block 0 [ 77.334465][ T5948] nbd2: unable to read partition table [ 77.336330][ T5948] nbd2: partition table beyond EOD, truncated [ 77.857530][ T8457] netlink: 72 bytes leftover after parsing attributes in process `syz.2.533'. [ 77.861974][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 77.866099][ T8459] macvtap0: Device is already in use. [ 77.914030][ T8464] overlayfs: workdir and upperdir must be separate subtrees [ 77.923522][ T8464] netlink: 52 bytes leftover after parsing attributes in process `syz.2.533'. [ 77.926335][ T8464] tipc: MTU too low for tipc bearer [ 78.064250][ T8474] capability: warning: `syz.1.538' uses 32-bit capabilities (legacy support in use) [ 78.348391][ T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 78.462583][ T8490] Debayer A: ================= START STATUS ================= [ 78.464876][ T8490] Debayer A: Debayer Mean Window Size: 3 [ 78.466845][ T8490] Debayer A: ================== END STATUS ================== [ 78.472600][ T8490] vlan2: entered allmulticast mode [ 78.498096][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 78.501533][ T25] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 78.504742][ T25] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 78.509037][ T25] usb 8-1: config 0 has no interface number 0 [ 78.511628][ T25] usb 8-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x19, changing to 0x9 [ 78.516203][ T25] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.521672][ T25] usb 8-1: config 0 interface 52 has no altsetting 0 [ 78.526123][ T25] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 78.530033][ T25] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 78.533555][ T25] usb 8-1: Product: syz [ 78.535283][ T25] usb 8-1: SerialNumber: syz [ 78.539394][ T25] usb 8-1: config 0 descriptor?? [ 78.771917][ T8494] __nla_validate_parse: 2 callbacks suppressed [ 78.771935][ T8494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.545'. [ 79.000127][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'. [ 79.003756][ T1481] usb 8-1: USB disconnect, device number 9 [ 79.047864][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 79.217899][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 79.220384][ T25] usb 5-1: no configurations [ 79.222226][ T25] usb 5-1: can't read configurations, error -22 [ 79.332470][ T8512] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 79.336692][ T8512] VFS: Can't find a romfs filesystem on dev nullb0. [ 79.336692][ T8512] [ 79.358154][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 79.370570][ T8514] netlink: 156 bytes leftover after parsing attributes in process `syz.1.552'. [ 79.379473][ T8514] program syz.1.552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.517889][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 79.520518][ T25] usb 5-1: no configurations [ 79.522487][ T25] usb 5-1: can't read configurations, error -22 [ 79.526104][ T25] usb usb5-port1: attempt power cycle [ 79.697818][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 79.861034][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.864153][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 79.867627][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.867799][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 79.871979][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.879172][ T9] usb 6-1: config 0 descriptor?? [ 79.888666][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 79.894654][ T25] usb 5-1: no configurations [ 79.896518][ T25] usb 5-1: can't read configurations, error -22 [ 79.957807][ T1481] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 80.037813][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 80.058664][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 80.061155][ T25] usb 5-1: no configurations [ 80.062916][ T25] usb 5-1: can't read configurations, error -22 [ 80.065508][ T25] usb usb5-port1: unable to enumerate USB device [ 80.129002][ T1481] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.132222][ T1481] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.135269][ T1481] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 80.138405][ T1481] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.141813][ T1481] usb 8-1: config 0 descriptor?? [ 80.546949][ T1481] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 80.549111][ T1481] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 80.553151][ T1481] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0003/input/input18 [ 80.565285][ T1481] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 80.749916][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 80.749927][ T39] audit: type=1400 audit(2000000018.391:549): avc: denied { accept } for pid=8525 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.761546][ T25] usb 8-1: USB disconnect, device number 10 [ 80.787004][ T39] audit: type=1400 audit(2000000018.421:550): avc: denied { watch watch_reads } for pid=8518 comm="syz.1.554" path="/128/file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 80.833953][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 80.837441][ T39] audit: type=1400 audit(2000000018.471:551): avc: denied { bind } for pid=8546 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.869982][ T8549] IPVS: Error connecting to the multicast addr [ 80.933796][ T8554] ufs: You didn't specify the type of your ufs filesystem [ 80.933796][ T8554] [ 80.933796][ T8554] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 80.933796][ T8554] [ 80.933796][ T8554] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 80.943502][ T8554] ufs: failed to set blocksize [ 81.036122][ T8562] serio: Serial port ptm0 [ 81.313033][ T8578] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 8578 comm: syz.3.575) [ 81.316769][ T8574] netlink: 260 bytes leftover after parsing attributes in process `syz.2.574'. [ 81.317447][ T39] audit: type=1800 audit(2000000018.951:552): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.575" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=21850 res=0 errno=0 [ 81.338116][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 81.340769][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 81.392179][ T39] audit: type=1400 audit(2000000019.031:553): avc: denied { audit_write } for pid=8584 comm="syz.3.577" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.421379][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 81.424258][ T8587] smc: net device veth1_to_bond applied user defined pnetid SYZ2 [ 81.538081][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 81.541057][ T8591] bridge_slave_1: left allmulticast mode [ 81.542619][ T8591] bridge_slave_1: left promiscuous mode [ 81.544271][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.551437][ T8591] bridge_slave_0: left allmulticast mode [ 81.553622][ T8591] bridge_slave_0: left promiscuous mode [ 81.555735][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.607690][ T8587] nbd3: detected capacity change from 0 to 12 [ 81.611239][ T5948] block nbd3: Send control failed (result -89) [ 81.613053][ T5948] block nbd3: Request send failed, requeueing [ 81.615137][ T5942] block nbd3: Receive control failed (result -32) [ 81.615999][ T54] block nbd3: Dead connection, failed to find a fallback [ 81.621279][ T54] block nbd3: shutting down sockets [ 81.624139][ T5948] ldm_validate_partition_table(): Disk read failed. [ 81.626191][ T5948] Dev nbd3: unable to read RDB block 0 [ 81.627850][ T5948] nbd3: unable to read partition table [ 81.629710][ T5948] nbd3: partition table beyond EOD, truncated [ 81.637894][ T5948] ldm_validate_partition_table(): Disk read failed. [ 81.640075][ T5948] Dev nbd3: unable to read RDB block 0 [ 81.641763][ T5948] nbd3: unable to read partition table [ 81.643410][ T5948] nbd3: partition table beyond EOD, truncated [ 81.766811][ T8597] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 81.768549][ T35] IPVS: starting estimator thread 0... [ 81.813658][ T39] audit: type=1400 audit(2000000019.451:554): avc: denied { read write } for pid=8606 comm="syz.3.584" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.823097][ T39] audit: type=1400 audit(2000000019.451:555): avc: denied { open } for pid=8606 comm="syz.3.584" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.826919][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 81.835294][ T8607] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.878336][ T8601] IPVS: using max 40 ests per chain, 96000 per kthread [ 81.995053][ T8628] xt_policy: output policy not valid in PREROUTING and INPUT [ 82.105784][ T8639] syzkaller0: entered promiscuous mode [ 82.107229][ T8639] syzkaller0: entered allmulticast mode [ 82.111526][ T8639] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 82.113100][ T8639] syzkaller0: Linktype set failed because interface is up [ 82.448453][ T9] usb 6-1: USB disconnect, device number 5 [ 82.502671][ T1481] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 82.521007][ T39] audit: type=1400 audit(2000000020.161:556): avc: denied { create } for pid=8645 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 82.625831][ T39] audit: type=1400 audit(2000000020.261:557): avc: denied { connect } for pid=8660 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.631979][ T1481] usb 7-1: device descriptor read/64, error -71 [ 82.646036][ T8619] syz.3.584 (8619) used greatest stack depth: 20864 bytes left [ 82.843482][ T8664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.845597][ T8664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.848067][ T8664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.852206][ T8664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.877689][ T1481] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 82.956693][ T39] audit: type=1400 audit(2000000020.591:558): avc: denied { read } for pid=8687 comm="syz.1.603" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 82.967416][ T8688] Cannot find set identified by id 0 to match [ 83.017619][ T1481] usb 7-1: device descriptor read/64, error -71 [ 83.127621][ T5993] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 83.130664][ T1481] usb usb7-port1: attempt power cycle [ 83.257991][ T5993] usb 8-1: device descriptor read/64, error -71 [ 83.489816][ T1481] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 83.507901][ T5993] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 83.518890][ T1481] usb 7-1: device descriptor read/8, error -71 [ 83.647600][ T5993] usb 8-1: device descriptor read/64, error -71 [ 83.757858][ T5993] usb usb8-port1: attempt power cycle [ 83.770903][ T1481] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 83.788515][ T1481] usb 7-1: device descriptor read/8, error -71 [ 83.898889][ T1481] usb usb7-port1: unable to enumerate USB device [ 83.925461][ T8694] netlink: 'syz.1.605': attribute type 15 has an invalid length. [ 83.930408][ T8694] __nla_validate_parse: 2 callbacks suppressed [ 83.930422][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 84.097596][ T5993] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 84.118701][ T5993] usb 8-1: device descriptor read/8, error -71 [ 84.149639][ T8711] cgroup: Unknown subsys name 'cpuset' [ 84.377960][ T5993] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 84.398538][ T5993] usb 8-1: device descriptor read/8, error -71 [ 84.509116][ T5993] usb usb8-port1: unable to enumerate USB device [ 84.888426][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.888445][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.897569][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.321212][ T8729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.324502][ T8729] IPv6: NLM_F_CREATE should be set when creating new route [ 85.327500][ T8729] IPv6: NLM_F_CREATE should be set when creating new route [ 85.338946][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 85.342317][ T8730] netlink: 'syz.2.613': attribute type 7 has an invalid