last executing test programs: 2m40.879091237s ago: executing program 1 (id=767): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000002c0)="23000000010006", 0x7) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r0, 0x400, 0x1) 2m40.163044195s ago: executing program 1 (id=777): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-512-generic)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b00001400"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc}) recvmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x2c, 0x2e, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0xffe0}, {0x7, 0x8}, {0xfff1, 0xfff3}}, [{0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8410) 2m39.803416228s ago: executing program 1 (id=781): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x3c}) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0xdafd, 0x0, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000340)={@val={0xa, 0x3da9}, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x29, 0x64, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010102, @multicast2}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x8001, 0x0, 0x2}, {':'}}}}}}}, 0x43) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000439000/0x3000)=nil, 0x3000, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10080}}, 0x20}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) getitimer(0x1, &(0x7f0000000100)) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0x7005, 0x0) readv(r10, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/190, 0xbe}], 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m38.571285327s ago: executing program 1 (id=793): syz_open_procfs(0x0, &(0x7f0000000180)='limits\x00') r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0xc, 0x31324d59, 0x2, @discrete={0x3, 0xd6}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') getdents64(r2, 0x0, 0x0) writev(r2, &(0x7f0000002580)=[{&(0x7f0000000040)="eb4123adf467662db356ea705fdb87b61a7251d914af074041fdeb0fb9cbd465853d343a88c11114dcee335905873c6a855320e29c5e7f04fdf0b84d11cdb40788", 0x41}, {&(0x7f00000000c0)="facc5923a9558562e6acbe43df29978aca2d647070a868349383a4228ffe001a6bc9d727f13ef3f708f5a9fd8ed9496775fb0fe8e49f46a64f20a91836783a213f6b93dc014761315ecafc", 0x4b}, {&(0x7f00000001c0)="4cc15e64e83249515d6c907fef1a20ff8403cee47b52d95b9b330a68faf03c83e8a900e5b72c1a212de097d1b623f7e3fe94dd065d81c567f6376738df7e4335bd694b094966fb2b9616898b3eb408e830ba03397460fc2b3d8249f57ab3bbff04e9708cbdff57300d1a", 0x6a}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="298782d31275242dfbc552f397fec44f08f0cb6c52575c8ecacd140fc99bb79c92b60af3a479661b960feee44c82c1b9133be6caa5f4ff908f2f18c2cfcd16b15af679bcf0a2fd90b887c153d69e9027d8a0572cfb0c8fdc4832f841f15d081da73a56cebd2fa1e0c9f93b98421d7f34a2d91840dc6830146ab020e567ea823f28d815ca2aae3e2eb1053f2229e8165363fc1e9d36d578c9ff992581ce15ac680347ca0a8c884ecb286d4e886ec473b4f4a105de3fe4e5dccf6bbc39844359e89248bf0ed70ff1040efca23238194b25e19bbffc66f3164a862ddbf310a75f9d2d48eaa6529a9d05", 0xe8}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="7fc467e8c5533a489b8a216b433614802c31ff71a00f3e8b8ac6b07add13e236c19ad5f44dae890145b58e3b7d149b802dddb430b24ca6e05990e681210303a02e7ac627e19ac59f6b5459eade3db4e6ee1ecb0485e30d74fd9a8b7cbb9db780d208f5e153dbc965127aa36d15ea66bd0193e8f2c1aaed1140c14920bc687593b3d44fa3bf5dab19fe7dc7f8ce3b6d5e144d716d208fea461da89b734d16b2f250c50801b4c5cb2b81b5ed3acf60eaf5a73059f53c9110f17f37ccc92062a39da3334d9d5be735e728d6e6282e8533e611524d547c0b5acc10a7dfbfa71f747b7f8aec3604706c63dea89034", 0xec}, {&(0x7f0000002440)="75f13a47b999324bc010cc92ef222796f28ac6be5b25187877bb27a67aeba5765dbce88d309837640e7a027f49e6f28c39ea86c729afd26adb4ec293ab40d6bcfcbec984358a108fc9c562c93dd418d7b200b7a4511495707d0c2823af95937830", 0x61}, {&(0x7f00000024c0)="0aa102c39acb214be62e7bcc4223f4d52445c3a6b94a50d411a4deda9ececcb6b0ddcdf7e5d510a0448e4b57ed75a5f026120fffa70d7d629c0632650135901552c9ce6d060b352db09265f4d9c979ff687122a28f4a40ab2834fc1801d269a153cb446e2923c3f9a5201ecc1cd0966aa60487042d780f5a461895beb4efed734cb55f39b6f86e2f2d04e3e15e6618aa21cb689bf41a3da06c5aad808ebb84de0f", 0xa1}], 0x9) lseek(r1, 0x9, 0x0) 2m38.570554248s ago: executing program 1 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ppoll(&(0x7f00000002c0)=[{r0, 0x4}, {r0, 0x204}], 0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x1f4}, 0x1, 0x0, 0x0, 0x967f1248fabd6489}, 0x480d0) 2m38.492866445s ago: executing program 1 (id=796): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@code={0x1, 0x71, {"440f083636420f218866baf80cb8fb3a4d82ef66bafc0cb09fee66baf80cb8beb3d781ef66bafc0c66b8010066ef410fc7be77c85711c401b572e20066b8df000f00d8b9af030000b8cf090000ba000000000f30670f6489c95a0000440f01c4"}}], 0x71}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@code={0x1, 0x71, {"440f083636420f218866baf80cb8fb3a4d82ef66bafc0cb09fee66baf80cb8beb3d781ef66bafc0c66b8010066ef410fc7be77c85711c401b572e20066b8df000f00d8b9af030000b8cf090000ba000000000f30670f6489c95a0000440f01c4"}}], 0x71}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4001, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x81, 0xffffffffefffff15, 0x3, 0x5, 0x3, 0xb37f]}}) socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m23.471628416s ago: executing program 32 (id=796): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@code={0x1, 0x71, {"440f083636420f218866baf80cb8fb3a4d82ef66bafc0cb09fee66baf80cb8beb3d781ef66bafc0c66b8010066ef410fc7be77c85711c401b572e20066b8df000f00d8b9af030000b8cf090000ba000000000f30670f6489c95a0000440f01c4"}}], 0x71}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@code={0x1, 0x71, {"440f083636420f218866baf80cb8fb3a4d82ef66bafc0cb09fee66baf80cb8beb3d781ef66bafc0c66b8010066ef410fc7be77c85711c401b572e20066b8df000f00d8b9af030000b8cf090000ba000000000f30670f6489c95a0000440f01c4"}}], 0x71}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4001, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x81, 0xffffffffefffff15, 0x3, 0x5, 0x3, 0xb37f]}}) socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.071729633s ago: executing program 2 (id=2013): socket$nl_route(0x10, 0x3, 0x0) 1m25.002366873s ago: executing program 2 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2c, r1, 0x1, 0xffffffff, 0x80000003, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x6, 0x2) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="e90b61de34d825e365b8e5348b071182ffb248b21b08c8181a73782c4647f0c68c81d105", 0x24}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 1m25.001751525s ago: executing program 2 (id=2015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90e46}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x4000090) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, r2}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001003d0800466574000048002c07979f15b9b34c6902802c0003007339f2f10461afb9fdd272bad09dfb78c7699c74e891a0c700000000001e00000000005a07592a6d166646128bcb000000008b93000240000000000e00010049444c4554494d4552000000090002007379060000000000140000001100010000000000000000000100be0000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}]}) syz_usb_disconnect(0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x1, 0xd}, {0x8100}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'gretap0\x00', r9, 0x40, 0x8000, 0x4, 0x5, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x47, 0x1, [{0x6, 0xa, "5827d99cf43686e6"}, {0x7, 0x12, "fd4231c25a3902e0a8ee73af5eac3a9b"}, {0x7, 0x3, "92"}, {0x2, 0x11, "05eeee36d99ea9893d7b79939a013a"}, {0x0, 0xc, "54a6ad60ae7aa342af55"}, {0x0, 0x5, "56a664"}]}, @noop, @generic={0x82, 0xd, "3882213c2603212f299522"}, @timestamp={0x44, 0x20, 0x41, 0x0, 0xf, [0x401, 0xd5ad, 0xff, 0xc9, 0x7, 0xfffffff8, 0x9]}]}}}}}) 1m24.152052356s ago: executing program 2 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x45, 0x3}, 0x6) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0xff03, 0x0) pidfd_send_signal(r3, 0x14, &(0x7f0000000080)={0xf, 0x5, 0xffffffff}, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000080)='./cgroup\x00', 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x2010, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SSP_DEBUG_MODE={{0x1}, 0x40}}}, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) close_range(r5, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r6 = landlock_create_ruleset(&(0x7f0000000040)={0x8034, 0x2, 0x2}, 0x18, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x10009, 0x35314241, 0x3, 0x0, 0xff, 0x0, 0x6, 0x1, 0x4, 0x1, 0x4}}) landlock_restrict_self(r6, 0x7) landlock_restrict_self(0xffffffffffffffff, 0x4) 1m24.011396186s ago: executing program 2 (id=2023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "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"}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x800, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x800000000000000, 0x8, 0x6, {0x2, 0x6, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r5, 0x0, 0x900, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e00)="d4", 0x1}], 0x1}}], 0x2, 0x10) r9 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r5, r9}}, './file0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m23.920666183s ago: executing program 2 (id=2026): setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8001) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000440)="4f5a46155226e5c0f61b3f50bea9df78350d0136f66acc8dbcee89d8702f8e2b6e608885b9f76c9c291ae6ccff41e68f0ad4804d75478995e048c2da652d967e55d3bc04de43064e8a04c147f4d6137b03980dc13d94dd03896e2ea6c2150b99d75d8033ed673209370a0348300bce9a82db10e8aea1e1336f0264c130f6200ec38b1096", 0x84}, {&(0x7f0000000700)="47a819ef19174fb4694ad456cd45390ebc5451d35c6755d0c24ee99fa2c8aec745ac7fd53ff09570a4cf6379640456c37df68b6e2571f7eeecc04b12a55cdee2057f9f30ef19a2162b928c13785f70b4b823ae5aa5865fa7abe43201e8e3d3a9c04dfea307ffae07e83fa31ce8a0e2d673bbde620b65190083ec45cdc273ee69d4c4e91c15a0db05adbd45d25d65cede1769fe18211b60b17dd897176ece33b8e5b42f1f65528fbc20af0dac28c36d73150838489c4104a815", 0xb9}, {&(0x7f00000005c0)="d77d22f82a43707a29", 0x9}, {&(0x7f0000000640)="53c01d62ee207318c5f319dbfe58eb1c7d59f698b69642e92698b5c789b29aa538181b0f38a5bb1c304f31f1647036ad7aa5365acffb7b58daa8284b03f5dcac5ab86bd63ab160610723516028cfe6283640b4ddde6f6280b8219814c1b159bcef2a2ed05c111387295ae86e6fe943f22f8c1ad7ac01961c47a12234c0abe1ea320bdf065c02d5721ba172e0", 0x8c}, {&(0x7f0000000a40)="c414ad967f0cc82993d550f9a7b14cd793daa5440f519b2be7b13f1f6436c1cca3cf3a3a798bd5e5641485fbb6a3758dd0a4ef692500361a7703048d07872271bae849f69758582a39883525dff75f896be1b146f81d037864b7ca8740869da0b5cc2e948a6cae7fdffd67e6c5a8c0251944ebe21167ee0caee0eabe50843ab889f281579bb8c1dd77f609fa6865031a3211536d719c4ea30327bb75b951f8e141674d23b4e79625ef0998813a296e747ede8573d1ddaa0c64077b8a5cba055a9ddd51d87a99c5c1f6d1", 0xca}, {&(0x7f0000000800)="0942be004085f51d27b2c62fc5f22f54681385b52344faf11f46b0b550d8212e1aefbe82e3c5fcbfa70f7bfb219e64a02a4b1a065b2afaccc6a7157acffa8477608c32b9ddb7c3c11198dca1f34505b1cb60a7081a394df0f4849c14cb85e9dfb23464d4a37d4223b92ff1ce05f75b6e7282d89935bdefed124603ddebf16d62cb703f865ac34fa3559e2a879e56143c49f578aa864262c3d0", 0x99}, {&(0x7f00000008c0)="33eb826df4b6bc06085beab53a795aa8a26adbfccee108c25a4893f75c7d07e32c9aa0e8a8afb8b441058a5480dcf8edb7150a3fb280262199913b62e8cb1003beda8424cf2d53df47c64b70ac41da96693216267975b31e7960e28e5c3e15af98c21f7c526992ae5efab4c69b0ddd87eaebc2daf2f45e3c5a361dabb46a9cecc87bbab90702b8becd3e543396db62e10481ca869e509d38281920cbba226855a44ae9679607f875bec700347d27091c9d215aac4747b568fa9294a131741894c38b59c663241c96a6480aa901070cc66fb3f359c8f5279360bd55ef24504c396f282b1c1a536d", 0xe7}, {&(0x7f0000000b40)="8920895250cb51b45ffc9bcc26524fb82ec1598c4143d5768a20de6f2d9e217f715cb1adb1c46e942e76f40ae8baa2270a1a6aa1fd379ce3adaa158023dcf5019e3beb07d2df8a58656030c8cd461b0bc170e3200ddc51b71f2c21d7fe50f8bfe69f8ef7095c72497d68edf5995712a4b60af2842fb6966c887884d490e45328de0c266f8fc7a8bafa576ec4a83e340bb1e844200bf0f33bc9bcca6c7985bbf3f412ce7bbe9bebfd76c78770d02fa6a46df1a4d5c696419af93f1edb047aba63ee0647f5ee", 0xc5}], 0x9}}], 0x1, 0x24040831) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x5d5b, &(0x7f00000009c0)={0x0, 0x32dd, 0x400, 0x1, 0x321}, &(0x7f0000000600)=0x0, &(0x7f00000007c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x10c, &(0x7f0000000c40)=0xe08, 0x0, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="334dac32598adc435d1b04c48cc4a25e0c9880f3ed8f64b8f32fc2f1007ef96dcb4223b1b81cbbfa94b3b517882d9cb21cf2f11555a5d5df0962585544331360d674f4df46efd3aa8039dd44c0a064bfec242c060bcc17d218871d7685835f2f8e851e2a02d206256013a7afb8c49b323db9878f6ee6b53e89dc38009bdb3f9791e905aa53508fa9a58ebfb104f148d39bba97e0c928c41193fbf2395f6daf4fe51cf59dc6bad685a0f56dd8be03666853bd7cb93cb9409d107bc2eddb0f0a8d13e43f4cf659ea3b5226d425b28d4963cf0f0d11fc51946583b044d92659c04a1bdd3538", 0xe4}, {&(0x7f0000000000)="544011b9ac4afc09eb89a6be610d8b2b0afba5a136006428ee72d3ef94bd2f9003068e1b02e83ea97f35ed85f80d106dc1244ada2537f19d23823592e395943ad76f1c81c7ee8cfe320055d467b2497a793b73ae0387cdbdad5ccbecacf212043dc4761824fc1071b86f39f57816507bb831a808fde1caa2079d5f620a6c983d4e19267331db", 0x86}], 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 1m23.832598743s ago: executing program 33 (id=2026): setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8001) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="2a2952f97535d11253edcf5f9de8425d83e6f0473c167336143aa6b351514cf1df8f914b0c030fc23e8aeeffec6bcd12b08db45da9fb441042028d40df49012cf714d0cb708d7bf5465465bbb3ba68e26c3291ac68429d2a892da56546c45e57abf5604423f44077e520ec92fade4bc4a016f47df48145ca678905519a3bc744d0f3a4a838a30cf9350d9485a771b4662e552872049ac628f5f38c841a29a41857782bb88251ea38250ccfff7aed5c7ee82d4edefef1832d06daf897f5a4061b6b4e02f393d9d3356d95c18429aea01e534f99d150307ddb1873afd5e7eacfb43557685c3748305f84975b5327215821d061ea2c0f4dd0f8188f69", 0xfb}, {&(0x7f0000000440)="4f5a46155226e5c0f61b3f50bea9df78350d0136f66acc8dbcee89d8702f8e2b6e608885b9f76c9c291ae6ccff41e68f0ad4804d75478995e048c2da652d967e55d3bc04de43064e8a04c147f4d6137b03980dc13d94dd03896e2ea6c2150b99d75d8033ed673209370a0348300bce9a82db10e8aea1e1336f0264c130f6200ec38b1096", 0x84}, {&(0x7f0000000700)="47a819ef19174fb4694ad456cd45390ebc5451d35c6755d0c24ee99fa2c8aec745ac7fd53ff09570a4cf6379640456c37df68b6e2571f7eeecc04b12a55cdee2057f9f30ef19a2162b928c13785f70b4b823ae5aa5865fa7abe43201e8e3d3a9c04dfea307ffae07e83fa31ce8a0e2d673bbde620b65190083ec45cdc273ee69d4c4e91c15a0db05adbd45d25d65cede1769fe18211b60b17dd897176ece33b8e5b42f1f65528fbc20af0dac28c36d73150838489c4104a815", 0xb9}, {&(0x7f00000005c0)="d77d22f82a43707a29", 0x9}, {&(0x7f0000000640)="53c01d62ee207318c5f319dbfe58eb1c7d59f698b69642e92698b5c789b29aa538181b0f38a5bb1c304f31f1647036ad7aa5365acffb7b58daa8284b03f5dcac5ab86bd63ab160610723516028cfe6283640b4ddde6f6280b8219814c1b159bcef2a2ed05c111387295ae86e6fe943f22f8c1ad7ac01961c47a12234c0abe1ea320bdf065c02d5721ba172e0", 0x8c}, {&(0x7f0000000a40)="c414ad967f0cc82993d550f9a7b14cd793daa5440f519b2be7b13f1f6436c1cca3cf3a3a798bd5e5641485fbb6a3758dd0a4ef692500361a7703048d07872271bae849f69758582a39883525dff75f896be1b146f81d037864b7ca8740869da0b5cc2e948a6cae7fdffd67e6c5a8c0251944ebe21167ee0caee0eabe50843ab889f281579bb8c1dd77f609fa6865031a3211536d719c4ea30327bb75b951f8e141674d23b4e79625ef0998813a296e747ede8573d1ddaa0c64077b8a5cba055a9ddd51d87a99c5c1f6d1", 0xca}, {&(0x7f0000000800)="0942be004085f51d27b2c62fc5f22f54681385b52344faf11f46b0b550d8212e1aefbe82e3c5fcbfa70f7bfb219e64a02a4b1a065b2afaccc6a7157acffa8477608c32b9ddb7c3c11198dca1f34505b1cb60a7081a394df0f4849c14cb85e9dfb23464d4a37d4223b92ff1ce05f75b6e7282d89935bdefed124603ddebf16d62cb703f865ac34fa3559e2a879e56143c49f578aa864262c3d0", 0x99}, {&(0x7f00000008c0)="33eb826df4b6bc06085beab53a795aa8a26adbfccee108c25a4893f75c7d07e32c9aa0e8a8afb8b441058a5480dcf8edb7150a3fb280262199913b62e8cb1003beda8424cf2d53df47c64b70ac41da96693216267975b31e7960e28e5c3e15af98c21f7c526992ae5efab4c69b0ddd87eaebc2daf2f45e3c5a361dabb46a9cecc87bbab90702b8becd3e543396db62e10481ca869e509d38281920cbba226855a44ae9679607f875bec700347d27091c9d215aac4747b568fa9294a131741894c38b59c663241c96a6480aa901070cc66fb3f359c8f5279360bd55ef24504c396f282b1c1a536d", 0xe7}, {&(0x7f0000000b40)="8920895250cb51b45ffc9bcc26524fb82ec1598c4143d5768a20de6f2d9e217f715cb1adb1c46e942e76f40ae8baa2270a1a6aa1fd379ce3adaa158023dcf5019e3beb07d2df8a58656030c8cd461b0bc170e3200ddc51b71f2c21d7fe50f8bfe69f8ef7095c72497d68edf5995712a4b60af2842fb6966c887884d490e45328de0c266f8fc7a8bafa576ec4a83e340bb1e844200bf0f33bc9bcca6c7985bbf3f412ce7bbe9bebfd76c78770d02fa6a46df1a4d5c696419af93f1edb047aba63ee0647f5ee", 0xc5}], 0x9}}], 0x1, 0x24040831) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x5d5b, &(0x7f00000009c0)={0x0, 0x32dd, 0x400, 0x1, 0x321}, &(0x7f0000000600)=0x0, &(0x7f00000007c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x10c, &(0x7f0000000c40)=0xe08, 0x0, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="334dac32598adc435d1b04c48cc4a25e0c9880f3ed8f64b8f32fc2f1007ef96dcb4223b1b81cbbfa94b3b517882d9cb21cf2f11555a5d5df0962585544331360d674f4df46efd3aa8039dd44c0a064bfec242c060bcc17d218871d7685835f2f8e851e2a02d206256013a7afb8c49b323db9878f6ee6b53e89dc38009bdb3f9791e905aa53508fa9a58ebfb104f148d39bba97e0c928c41193fbf2395f6daf4fe51cf59dc6bad685a0f56dd8be03666853bd7cb93cb9409d107bc2eddb0f0a8d13e43f4cf659ea3b5226d425b28d4963cf0f0d11fc51946583b044d92659c04a1bdd3538", 0xe4}, {&(0x7f0000000000)="544011b9ac4afc09eb89a6be610d8b2b0afba5a136006428ee72d3ef94bd2f9003068e1b02e83ea97f35ed85f80d106dc1244ada2537f19d23823592e395943ad76f1c81c7ee8cfe320055d467b2497a793b73ae0387cdbdad5ccbecacf212043dc4761824fc1071b86f39f57816507bb831a808fde1caa2079d5f620a6c983d4e19267331db", 0x86}], 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 989.944308ms ago: executing program 0 (id=3434): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) preadv(r0, &(0x7f0000002bc0)=[{&(0x7f0000002a40)=""/172, 0xac}], 0x1, 0x9d, 0x80) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="17ae0b42030000004de885b5ebb27c5b52", 0x20) 911.059612ms ago: executing program 0 (id=3435): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r3, 0x25, 0x4, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000980)={@local, @random="4a36292432ca", @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "e0fef6", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x400, 0x0, 0x1, 0xe, 0x4, 0x0, 0x8, 0x600, 0x1, 0x4e20, 0x4e22}}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000841}, 0x2000800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xffffffff, 0x5, 0x0, 0x1, 0x4, "d4bec7601066a4d2d8d3ecc57974891c656194", 0xfffffffe, 0x15}) writev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1) 751.575788ms ago: executing program 3 (id=3437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r6) (async) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r9, 0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10380300000100002800128008000100677470001c00028008000100", @ANYRES32=r1], 0x50}}, 0x24000840) 661.519604ms ago: executing program 3 (id=3438): sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x34, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x30) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 605.799852ms ago: executing program 0 (id=3441): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x3, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x18}, 0x60) listen(r0, 0x7f2f) ppoll(&(0x7f0000000080)=[{r0, 0x1080}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) (fail_nth: 1) 605.358035ms ago: executing program 3 (id=3442): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0xfffffffffffffdaa}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 500.012196ms ago: executing program 0 (id=3444): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x2, @multicast2}}}, 0x88) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0xcc, 0x24, 0x300, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x13, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x9c, 0x2, {{0x3, 0x4, 0x5, 0x7fffffff, 0xfe83, 0x4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x6f45f892, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0x6, 0x3, 0x3}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x8, 0x5}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0xfffffff7}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0xd0e}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x9, 0x5}}]}}}]}, 0xcc}}, 0x4040) 499.195991ms ago: executing program 5 (id=3447): clock_gettime(0x3, &(0x7f0000000400)) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x14, &(0x7f0000000cc0)={{0x1}, 0x0, 0x0}, 