length. [ 85.345222][ T8730] netlink: 'syz.2.613': attribute type 8 has an invalid length. [ 85.349240][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 85.354472][ T8730] syz_tun: entered promiscuous mode [ 85.356642][ T8730] batadv_slave_1: entered promiscuous mode [ 85.403500][ T8741] 9pnet_fd: Insufficient options for proto=fd [ 85.443163][ T8745] xt_hashlimit: size too large, truncated to 1048576 [ 85.464811][ T8747] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 85.468089][ T8748] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 85.611121][ T8756] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 85.668398][ T8760] could not allocate digest TFM handle cryptd(blake2b-160) [ 85.691853][ T8761] could not allocate digest TFM handle cryptd(blake2b-160) [ 85.839079][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 85.839089][ T39] audit: type=1400 audit(2000000023.481:566): avc: denied { watch } for pid=8778 comm="syz.3.626" path="/159" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.853388][ T39] audit: type=1400 audit(2000000023.481:567): avc: denied { watch_sb } for pid=8778 comm="syz.3.626" path="/159" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.891343][ T8785] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 85.892756][ T8787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.895559][ C3] dccp_invalid_packet: invalid packet type [ 85.941378][ T8792] netlink: 'syz.3.630': attribute type 21 has an invalid length. [ 85.953471][ T39] audit: type=1400 audit(2000000023.591:568): avc: denied { mounton } for pid=8789 comm="syz.2.629" path="mnt:[4026533301]" dev="nsfs" ino=4026533301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.110898][ T39] audit: type=1400 audit(2000000023.751:569): avc: denied { remount } for pid=8800 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 86.112884][ T8801] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.118483][ T8801] overlayfs: failed to set xattr on upper [ 86.120210][ T8801] overlayfs: ...falling back to redirect_dir=nofollow. [ 86.122171][ T8801] overlayfs: ...falling back to metacopy=off. [ 86.123892][ T8801] overlayfs: ...falling back to index=off. [ 86.125569][ T8801] overlayfs: ...falling back to uuid=null. [ 86.320871][ T39] audit: type=1400 audit(2000000023.961:570): avc: denied { create } for pid=8804 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 86.349200][ T8808] tmpfs: Bad value for 'mpol' [ 86.349239][ T8805] tmpfs: Bad value for 'mpol' [ 86.388639][ T8815] random: crng reseeded on system resumption [ 86.518583][ T8827] netlink: 504 bytes leftover after parsing attributes in process `syz.0.640'. [ 86.526014][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 86.536751][ T39] audit: type=1400 audit(2000000024.171:571): avc: denied { mounton } for pid=8825 comm="syz.0.640" path="/155/file0" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 86.552451][ T39] audit: type=1400 audit(2000000024.191:572): avc: denied { ioctl } for pid=8813 comm="syz.3.636" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.720237][ T39] audit: type=1400 audit(2000000024.361:573): avc: denied { create } for pid=8831 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 86.729378][ T8841] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 86.748529][ T8841] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 86.783006][ T8845] xt_l2tp: missing protocol rule (udp|l2tpip) [ 86.856102][ T8853] program syz.2.650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.879677][ T39] audit: type=1400 audit(2000000024.521:574): avc: denied { connect } for pid=8854 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.907690][ T39] audit: type=1400 audit(2000000024.551:575): avc: denied { setopt } for pid=8852 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.913321][ T1106] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 86.915405][ T1106] ata1.00: irq_stat 0x40000000 [ 86.916877][ T1106] ata1.00: failed command: ZAC MANAGEMENT OUT [ 