0x20) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaa4aa0001af78ac1414bbac14140ef1040000219ea949dc1532cd8161e7811aa311a809e226ab2570c0d4e9279d477c47f1f6d6ddb26ad99cab75615cda552fd037c1011011edf41aac185e9ffedfe48cd176ead2bfece5afa5022a4e4010709f6c9b874e3cdce87f"], 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 64) r6 = socket(0x15, 0xa, 0x54) (rerun: 64) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023bd7000fedbdf25030000000800060008000000e57ca7b016444c0ab7dec8a894af8823d468db22dcae935328b9e1ab9793d4b1d8778ddb1158372ddbb73f"], 0x1c}, 0x1, 0x0, 0x0, 0x8004004}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYBLOB="e46b9aba83873423fa9793af5927dd5c991165d1d56fd32786b2a3be6f393a305562e310e38a49a7f863f737f13150c284dc9a1d1862118f1e19c50b38103d8e23ce87410cf113504d9e5801513ac65b0d985f925bbe09dcda07bbc9c002b0545eeb65b9ab405f0013775333101d56935ad27cda97a8c58d95f213332f659c3ffe137ac267426340e346c913e9759fa09e81d81ff0", @ANYRES64=r5, @ANYRES32=r7], 0x1c}}, 0x0) (async) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000004c0)=0x200, 0x4) (async, rerun: 64) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x87) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) sendto$inet(r0, &(0x7f0000000080), 0xe, 0x24008005, &(0x7f0000000080)={0x2, 0x4e21}, 0x10) shutdown(r0, 0x1) (async, rerun: 32) recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x40) 430.692818ms ago: executing program 0 (id=3448): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x78) close(r0) execveat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x800) 430.568757ms ago: executing program 5 (id=3449): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000fe0100a5a5090001"], 0x2c}}, 0x2044) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38, 0x8000}, 0x20000000) 430.23244ms ago: executing program 3 (id=3450): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000000, 0x100) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd2, 0x8}) 429.704558ms ago: executing program 0 (id=3451): sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 429.3541ms ago: executing program 3 (id=3452): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000012c0)='oom_score\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100", 0x3}], 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x3a, 0x0, [{0xc0000101, 0x0, 0x4}]}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x38011, r5, 0x0) read$FUSE(r1, &(0x7f0000001300)={0x2020}, 0x2020) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x9, 0x80, 0x4}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 321.563464ms ago: executing program 4 (id=3453): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x3, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x18}, 0x60) listen(r0, 0x7f2f) ppoll(&(0x7f0000000080)=[{r0, 0x1080}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 218.068631ms ago: executing program 4 (id=3454): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x3, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x18}, 0x60) listen(r0, 0x7f2f) ppoll(&(0x7f0000000080)=[{r0, 0x1080}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) (fail_nth: 2) 217.923892ms ago: executing program 5 (id=3455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x3000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000001b"]) 158.751042ms ago: executing program 4 (id=3456): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x3, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x18}, 0x60) listen(r0, 0x4) ppoll(&(0x7f0000000080)=[{r0, 0x1080}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 156.683896ms ago: executing program 5 (id=3457): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000fe880000000000000000000000000001e00000020000000000040000000000004e200000000000000000000002000000400ada2bfd238487afb3e5ff7ba2e94332bdc204134014e1098f1d8e3a73400477a947e52632ff6bbc9ecf090d73ce4e890c4308", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0400000000000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 156.502264ms ago: executing program 4 (id=3458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000480)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x40}, @broadcast}}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) syz_emit_ethernet(0xf2, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2e, 0xe4, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote}, {{0x5e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x17, 0x8, 0xfffd, 0x0, 0x57, {[@fastopen={0x22, 0xa, "45514fd1bd773e2e"}, @sack={0x5, 0x1e, [0x5, 0x2, 0x80000000, 0x73d3, 0x1, 0x5, 0x7fff]}, @generic={0x8, 0xd, "0318ff8a0237c078d4475d"}, @md5sig={0x13, 0x12, "e2b7fcb62108817d4c3be53c1d1ceeef"}]}}, {"5a69d2c40dce276d48997830cbb72570744e2a8687c163cd5016515ec1568f8153006737854a8aa85fef0fe9b93db1ecdd1a89d7da9d35b0920fe1fb43d38850bde5819f8b39ebbd4a92b10d7b02f7a046942cb900000000000000bb9d6d6c88599d8b7c2615fc2227540b97b956e7f1986941cf"}}}}}}, 0x0) (async) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/144, 0x90}, {&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f00000004c0)=""/94, 0x5e}], 0x3, &(0x7f00000008c0)=""/4096, 0x1000}, 0x161) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e002800640000acc114bb4e224e220000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50046071907800e7"], 0x0) 71.346306ms ago: executing program 4 (id=3459): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h'], 0x68}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100821}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x64}, 0x40d0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x0) 69.905952ms ago: executing program 5 (id=3460): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000001c0)=0x9, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000800)=0x9, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0xa180, 0x0) readahead(r4, 0xd5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) preadv(r3, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1000000000000133, 0x0, 0xfd) syz_clone3(&(0x7f0000000140)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 69.735812ms ago: executing program 4 (id=3461): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x200080e0}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00168008000f00884827"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000040)) 1.162113ms ago: executing program 5 (id=3462): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x3, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x18}, 0x60) listen(r0, 0x7f2f) ppoll(&(0x7f0000000080)=[{r0, 0x1080}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 0s ago: executing program 3 (id=3463): keyctl$clear(0x3, 0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0x0, 0x7, 0x3}) r2 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='b\x9f\x16\xe5\x99', 0xfffffffffffffff9) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003800)='net/igmp6\x00') fcntl$setownex(r3, 0xf, &(0x7f0000003880)={0x1}) fcntl$getflags(r3, 0xb) keyctl$link(0x8, r2, r2) kernel console output (not intermixed with test programs): syz.4.1567 (pid 11464) Use of int in max_burst socket option deprecated. [ 200.422766][T11464] Use struct sctp_assoc_value instead [ 200.669020][T11481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11481 comm=syz.4.1571 [ 200.884490][ T861] tipc: Node number set to 2130706433 [ 200.936293][T11506] sysfs: Unknown parameter 'ussquota' [ 201.106163][T11514] veth0_to_bridge: left allmulticast mode [ 201.108782][T11514] veth0_to_bridge: left promiscuous mode [ 201.110755][T11509] cdrom: dropping to single frame dma [ 201.111142][T11514] bridge0: port 3(veth0_to_bridge) entered disabled state [ 201.124081][T11514] bridge_slave_1: left allmulticast mode [ 201.126464][T11514] bridge_slave_1: left promiscuous mode [ 201.128642][T11514] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.133843][T11514] bridge_slave_0: left allmulticast mode [ 201.136276][T11514] bridge_slave_0: left promiscuous mode [ 201.138044][T11514] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.264129][ T72] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 201.436320][ T72] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 201.439251][ T72] usb 8-1: config 1 has no interface number 0 [ 201.441877][ T72] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 201.445505][ T72] usb 8-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 201.449661][ T72] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 201.456695][ T72] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 201.460293][ T72] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.463113][ T72] usb 8-1: Product: syz [ 201.465790][ T72] usb 8-1: Manufacturer: syz [ 201.467762][ T72] usb 8-1: SerialNumber: syz [ 201.476810][T11506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 201.479843][T11506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 201.484498][ T72] usb 8-1: Expected 3 endpoints, found: 2 [ 201.655184][T11550] @: renamed from vlan0 (while UP) [ 201.779027][T11565] binder: 11564:11565 ioctl c0306201 2000000001c0 returned -14 [ 201.785377][T11565] binder: BINDER_SET_CONTEXT_MGR already set [ 201.787893][T11565] binder: 11564:11565 ioctl 4018620d 2000000000c0 returned -16 [ 201.878795][T11575] netlink: 'syz.2.1597': attribute type 142 has an invalid length. [ 202.037933][T11580] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 202.184108][T11585] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 202.261052][T11593] sctp: [Deprecated]: syz.2.1603 (pid 11593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.261052][T11593] Use struct sctp_sack_info instead [ 202.430382][T11610] netlink: 'syz.2.1607': attribute type 10 has an invalid length. [ 202.639777][T11618] syzkaller1: entered promiscuous mode [ 202.641842][T11618] syzkaller1: entered allmulticast mode [ 202.646385][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 202.646395][ T40] audit: type=1400 audit(2000000037.659:1050): avc: denied { map } for pid=11617 comm="syz.2.1609" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.656205][ T40] audit: type=1400 audit(2000000037.659:1051): avc: denied { execute } for pid=11617 comm="syz.2.1609" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.184069][ T72] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 