86.918917][ T1106] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 16 [ 86.918917][ T1106] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 86.923300][ T1106] ata1.00: status: { DRDY ERR } [ 86.924676][ T1106] ata1.00: error: { ABRT } [ 86.925974][ T1106] ata1.00: device reported invalid CHS sector 0 [ 86.986055][ T8855] tipc: Enabled bearer , priority 0 [ 86.988485][ T8855] syzkaller0: entered promiscuous mode [ 86.990076][ T8855] syzkaller0: entered allmulticast mode [ 86.992937][ T5940] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 87.016343][ T8854] tipc: Resetting bearer [ 87.025619][ T8854] tipc: Disabling bearer [ 87.231491][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 87.234988][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'. [ 87.242547][ T8888] netlink: 'syz.2.660': attribute type 12 has an invalid length. [ 87.254683][ T8892] netlink: 32 bytes leftover after parsing attributes in process `syz.3.662'. [ 87.299612][ T8897] ebt_among: src integrity fail: 100 [ 87.680152][ C2] ata1: illegal qc_active transition (00000000->00000800) [ 87.803349][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 87.806194][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 87.937871][ T1114] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 87.941040][ T1114] sr 2:0:0:0: [sr0] tag#29 Sense Key : Illegal Request [current] [ 87.943691][ T1114] sr 2:0:0:0: [sr0] tag#29 Add. Sense: Invalid command operation code [ 87.946013][ T1114] sr 2:0:0:0: [sr0] tag#29 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 87.948471][ T1114] blk_print_req_error: 60 callbacks suppressed [ 87.948478][ T1114] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x208800 phys_seg 1 prio class 0 [ 88.009063][ T1106] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 88.023522][ T1106] ata1.00: configured for UDMA/100 [ 88.028853][ T25] [ 88.029594][ T25] ====================================================== [ 88.031623][ T25] WARNING: possible circular locking dependency detected [ 88.033630][ T25] 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 Not tainted [ 88.036269][ T25] ------------------------------------------------------ [ 88.038870][ T25] kworker/2:0/25 is trying to acquire lock: [ 88.040525][ T25] ffff8880266a8aa8 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950 [ 88.043510][ T25] [ 88.043510][ T25] but task is already holding lock: [ 88.045561][ T25] ffff8880266a90c0 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 88.048340][ T25] [ 88.048340][ T25] which lock already depends on the new lock. [ 88.048340][ T25] [ 88.051154][ T25] [ 88.051154][ T25] the existing dependency chain (in reverse order) is: [ 88.053635][ T25] [ 88.053635][ T25] -> #5 (&q->limits_lock){+.+.}-{4:4}: [ 88.055731][ T25] __mutex_lock+0x19b/0xa60 [ 88.057155][ T25] __nbd_set_size+0x2c0/0x730 [ 88.058578][ T25] nbd_start_device+0x8fd/0xd70 [ 88.060050][ T25] nbd_ioctl+0x21a/0xfd0 [ 88.061378][ T25] blkdev_ioctl+0x276/0x6d0 [ 88.062786][ T25] __x64_sys_ioctl+0x190/0x200 [ 88.064255][ T25] do_syscall_64+0xcd/0x250 [ 88.065713][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.067505][ T25] [ 88.067505][ T25] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 88.069890][ T25] blk_mq_submit_bio+0x1fb6/0x24c0 [ 88.071500][ T25] __submit_bio+0x384/0x540 [ 88.072983][ T25] submit_bio_noacct_nocheck+0x698/0xd70 [ 88.074760][ T25] submit_bio_noacct+0x93a/0x1e20 [ 88.076545][ T25] block_read_full_folio+0x812/0xa50 [ 88.078273][ T25] filemap_read_folio+0xc6/0x2a0 [ 88.079897][ T25] filemap_get_pages+0x155f/0x1be0 [ 88.081561][ T25] filemap_read+0x3ca/0xd70 [ 88.083054][ T25] blkdev_read_iter+0x187/0x480 [ 88.084652][ T25] vfs_read+0x87f/0xbe0 [ 88.086039][ T25] ksys_read+0x12b/0x250 [ 88.087410][ T25] do_syscall_64+0xcd/0x250 [ 88.088891][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.090781][ T25] [ 88.090781][ T25] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 88.093237][ T25] down_read+0x9a/0x330 [ 