203.309123][T11629] netlink: 'syz.4.1612': attribute type 4 has an invalid length. [ 203.345434][ T72] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 203.348861][ T72] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 203.351973][ T72] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 203.356313][T11635] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 203.360807][ T72] usb 7-1: string descriptor 0 read error: -22 [ 203.362789][ T72] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.367294][ T72] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.371736][T11627] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 203.490777][T11643] __nla_validate_parse: 11 callbacks suppressed [ 203.490829][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1615'. [ 203.580249][ T72] cdc_ncm 7-1:1.0: bind() failure [ 203.583441][T11643] hsr_slave_1 (unregistering): left promiscuous mode [ 203.584936][ T72] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 203.588298][ T72] cdc_ncm 7-1:1.1: bind() failure [ 203.592366][ T72] usb 7-1: USB disconnect, device number 16 [ 203.664086][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 203.746952][T11650] bridge3: entered allmulticast mode [ 203.950902][ T5973] usb 8-1: USB disconnect, device number 14 [ 203.997581][T11665] usb usb9: usbfs: process 11665 (syz.3.1620) did not claim interface 0 before use [ 204.000762][T11666] usb usb9: usbfs: process 11666 (syz.3.1620) did not claim interface 0 before use [ 204.118420][T11672] geneve2: entered promiscuous mode [ 204.120396][T11672] geneve2: entered allmulticast mode [ 204.219688][T11680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1625'. [ 204.225561][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1625'. [ 204.267115][T11678] bond3: entered promiscuous mode [ 204.270345][T11678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.275310][T11678] bond0: (slave bond3): Enslaving as a backup interface with a down link [ 204.363700][T11692] lo speed is unknown, defaulting to 1000 [ 204.366995][T11692] xfrm0 speed is unknown, defaulting to 1000 [ 204.387517][T11696] fuse: Bad value for 'fd' [ 204.405103][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1629'. [ 204.408824][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 204.414677][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1629'. [ 204.418417][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 204.460479][T11702] nvme_fabrics: missing parameter 'transport=%s' [ 204.463079][T11702] nvme_fabrics: missing parameter 'nqn=%s' [ 204.557469][T11711] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1635'. [ 204.561451][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 204.562405][ T40] audit: type=1400 audit(2000000039.569:1052): avc: denied { mount } for pid=11710 comm="syz.3.1634" name="/" dev="gadgetfs" ino=7992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 204.572480][ T40] audit: type=1400 audit(2000000039.579:1053): avc: denied { mounton } for pid=11710 comm="syz.3.1634" path="/432/file0" dev="gadgetfs" ino=7992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 204.583963][ T40] audit: type=1400 audit(2000000039.589:1054): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 204.672902][T11727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1638'. [ 204.706571][T11733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11733 comm=syz.3.1639 [ 204.712194][T11733] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 204.727104][T11717] block nbd0: Attempted send on invalid socket [ 204.729304][T11733] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.729688][T11717] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.736631][T11717] block nbd0: Attempted send on invalid socket [ 204.739677][T11717] I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.742650][T11717] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 204.748789][T11717] block nbd0: Attempted send on invalid socket [ 204.750553][T11733] bond7: (slave erspan1): making interface the new active one [ 204.751087][T11717] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.755560][T11733] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 204.757370][T11717] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 204.763340][T11717] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 204.766494][T11717] UDF-fs: Scanning with blocksize 512 failed [ 204.769817][T11717] block nbd0: Attempted send on invalid socket [ 204.772049][T11717] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.775904][ T40] audit: type=1400 audit(2000000039.789:1055): avc: denied { ioctl } for pid=11715 comm="syz.0.1637" path="socket:[43428]" dev="sockfs" ino=43428 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 204.776063][T11717] block nbd0: Attempted send on invalid socket [ 204.790314][T11717] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.793255][T11717] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 204.796476][T11717] block nbd0: Attempted send on invalid socket [ 204.798443][T11717] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.801352][T11717] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 204.805337][T11717] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 204.807798][T11717] UDF-fs: Scanning with blocksize 1024 failed [ 204.810084][T11717] block nbd0: Attempted send on invalid socket [ 204.812058][T11717] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.816391][T11717] block nbd0: Attempted send on invalid socket [ 204.818624][T11717] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.822101][T11717] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 204.825415][T11717] block nbd0: Attempted send on invalid socket [ 204.827362][T11717] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.830694][T11717] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 204.833620][T11717] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 204.836036][T11717] UDF-fs: Scanning with blocksize 2048 failed [ 204.838223][T11717] block nbd0: Attempted send on invalid socket [ 204.840575][T11717] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.844968][T11717] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 204.849047][T11717] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 204.849497][ T40] audit: type=1400 audit(2000000039.859:1056): avc: denied { setopt } for pid=11737 comm="syz.3.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.852855][T11717] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 204.852870][T11717] UDF-fs: Scanning with blocksize 4096 failed [ 204.852879][T11717] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 204.931340][ T40] audit: type=1400 audit(2000000039.939:1057): avc: denied { shutdown } for pid=11751 comm="syz.3.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.953749][T11753] lo speed is unknown, defaulting to 1000 [ 204.957838][T11753] xfrm0 speed is unknown, defaulting to 1000 [ 204.997794][ T40] audit: type=1400 audit(2000000040.009:1058): avc: denied { create } for pid=11751 comm="syz.3.1645" name="#1f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 205.006402][ T40] audit: type=1400 audit(2000000040.009:1059): avc: denied { link } for pid=11751 comm="syz.3.1645" name="#1f" dev="tmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 205.178876][T11775] overlayfs: statfs failed on './file0' [ 205.352972][T11763] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.357346][T11763] block device autoloading is deprecated and will be removed. [ 205.391678][ T63] Bluetooth: hci3: unexpected event for opcode 0xa8ef [ 205.421998][T11794] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 205.498782][T11802] macvlan0: entered promiscuous mode [ 205.502200][T11802] batadv_slave_1: entered promiscuous mode [ 206.082431][T11825] can0: slcan on ttyS3. [ 206.157054][T11823] can0 (unregistered): slcan off ttyS3. [ 206.277270][T11848] tmpfs: Bad value for 'mpol' [ 206.503045][T11862] IPVS: set_ctl: invalid protocol: 25966 109.99.102.105:27764 [ 206.621030][T11864] team0 (unregistering): Port device bond0 removed [ 206.892905][T11872] netlink: 'syz.4.1683': attribute type 13 has an invalid length. [ 206.937562][T11872] erspan0: refused to change device tx_queue_len [ 206.939594][T11872] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 206.975115][T11877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11877 comm=syz.0.1685 [ 207.074476][T11887] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 207.076894][T11887] PKCS7: Only support pkcs7_signedData type [ 207.164859][T11892] netlink: 'syz.4.1690': attribute type 2 has an invalid length. [ 207.167611][T11892] netlink: 'syz.4.1690': attribute type 1 has an invalid length. [ 207.170889][T11892] netlink: 'syz.4.1690': attribute type 1 has an invalid length. [ 207.244947][T11898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.908554][T11901] tmpfs: Unknown parameter 'mpo' [ 207.932934][T11905] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 207.969679][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 207.969693][ T40] audit: type=1400 audit(2000000042.979:1078): avc: denied { setopt } for pid=11904 comm="syz.0.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.353707][T11937] overlayfs: overlapping lowerdir path [ 208.637648][T11947] team0: Port device team_slave_0 removed [ 208.719073][ T40] audit: type=1400 audit(2000000043.729:1079): avc: denied { mount } for pid=11951 comm="syz.0.1707" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 208.740977][T11957] __nla_validate_parse: 5 callbacks suppressed [ 208.740987][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 208.805702][T11963] usb usb1: check_ctrlrecip: process 11963 (syz.3.1712) requesting ep 01 but needs 81 [ 208.808914][T11963] usb usb1: usbfs: process 11963 (syz.3.1712) did not claim interface 0 before use [ 208.836724][ T40] audit: type=1400 audit(2000000043.849:1080): avc: denied { append } for pid=11967 comm="syz.0.1713" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.879559][T11973] netlink: 'syz.0.1714': attribute type 2 has an invalid length. [ 208.916609][ T40] audit: type=1400 audit(2000000043.929:1081): avc: denied { read } for pid=11976 comm="syz.0.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.077201][T11997] overlayfs: failed to clone upperpath [ 209.973817][T12038] sp0: Synchronizing with TNC [ 209.985024][T12039] [U] ` [ 210.075510][T12044] futex_wake_op: syz.4.1736 tries to shift op by -1; fix this program [ 210.084254][T12046] overlayfs: missing 'lowerdir' [ 210.725003][T12074] veth0: entered promiscuous mode [ 210.726978][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 210.770804][T12074] veth0 (unregistering): left promiscuous mode [ 211.272334][T12094] tmpfs: Bad value for 'mpol' [ 211.998983][ T40] audit: type=1326 audit(2000000047.009:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1754" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724f58ec29 code=0x7fc00000 [ 212.061636][ T40] audit: type=1326 audit(2000000047.069:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.1756" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f724f58ec29 code=0x0 [ 212.278226][ T40] audit: type=1400 audit(2000000047.289:1084): avc: denied { getopt } for pid=12102 comm="syz.0.1757" lport=34317 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 212.337922][T12106] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 212.345520][T12106] bond0: (slave bond_slave_0): Releasing backup interface [ 212.385312][T12106] bond0: (slave bond_slave_1): Releasing backup interface [ 212.426225][T12106] team0: Port device team_slave_1 removed [ 212.428275][T12106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.430897][T12106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.433590][T12106] bond2: left allmulticast mode [ 212.435665][T12106] bridge5: port 1(bond2) entered disabled state [ 212.442721][T12106] bond4: (slave geneve2): Releasing active interface [ 212.444705][T12106] geneve2: left promiscuous mode [ 212.474077][ T861] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 212.536842][ T7450] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.540470][ T7450] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.545458][ T7450] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.548413][ T7450] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.716698][T12120] binder: 12119:12120 ioctl c0306201 200000000640 returned -22 [ 212.729887][T12120] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.740509][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 212.745802][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 212.749015][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 212.752142][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 212.756722][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 212.788215][ T40] audit: type=1400 audit(2000000047.799:1085): avc: denied { listen } for pid=12123 comm="syz.3.1763" path=0000224E0000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 212.826178][T12127] SELinux: failed to load policy [ 212.827494][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 212.831739][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 212.920521][T12140] overlayfs: failed to clone upperpath [ 213.052996][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 213.056971][ T34] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 213.087989][T12158] lo speed is unknown, defaulting to 1000 [ 213.090790][T12158] xfrm0 speed is unknown, defaulting to 1000 [ 213.292065][T12173] overlayfs: failed to clone lowerpath [ 213.294497][T12171] overlayfs: failed to clone lowerpath [ 213.416612][ T40] audit: type=1326 audit(2000000048.429:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12185 comm="syz.0.1779" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f460fd8ec29 code=0xffff0000 [ 213.971310][T12192] __nla_validate_parse: 3 callbacks suppressed [ 213.971324][T12192] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1783'. [ 214.069789][T12194] sch_fq: defrate 0 ignored. [ 214.152457][T12205] tmpfs: Bad value for 'mpol' [ 214.277760][T12217] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 214.409722][ T40] audit: type=1400 audit(2000000049.419:1087): avc: denied { accept } for pid=12221 comm="syz.4.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.509086][T12240] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 214.517127][T12240] CIFS mount error: No usable UNC path provided in device string! [ 214.517127][T12240] [ 214.520422][T12240] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.911083][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 214.995620][T12257] batadv1: entered promiscuous mode [ 214.997806][T12257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 215.006735][T12258] batadv2: entered promiscuous mode [ 215.009870][T12258] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 215.052992][T12263] netlink: 'syz.0.1803': attribute type 10 has an invalid length. [ 215.056347][T12263] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 215.061380][T12263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.069268][T12263] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 215.113690][ T40] audit: type=1400 audit(2000000050.119:1088): avc: denied { ioctl } for pid=12268 comm="syz.0.1806" path="socket:[44848]" dev="sockfs" ino=44848 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 215.116887][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'. [ 215.149209][T12266] tmpfs: Bad value for 'huge' [ 215.349349][T12293] overlayfs: missing 'workdir' [ 215.351463][ T40] audit: type=1400 audit(2000000050.359:1089): avc: denied { mounton } for pid=12292 comm="syz.2.1814" path="/387/file0" dev="9p" ino=71827789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.544061][ T40] audit: type=1400 audit(2000000050.549:1090): avc: denied { ioctl } for pid=12320 comm="syz.4.1820" path="socket:[44013]" dev="sockfs" ino=44013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.631618][T12328] "syz.2.1823" (12328) uses obsolete ecb(arc4) skcipher [ 215.662835][T12344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1825'. [ 215.667171][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12344 comm=syz.2.1825 [ 215.786197][T12356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1830'. [ 215.830425][T12364] cgroup: name respecified [ 215.921205][ T40] audit: type=1400 audit(2000000050.929:1091): avc: denied { append } for pid=12366 comm="syz.0.1833" path="/473/file0/cgroup.controllers" dev="9p" ino=71827947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.929045][ T40] audit: type=1400 audit(2000000050.939:1092): avc: denied { lock } for pid=12366 comm="syz.0.1833" path="/473/file0/cgroup.controllers" dev="9p" ino=71827947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.934058][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 216.085140][ T34] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.088841][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.092346][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 216.095636][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.099790][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.102705][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.106551][ T34] usb 7-1: config 0 descriptor?? [ 216.127843][ T5382] udevd[5382]: worker [9451] terminated by signal 33 (Unknown signal 33) [ 216.130752][ T5382] udevd[5382]: worker [9451] failed while handling '/devices/platform/dummy_hcd.2/usb7/7-1' [ 216.207118][ T5382] udevd[5382]: worker [9450] terminated by signal 33 (Unknown signal 33) [ 216.209846][ T5382] udevd[5382]: worker [9450] failed while handling '/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0' [ 216.512511][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.516275][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.518626][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.521017][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.523547][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.526110][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.528524][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.530744][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.533056][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.535533][ T34] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 216.544225][ T34] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 216.587884][T12373] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1835'. [ 216.693815][ T40] audit: type=1400 audit(2000000051.699:1093): avc: denied { getopt } for pid=12381 comm="syz.3.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 216.792669][T12392] Device name cannot be null; rc = [-22] [ 216.799103][T12393] netlink: 'syz.4.1844': attribute type 15 has an invalid length. [ 216.804800][T12393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.807760][T12393] IPv6: NLM_F_CREATE should be set when creating new route [ 216.871116][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'. [ 216.872066][ T34] usb 7-1: USB disconnect, device number 17 [ 216.884880][ T40] audit: type=1400 audit(2000000051.889:1094): avc: denied { map } for pid=12403 comm="syz.4.1848" path="socket:[49258]" dev="sockfs" ino=49258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.891762][ T40] audit: type=1400 audit(2000000051.889:1095): avc: denied { read } for pid=12403 comm="syz.4.1848" path="socket:[49258]" dev="sockfs" ino=49258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.940680][T12412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.984833][T12423] netlink: 'syz.3.1855': attribute type 29 has an invalid length. [ 216.994534][T12416] tipc: Enabling of bearer rejected, failed to enable media [ 217.010409][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1853'. [ 217.036310][T12428] overlayfs: missing 'workdir' [ 217.043715][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 217.296498][T12454] 9pnet_virtio: no channels available for device syz [ 217.296681][T12451] team0: Device gtp0 is of different type [ 217.457444][T12458] netlink: 'syz.3.1866': attribute type 10 has an invalid length. [ 217.460075][T12458] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1866'. [ 217.462855][T12458] team0: entered promiscuous mode [ 217.464815][T12458] team_slave_0: entered promiscuous mode [ 217.466779][T12458] team_slave_1: entered promiscuous mode [ 217.468861][T12458] bridge0: port 4(team0) entered blocking state [ 217.470916][T12458] bridge0: port 4(team0) entered disabled