88.094645][ T25] filemap_fault+0x62c/0x2820 [ 88.096170][ T25] __do_fault+0x10a/0x490 [ 88.097602][ T25] do_pte_missing+0xebd/0x3e00 [ 88.099128][ T25] __handle_mm_fault+0x103c/0x2a40 [ 88.100761][ T25] handle_mm_fault+0x3fa/0xaa0 [ 88.102313][ T25] do_user_addr_fault+0x7a3/0x13f0 [ 88.103944][ T25] exc_page_fault+0x5c/0xc0 [ 88.105382][ T25] asm_exc_page_fault+0x26/0x30 [ 88.106967][ T25] _copy_from_iter+0x380/0x1560 [ 88.108541][ T25] tipc_msg_build+0x308/0x1120 [ 88.110105][ T25] __tipc_sendstream+0x6fa/0x1190 [ 88.111737][ T25] tipc_sendstream+0x4f/0x70 [ 88.113253][ T25] sock_write_iter+0x4fe/0x5b0 [ 88.114772][ T25] vfs_write+0x5ae/0x1150 [ 88.116115][ T25] ksys_write+0x207/0x250 [ 88.117558][ T25] do_syscall_64+0xcd/0x250 [ 88.119044][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.120900][ T25] [ 88.120900][ T25] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 88.123102][ T25] __might_fault+0x11b/0x190 [ 88.124596][ T25] _copy_from_user+0x29/0xd0 [ 88.126133][ T25] __blk_trace_setup+0xa8/0x180 [ 88.127745][ T25] blk_trace_ioctl+0x163/0x290 [ 88.129159][ T25] blkdev_ioctl+0x109/0x6d0 [ 88.130538][ T25] __x64_sys_ioctl+0x190/0x200 [ 88.131970][ T25] do_syscall_64+0xcd/0x250 [ 88.133380][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.135282][ T25] [ 88.135282][ T25] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 88.137558][ T25] __mutex_lock+0x19b/0xa60 [ 88.139022][ T25] blk_mq_init_sched+0x42b/0x640 [ 88.140633][ T25] elevator_init_mq+0x2cd/0x420 [ 88.142244][ T25] add_disk_fwnode+0x113/0x1300 [ 88.143825][ T25] sd_probe+0xa86/0x1000 [ 88.145465][ T25] really_probe+0x23e/0xa90 [ 88.147069][ T25] __driver_probe_device+0x1de/0x440 [ 88.148956][ T25] driver_probe_device+0x4c/0x1b0 [ 88.150530][ T25] __device_attach_driver+0x1df/0x310 [ 88.152199][ T25] bus_for_each_drv+0x157/0x1e0 [ 88.153699][ T25] __device_attach_async_helper+0x1d3/0x290 [ 88.155453][ T25] async_run_entry_fn+0x9c/0x530 [ 88.156963][ T25] process_one_work+0x9c5/0x1ba0 [ 88.158447][ T25] worker_thread+0x6c8/0xf00 [ 88.159822][ T25] kthread+0x2c1/0x3a0 [ 88.161119][ T25] ret_from_fork+0x45/0x80 [ 88.162488][ T25] ret_from_fork_asm+0x1a/0x30 [ 88.163932][ T25] [ 88.163932][ T25] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 88.166417][ T25] __lock_acquire+0x249e/0x3c40 [ 88.167929][ T25] lock_acquire.part.0+0x11b/0x380 [ 88.169831][ T25] blk_queue_enter+0x50f/0x640 [ 88.171560][ T25] blk_mq_alloc_request+0x59b/0x950 [ 88.173134][ T25] scsi_execute_cmd+0x1da/0xf40 [ 88.174684][ T25] read_capacity_16+0x213/0xe10 [ 88.176194][ T25] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 88.177939][ T25] scsi_rescan_device+0x243/0x340 [ 88.179430][ T25] ata_scsi_dev_rescan+0x1cb/0x470 [ 88.180931][ T25] process_one_work+0x9c5/0x1ba0 [ 88.182399][ T25] worker_thread+0x6c8/0xf00 [ 88.183792][ T25] kthread+0x2c1/0x3a0 [ 88.185078][ T25] ret_from_fork+0x45/0x80 [ 88.186463][ T25] ret_from_fork_asm+0x1a/0x30 [ 88.187914][ T25] [ 88.187914][ T25] other info that might help us debug this: [ 88.187914][ T25] [ 88.190762][ T25] Chain exists of: [ 88.190762][ T25] &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#51 --> &q->limits_lock [ 88.190762][ T25] [ 88.194873][ T25] Possible unsafe locking scenario: [ 88.194873][ T25] [ 88.197049][ T25] CPU0 CPU1 [ 88.198516][ T25] ---- ---- [ 88.199988][ T25] lock(&q->limits_lock); [ 88.201246][ T25] lock(&q->q_usage_counter(io)#51); [ 88.203414][ T25] lock(&q->limits_lock); [ 88.205299][ T25] rlock(&q->q_usage_counter(queue)#51); [ 88.206856][ T25] [ 88.206856][ T25] *** DEADLOCK *** [ 88.206856][ T25] [ 88.209045][ T25] 5 locks held by kworker/2:0/25: [ 88.210421][ T25] #0: ffff88801b088948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 88.213238][ T25] #1: ffffc9000063fd80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 88.216690][ T25] #2: ffff888026cfc358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470 [ 88.219483][ T25] #3: ffff888026ca4378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340 [ 88.222094][ T25] #4: ffff8880266a90c0 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 88.224961][ T25] [ 88.224961][ T25] stack backtrace: [ 88.226688][ T25] CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 88.229489][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.232433][ T25] Workqueue: events ata_scsi_dev_rescan [ 88.233998][ T25] Call Trace: [ 88.234942][ T25] [ 88.235783][ T25] dump_stack_lvl+0x116/0x1f0 [ 88.237112][ T25] print_circular_bug+0x419/0x5d0 [ 88.238532][ T25] check_noncircular+0x31a/0x400 [ 88.239927][ T25] ? __pfx_check_noncircular+0x10/0x10 [ 88.241469][ T25] ? lockdep_lock+0xc6/0x200 [ 88.242795][ T25] ? __pfx_lockdep_lock+0x10/0x10 [ 88.244222][ T25] __lock_acquire+0x249e/0x3c40 [ 88.245613][ T25] ? __pfx___lock_acquire+0x10/0x10 [ 88.247092][ T25] lock_acquire.part.0+0x11b/0x380 [ 88.248564][ T25] ? blk_mq_alloc_request+0x59b/0x950 [ 88.250067][ T25] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 88.251632][ T25] ? rcu_is_watching+0x12/0xc0 [ 88.253002][ T25] ? trace_lock_acquire+0x14e/0x1f0 [ 88.254527][ T25] ? blk_mq_alloc_request+0x59b/0x950 [ 88.256149][ T25] ? lock_acquire+0x2f/0xb0 [ 88.257445][ T25] ? blk_mq_alloc_request+0x59b/0x950 [ 88.258963][ T25] blk_queue_enter+0x50f/0x640 [ 88.260360][ T25] ? blk_mq_alloc_request+0x59b/0x950 [ 88.261876][ T25] ? __pfx_blk_queue_enter+0x10/0x10 [ 88.263391][ T25] ? lockdep_lock+0xc6/0x200 [ 88.264734][ T25] ? add_lock_to_list+0x17d/0x390 [ 88.266179][ T25] ? lockdep_unlock+0x11a/0x290 [ 88.267558][ T25] blk_mq_alloc_request+0x59b/0x950 [ 88.269037][ T25] ? __pfx_blk_mq_alloc_request+0x10/0x10 [ 88.270660][ T25] ? find_held_lock+0x2d/0x110 [ 88.272011][ T25] scsi_execute_cmd+0x1da/0xf40 [ 88.273407][ T25] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 88.274942][ T25] ? sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 88.276609][ T25] read_capacity_16+0x213/0xe10 [ 88.277981][ T25] ? blk_mq_free_request+0x1e9/0x340 [ 88.279497][ T25] ? __pfx_read_capacity_16+0x10/0x10 [ 88.281029][ T25] ? __pfx___mutex_lock+0x10/0x10 [ 88.282462][ T25] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 88.284112][ T25] ? mark_held_locks+0x9f/0xe0 [ 88.285506][ T25] ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10 [ 88.287259][ T25] ? kasan_save_stack+0x33/0x60 [ 88.288656][ T25] ? kasan_save_track+0x14/0x30 [ 88.290041][ T25] ? kasan_save_free_info+0x3b/0x60 [ 88.291522][ T25] ? __kasan_slab_free+0x51/0x70 [ 88.292928][ T25] ? kfree+0x14f/0x4b0 [ 88.294099][ T25] ? scsi_attach_vpd+0x4dc/0x580 [ 88.295602][ T25] ? scsi_rescan_device+0xf5/0x340 [ 88.297091][ T25] ? ata_scsi_dev_rescan+0x1cb/0x470 [ 88.298637][ T25] ? process_one_work+0x9c5/0x1ba0 [ 88.300194][ T25] ? worker_thread+0x6c8/0xf00 [ 88.301544][ T25] ? kthread+0x2c1/0x3a0 [ 88.302743][ T25] ? hlock_class+0x4e/0x130 [ 88.303997][ T25] ? mark_lock+0xb5/0xc60 [ 88.305223][ T25] ? mark_held_locks+0x9f/0xe0 [ 88.306583][ T25] ? kasan_quarantine_put+0x10a/0x240 [ 88.308083][ T25] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.309558][ T25] ? kfree+0x14f/0x4b0 [ 88.310681][ T25] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.312125][ T25] ? scsi_attach_vpd+0x4dc/0x580 [ 88.313524][ T25] ? scsi_attach_vpd+0x4dc/0x580 [ 88.314928][ T25] ? __pfx_sd_rescan+0x10/0x10 [ 88.316292][ T25] scsi_rescan_device+0x243/0x340 [ 88.317719][ T25] ata_scsi_dev_rescan+0x1cb/0x470 [ 88.319109][ T25] process_one_work+0x9c5/0x1ba0 [ 88.320507][ T25] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 88.322115][ T25] ? __pfx_process_one_work+0x10/0x10 [ 88.323609][ T25] ? rcu_is_watching+0x12/0xc0 [ 88.324960][ T25] ? assign_work+0x1a0/0x250 [ 88.326225][ T25] worker_thread+0x6c8/0xf00 [ 88.327474][ T25] ? __pfx_worker_thread+0x10/0x10 [ 88.328888][ T25] kthread+0x2c1/0x3a0 [ 88.330040][ T25] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.331483][ T25] ? __pfx_kthread+0x10/0x10 [ 88.332735][ T25] ret_from_fork+0x45/0x80 [ 88.333955][ T25] ? __pfx_kthread+0x10/0x10 [ 88.335236][ T25] ret_from_fork_asm+0x1a/0x30 [ 88.336540][ T25] VM DIAGNOSIS: 23:24:32 Registers: info registers vcpu 0 CPU#0 RAX=00000000000d0d54 RBX=0000000000000000 RCX=ffffffff8b2a17c9 RDX=ffffed100d4c6fee RSI=ffffffff8bd1eea0 RDI=ffffffff8170a6b9 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005572d8b9f908 CR3=000000004f088000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025d4b488 00007ff025d4b480 00007ff025d4b478 00007ff025d4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0268ad100 00007ff025d4b440 00007ff025d40004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025d4b498 00007ff025d4b490 00007ff025d4b488 00007ff025d4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000008d194 RBX=0000000000000001 RCX=ffffffff8b2a17c9 RDX=ffffed100d4e6fee RSI=ffffffff8bd1eea0 RDI=ffffffff8170a6b9 RBP=ffffed10039dd910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801ceec880 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002002d000 CR3=0000000028894000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7996202a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7996202aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7996202aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7996202ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7996202b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7996202c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f799634b488 00007f799634b480 00007f799634b478 00007f799634b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7996ead100 00007f799634b440 00007f7996340004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f799634b498 00007f799634b490 00007f799634b488 00007f799634b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c0ed5 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc9000063ea78 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=ffffffff851c0e70 R15=0000000000000000 RIP=ffffffff851c0eff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020005f18 CR3=000000002529e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffc0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc8bf38f99a4bfb7 2c9c692206f0603a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e779d30ab8f57d0a 7e90c372b8c9fcae ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bd503e296da91db7 9f9a670e5f9b4e77 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1dbb5cb812cb6c72 7f0f8e99eb2689d9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f4e9db07f523a26 000000367f540348 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 008001007f55ee7c ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003600800100 7f5081a600000036 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000000036 0000003600800100 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 36f86533937ccbb9 3d1eb4a0d0ab2fe1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6130836886d5c41d ddd50445f66d4fa1 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50da34b488 00007f50da34b480 00007f50da34b478 00007f50da34b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50daead100 00007f50da34b440 00007f50da34b458 00007f50da34b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50da34b498 00007f50da34b490 00007f50da34b488 00007f50da34b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000ddd0c RBX=0000000000000003 RCX=ffffffff8b2a17c9 RDX=ffffed100d526fee RSI=ffffffff8bd1eea0 RDI=ffffffff8170a6b9 RBP=ffffed1003a50488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d282440 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50da377bac CR3=000000004f088000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025c02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025d4b488 00007ff025d4b480 00007ff025d4b478 00007ff025d4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0268ad100 00007ff025d4b440 00007ff025d40004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff025d4b498 00007ff025d4b490 00007ff025d4b488 00007ff025d4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000