state [ 217.472933][T12458] team0: entered allmulticast mode [ 217.474892][T12458] team_slave_0: entered allmulticast mode [ 217.476689][T12458] team_slave_1: entered allmulticast mode [ 217.479873][T12458] bridge0: port 4(team0) entered blocking state [ 217.481872][T12458] bridge0: port 4(team0) entered forwarding state [ 217.490349][T12460] evm: overlay not supported [ 217.558890][T12464] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 217.633494][T12470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.664678][T12473] overlayfs: workdir and upperdir must be separate subtrees [ 217.743169][T12479] nbd_handle_cmd: 2 callbacks suppressed [ 217.743183][T12479] block nbd2: Attempted send on invalid socket [ 217.747225][T12479] blk_print_req_error: 2 callbacks suppressed [ 217.747234][T12479] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.752427][T12479] block nbd2: Attempted send on invalid socket [ 217.755377][T12479] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.760317][T12479] Mount JFS Failure: -5 [ 217.762230][T12479] jfs_mount failed w/return code = -5 [ 217.798061][T12484] netlink: 'syz.0.1876': attribute type 6 has an invalid length. [ 217.801399][T12484] netlink: 'syz.0.1876': attribute type 6 has an invalid length. [ 217.833559][T12481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16402 sclass=netlink_route_socket pid=12481 comm=syz.2.1875 [ 217.838465][T12481] BIDI support in bsg has been removed. [ 218.085102][T12509] IPVS: set_ctl: invalid protocol: 156 0.0.0.0:20002 [ 218.452363][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 218.452374][ T40] audit: type=1400 audit(2000000053.459:1107): avc: denied { wake_alarm } for pid=12561 comm="syz.0.1899" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.471082][ T40] audit: type=1400 audit(2000000053.479:1108): avc: denied { create } for pid=12567 comm="syz.3.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 218.479653][ T40] audit: type=1400 audit(2000000053.479:1109): avc: denied { listen } for pid=12567 comm="syz.3.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 218.487424][T12564] trusted_key: encrypted_key: insufficient parameters specified [ 218.490307][T12564] trusted_key: encrypted_key: master key parameter 'def' is invalid [ 218.608575][T12573] block nbd2: shutting down sockets [ 218.659568][ T40] audit: type=1400 audit(2000000053.669:1110): avc: denied { setopt } for pid=12596 comm="syz.3.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.672069][T12605] lo: entered promiscuous mode [ 218.701981][T12610] overlayfs: failed to clone upperpath [ 218.771057][ T40] audit: type=1400 audit(2000000053.779:1111): avc: denied { connect } for pid=12618 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.797752][T12628] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 218.797758][T12629] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 218.880660][T12638] tipc: Started in network mode [ 218.882233][T12638] tipc: Node identity ac14142f, cluster identity 4711 [ 218.887372][T12638] tipc: New replicast peer: 0.0.0.0 [ 218.889291][T12638] tipc: Enabled bearer , priority 10 [ 218.891667][T12638] tipc: New replicast peer: 255.255.255.255 [ 218.896981][T12638] netlink: 'syz.2.1921': attribute type 1 has an invalid length. [ 218.919489][T12638] bond5: (slave geneve3): making interface the new active one [ 218.923333][T12638] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 218.927830][ T7456] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.930569][ T7456] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.935691][ T7456] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.940520][T12638] bond5: entered promiscuous mode [ 218.942180][T12638] geneve3: entered promiscuous mode [ 218.945358][T12638] bond5: entered allmulticast mode [ 218.947018][T12638] geneve3: entered allmulticast mode [ 218.949435][T12638] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.951835][ T7456] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.986855][ T40] audit: type=1400 audit(2000000053.999:1112): avc: denied { create } for pid=12643 comm="syz.2.1922" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 219.065558][T12653] netlink: 'syz.4.1925': attribute type 62 has an invalid length. [ 219.068297][T12653] __nla_validate_parse: 7 callbacks suppressed [ 219.068305][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1925'. [ 219.124688][T12653] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 219.159486][ T40] audit: type=1400 audit(2000000054.169:1113): avc: denied { append } for pid=12657 comm="syz.2.1926" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 219.210954][ T40] audit: type=1400 audit(2000000054.219:1114): avc: denied { connect } for pid=12657 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.586954][ T40] audit: type=1400 audit(2000000054.599:1115): avc: denied { ioctl } for pid=12671 comm="syz.2.1930" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 219.781056][T12685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12685 comm=syz.3.1934 [ 219.893965][ T72] tipc: Node number set to 2886997039 [ 220.034440][T12696] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 220.048763][T12696] CUSE: unknown device info "&b%ZW)3\my " [ 220.051001][T12696] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 220.055303][T12696] CUSE: DEVNAME unspecified [ 220.091355][ T40] audit: type=1400 audit(2000000055.099:1116): avc: denied { getopt } for pid=12697 comm="syz.0.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.236212][T12718] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 220.534667][T12740] 9pnet_virtio: no channels available for device syz [ 220.825290][T12754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=12754 comm=syz.0.1953 [ 220.830432][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'. [ 220.944025][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 221.232346][T12770] ceph: Path missing in source [ 221.752266][T12794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.758744][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1964'. [ 221.852482][T12805] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1967'. [ 221.968561][T12819] hugetlbfs: Unknown parameter 'sizne' [ 221.972688][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 221.976833][T12819] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 221.979909][T12819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.012656][T12823] ip6gre0: entered allmulticast mode [ 222.018366][T12825] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1973'. [ 222.422829][T12846] block device autoloading is deprecated and will be removed. [ 222.943248][T12868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.972224][T12870] loop2: detected capacity change from 0 to 7 [ 222.977857][ T7945] Dev loop2: unable to read RDB block 7 [ 222.980079][ T7945] loop2: unable to read partition table [ 222.982470][ T7945] loop2: partition table beyond EOD, truncated [ 222.993292][T12870] Dev loop2: unable to read RDB block 7 [ 222.999741][T12870] loop2: unable to read partition table [ 223.001607][T12870] loop2: partition table beyond EOD, truncated [ 223.003686][T12870] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 223.091898][T12876] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.094766][T12874] ip6gre0: entered allmulticast mode [ 223.181007][T12876] tmpfs: Unknown parameter '0x000000000000000b' [ 223.184525][T12875] delete_channel: no stack [ 223.186240][T12875] delete_channel: no stack [ 223.836847][T12885] ALSA: mixer_oss: invalid index 100000 [ 223.839247][T12885] ALSA: mixer_oss: invalid OSS volume '' [ 223.861562][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 223.865955][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 223.866716][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1991'. [ 223.874584][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1991'. [ 224.091369][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 224.091381][ T40] audit: type=1326 audit(2000000059.099:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.0.1998" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f460fd8ec29 code=0x0 [ 224.142811][T12909] __nla_validate_parse: 66 callbacks suppressed [ 224.142828][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 224.364117][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 224.525048][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 224.538444][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 224.550760][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 224.553714][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 224.554719][T12912] netfs: Couldn't get user pages (rc=-14) [ 224.556527][ T9] usb 7-1: Product: syz [ 224.559690][ T9] usb 7-1: Manufacturer: syz [ 224.561173][ T9] usb 7-1: SerialNumber: syz [ 224.564744][ T9] usb 7-1: config 0 descriptor?? [ 224.568641][T12908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.821154][ T40] audit: type=1400 audit(2000000059.829:1130): avc: denied { create } for pid=12931 comm="syz.3.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 224.829007][ T72] usb 7-1: USB disconnect, device number 18 [ 224.829471][ T40] audit: type=1400 audit(2000000059.829:1131): avc: denied { sys_admin } for pid=12931 comm="syz.3.2005" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 224.832286][T12933] lo speed is unknown, defaulting to 1000 [ 224.842408][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 224.879950][T12933] lo speed is unknown, defaulting to 1000 [ 224.882807][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 224.920543][T12933] lo speed is unknown, defaulting to 1000 [ 224.923006][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 224.972916][T12933] lo speed is unknown, defaulting to 1000 [ 224.977668][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 225.049829][T12933] lo speed is unknown, defaulting to 1000 [ 225.053478][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 225.149960][T12933] lo speed is unknown, defaulting to 1000 [ 225.152505][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 225.305145][ T40] audit: type=1400 audit(2000000060.299:1132): avc: denied { accept } for pid=12948 comm="syz.4.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 225.372449][T12933] lo speed is unknown, defaulting to 1000 [ 225.386649][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 225.431070][T12962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12962 comm=syz.2.2011 [ 225.540215][T12933] lo speed is unknown, defaulting to 1000 [ 225.542716][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 225.919081][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2015'. [ 226.139983][T12953] 9pnet_fd: p9_fd_create_tcp (12953): problem connecting socket to 127.0.0.1 [ 227.084907][ T40] audit: type=1400 audit(2000000062.099:1133): avc: denied { execute } for pid=13003 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 227.092391][ T40] audit: type=1400 audit(2000000062.099:1134): avc: denied { execute_no_trans } for pid=13003 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 227.240683][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.248273][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.252070][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.256210][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.261483][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.272370][ T40] audit: type=1400 audit(2000000062.279:1135): avc: denied { mounton } for pid=13011 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 227.297455][T13011] lo speed is unknown, defaulting to 1000 [ 227.300054][T13011] xfrm0 speed is unknown, defaulting to 1000 [ 227.413149][T13011] chnl_net:caif_netlink_parms(): no params data found [ 227.497531][T13011] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.499868][T13011] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.502076][T13011] bridge_slave_0: entered allmulticast mode [ 227.505093][T13011] bridge_slave_0: entered promiscuous mode [ 227.509704][T13011] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.512694][T13011] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.516821][T13011] bridge_slave_1: entered allmulticast mode [ 227.519683][T13011] bridge_slave_1: entered promiscuous mode [ 227.561584][T13011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.566471][T13011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.599922][T13011] team0: Port device team_slave_0 added [ 227.604149][T13011] team0: Port device team_slave_1 added [ 227.623983][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 227.648178][T13011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.650899][T13011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.661335][T13011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.665966][T13011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.668162][T13011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.677136][T13011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.719138][T13011] hsr_slave_0: entered promiscuous mode [ 227.721528][T13011] hsr_slave_1: entered promiscuous mode [ 227.724348][T13011] debugfs: 'hsr0' already exists in 'hsr' [ 227.726377][T13011] Cannot create hsr debugfs directory [ 227.763973][ T9] usb 8-1: device descriptor read/64, error -71 [ 227.910055][T13032] netlink: 'syz.4.2034': attribute type 2 has an invalid length. [ 227.913112][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 227.940404][T13011] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.945305][T13011] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.949933][T13011] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.954976][T13011] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.000109][T13011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.007143][T13047] lo speed is unknown, defaulting to 1000 [ 228.011857][T13047] xfrm0 speed is unknown, defaulting to 1000 [ 228.013810][T13011] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.024044][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 228.048427][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.051209][ T7458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.078612][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.081637][ T7458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.138444][T13061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2038'. [ 228.167877][ T9] usb 8-1: device descriptor read/64, error -71 [ 228.274254][ T9] usb usb8-port1: attempt power cycle [ 228.298742][T13011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.362672][T13086] fuse: Unknown parameter '000000351843720939520x0000000000000004' [ 228.407703][ T40] audit: type=1400 audit(2000000063.419:1136): avc: denied { accept } for pid=13088 comm="syz.0.2046" path=2F3533352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 228.445021][T13097] input: syz0 as /devices/virtual/input/input14 [ 228.478993][T13011] veth0_vlan: entered promiscuous mode [ 228.485406][T13011] veth1_vlan: entered promiscuous mode [ 228.509588][T13011] veth0_macvtap: entered promiscuous mode [ 228.514943][T13011] veth1_macvtap: entered promiscuous mode [ 228.523514][T13011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.563338][T13011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.576183][ T7477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.581788][ T7477] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.594725][ T7477] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.607227][T13104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.609189][T13100] [U] v3f"S/4:XTzWtlW= [ 228.613360][T13100] [U] J"e:" [ 228.615769][T13100] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2048'. [ 228.638466][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 228.641827][ T7477] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.654955][ T9] usb 8-1: device descriptor read/8, error -71 [ 228.914245][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 228.934439][ T9] usb 8-1: device descriptor read/8, error -71 [ 228.950036][T13123] tipc: Enabling of bearer rejected, failed to enable media [ 229.050866][ T9] usb usb8-port1: unable to enumerate USB device [ 229.136754][T13131] netlink: 163952 bytes leftover after parsing attributes in process `syz.4.2059'. [ 229.344164][ T5972] Bluetooth: hci0: command tx timeout [ 229.352725][T13142] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2062'. [ 229.555493][T13153] netlink: 'syz.4.2065': attribute type 9 has an invalid length. [ 229.558010][T13153] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.2065'. [ 229.583825][T13155] netlink: 'syz.4.2066': attribute type 5 has an invalid length. [ 229.621850][T13159] pimreg: entered allmulticast mode [ 229.651974][ T40] audit: type=1400 audit(2000000064.659:1137): avc: denied { accept } for pid=13161 comm="syz.4.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 229.979891][ T40] audit: type=1400 audit(2000000064.989:1138): avc: denied { mount } for pid=13177 comm="syz.4.2071" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 230.425160][T13183] overlayfs: failed to resolve './file0': -2 [ 230.428281][T13183] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 230.431327][T13183] overlayfs: missing 'lowerdir' [ 230.464280][ T5972] Bluetooth: hci3: command 0x040f tx timeout [ 230.464338][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 230.469324][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 230.583794][T13191] vxfs: WRONG superblock magic 00000000 at 1 [ 230.587487][T13191] vxfs: WRONG superblock magic 00000000 at 8 [ 230.589704][T13191] vxfs: can't find superblock. [ 230.688644][T13194] 9pnet: Unknown protocol version 9p20\++} [ 230.876009][T13197] nbd: must specify a device to reconfigure [ 230.880979][ T40] audit: type=1400 audit(2000000065.889:1139): avc: denied { block_suspend } for pid=13196 comm="syz.4.2078" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.952926][T13201] tipc: Enabled bearer , priority 17 [ 231.042219][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'. [ 231.046241][T13203] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 231.049591][T13203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.054444][ T40] audit: type=1400 audit(2000000066.069:1140): avc: denied { accept } for pid=13202 comm="syz.4.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 231.128858][T13207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2082'. [ 231.130319][T13208] netlink: 'syz.4.2082': attribute type 10 has an invalid length. [ 231.276996][T13214] : renamed from wg2 (while UP) [ 231.394503][ T40] audit: type=1326 audit(2000000066.409:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724f58ec29 code=0x50000 [ 231.404186][ T40] audit: type=1326 audit(2000000066.409:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724f58ec29 code=0x50000 [ 231.413293][ T40] audit: type=1326 audit(2000000066.409:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724f58ec29 code=0x50000 [ 231.422198][ T40] audit: type=1326 audit(2000000066.409:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724f58ec29 code=0x50000 [ 231.423994][ T5972] Bluetooth: hci0: command tx timeout [ 231.429615][ T40] audit: type=1326 audit(2000000066.409:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724f58ec29 code=0x50000 [ 231.439176][ T40] audit: type=1326 audit(2000000066.409:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724f58ec29 code=0x50000 [ 232.200194][T13221] overlayfs: failed to clone upperpath [ 232.340717][T13231] netlink: 'syz.4.2088': attribute type 21 has an invalid length. [ 232.344258][T13231] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2088'. [ 232.554171][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 232.556758][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 232.589871][T13241] sysfs: Unknown parameter 'usrquota' [ 232.768146][T13110] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 232.769397][T13111] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 232.805212][ T7477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.812451][ T7477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.837683][ T7447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.840726][ T7447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.941557][T13256] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 232.968479][T13258] netlink: 'syz.5.2098': attribute type 4 has an invalid length. [ 233.020005][T13261] Bluetooth: MGMT ver 1.23 [ 233.022522][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2100'. [ 233.026622][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2100'. [ 233.030269][T13263] netlink: 'syz.5.2100': attribute type 11 has an invalid length. [ 233.084451][ T72] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 233.246601][ T72] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 233.250139][ T72] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 233.254260][ T72] usb 8-1: config 0 interface 0 has no altsetting 0 [ 233.262096][ T72] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 233.266670][ T72] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 233.270133][ T72] usb 8-1: Product: syz [ 233.271972][ T72] usb 8-1: Manufacturer: syz [ 233.274060][ T72] usb 8-1: SerialNumber: syz [ 233.278118][ T72] usb 8-1: config 0 descriptor?? [ 233.282173][ T72] hub 8-1:0.0: bad descriptor, ignoring hub [ 233.285323][ T72] hub 8-1:0.0: probe with driver hub failed with error -5 [ 233.290701][ T72] usb 8-1: selecting invalid altsetting 0 [ 233.314566][ T861] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 233.322279][T13277] tmpfs: Bad value for 'mpol' [ 233.473273][ T861] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 233.477074][ T861] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 233.481554][ T861] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 233.486913][ T861] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.495586][ T861] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 233.499535][ T861] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.502826][ T861] usb 10-1: Product: syz [ 233.504948][ T861] usb 10-1: Manufacturer: syz [ 233.507029][ T861] usb 10-1: SerialNumber: syz [ 233.513564][ T861] usb 10-1: config 0 descriptor?? [ 233.523144][ T861] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input15 [ 233.564242][ C3] kbtab 10-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 233.706165][T13247] usb 8-1: reset high-speed USB device number 19 using dummy_hcd [ 233.711655][T13247] usb 8-1: device reset changed ep0 maxpacket size! [ 233.717877][ T5973] usb 8-1: USB disconnect, device number 19 [ 233.884294][ T5973] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 234.034003][ T5973] usb 8-1: Using ep0 maxpacket: 8 [ 234.038858][ T5973] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 234.042383][ T5973] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 234.046874][ T5973] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.052986][ T5973] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.056837][ T5973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.060170][ T5973] usb 8-1: Product: syz [ 234.061933][ T5973] usb 8-1: Manufacturer: syz [ 234.064762][ T5973] usb 8-1: SerialNumber: syz [ 234.283250][ T5973] usb 8-1: 0:2 : does not exist [ 234.302261][ T5973] usb 8-1: USB disconnect, device number 20 [ 234.336790][ T7945] udevd[7945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.365633][T13299] netlink: 'syz.4.2111': attribute type 2 has an invalid length. [ 234.368901][T13299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.462512][T13304] fuse: Unknown parameter '0000000000000000000300000000000000000000003' [ 234.463972][T13305] fuse: Unknown parameter '0000000000000000000300000000000000000000003' [ 234.597003][ T10] usb 10-1: USB disconnect, device number 2 [ 235.007081][T13355] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 235.042618][T13355] bridge0: port 4(team0) entered disabled state [ 235.054962][T13355] bridge0: port 3(batadv0) entered disabled state [ 235.060183][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.065502][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.112162][ T72] xfrm0 speed is unknown, defaulting to 1000 [ 235.164997][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2125'. [ 235.182072][T13357] netlink: 'syz.3.2127': attribute type 2 has an invalid length. [ 235.494411][T13366] netlink: 'syz.4.2129': attribute type 1 has an invalid length. [ 235.497599][T13366] netlink: 'syz.4.2129': attribute type 2 has an invalid length. [ 235.639656][T13372] bridge0: port 1(syz_tun) entered blocking state [ 235.642768][T13372] bridge0: port 1(syz_tun) entered disabled state [ 235.649341][T13372] syz_tun: entered allmulticast mode [ 235.652979][T13372] syz_tun: entered promiscuous mode [ 235.715271][T13378] lo speed is unknown, defaulting to 1000 [ 235.718816][T13378] xfrm0 speed is unknown, defaulting to 1000 [ 235.739098][T13379] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2132'. [ 235.774140][T13380] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2132'. [ 235.798967][T13378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13378 comm=syz.4.2133 [ 235.805373][T13378] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2133'. [ 235.938806][T13403] tipc: Enabling of bearer rejected, failed to enable media [ 236.332379][T13426] netlink: 'syz.4.2146': attribute type 13 has an invalid length. [ 236.470942][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 236.470957][ T40] audit: type=1326 audit(2000000071.479:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.3.2148" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f29eab85be7 code=0x0 [ 237.065677][ T40] audit: type=1400 audit(2000000072.069:1220): avc: denied { create } for pid=13434 comm="syz.5.2150" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 237.074310][ T40] audit: type=1400 audit(2000000072.089:1221): avc: denied { mounton } for pid=13434 comm="syz.5.2150" path="/file0" dev="hugetlbfs" ino=52066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 237.132681][ T40] audit: type=1400 audit(2000000072.139:1222): avc: denied { listen } for pid=13434 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.197329][T13442] Invalid ELF header type: 0 != 1 [ 237.197337][ T40] audit: type=1400 audit(2000000072.209:1223): avc: denied { module_load } for pid=13440 comm="syz.4.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 237.348737][ T40] audit: type=1400 audit(2000000072.359:1224): avc: denied { accept } for pid=13457 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 237.349373][T13458] netlink: 'syz.0.2158': attribute type 8 has an invalid length. [ 237.359419][ T40] audit: type=1400 audit(2000000072.359:1225): avc: denied { setopt } for pid=13453 comm="syz.5.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.406714][T13465] tmpfs: User quota block hardlimit too large. [ 237.501841][ T40] audit: type=1400 audit(2000000072.509:1226): avc: denied { create } for pid=13480 comm="syz.5.2164" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 237.564902][ T40] audit: type=1326 audit(2000000072.569:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.2159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460fd8ec29 code=0x7fc00000 [ 237.590068][ T40] audit: type=1400 audit(2000000072.599:1228): avc: denied { unlink } for pid=13011 comm="syz-executor" name="file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 237.698096][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2165'. [ 237.703339][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2165'. [ 238.526337][T13518] macsec0: left promiscuous mode [ 238.528711][T13518] bridge4: left promiscuous mode [ 238.533029][T13518] bond4: left promiscuous mode [ 238.536079][T13518] batadv1: left promiscuous mode [ 238.538629][T13518] batadv2: left promiscuous mode [ 238.564334][ T861] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 238.573359][T13518] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 238.645397][T13530] random: crng reseeded on system resumption [ 238.651366][T13530] Restarting kernel threads ... [ 238.656731][T13530] Done restarting kernel threads. [ 238.658785][T13530] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 238.693829][T13532] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 238.842487][T13550] program syz.3.2186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.950344][T13558] IPVS: Scheduler module ip_vs_sip not found [ 238.991480][T13561] openvswitch: netlink: IP tunnel TTL not specified. [ 239.024055][ T861] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 239.091659][T13570] program syz.3.2193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.133603][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 239.510419][T13605] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13605 comm=syz.3.2203 [ 239.623658][T13614] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2207'. [ 239.635884][ T7462] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.639203][ T7462] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.664324][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.682131][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2208'. [ 239.792558][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 240.362083][T13683] tun0: tun_chr_ioctl cmd 1074025675 [ 240.365954][T13683] tun0: persist enabled [ 240.367904][T13683] tun0: tun_chr_ioctl cmd 1074025675 [ 240.369614][T13683] tun0: persist enabled [ 240.398303][T13689] __nla_validate_parse: 1 callbacks suppressed [ 240.398314][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'. [ 240.417230][T13691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13691 comm=syz.4.2231 [ 240.446642][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 240.482362][T13708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.536815][T13716] overlayfs: failed to clone upperpath [ 240.554253][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.619742][T13723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2241'. [ 240.624069][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.248488][T13741] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2247'. [ 241.374742][T13743] xt_l2tp: invalid flags combination: 8 [ 241.378744][T13745] sp0: Synchronizing with TNC [ 241.444574][T13743] [U] [ 241.484168][ T72] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 241.576268][T13762] trusted_key: encrypted_key: master key parameter is missing [ 241.609627][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 241.612994][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 241.654976][ T72] usb 8-1: Using ep0 maxpacket: 8 [ 241.665588][ T72] usb 8-1: config 9 has an invalid interface number: 8 but max is 3 [ 241.669067][ T72] usb 8-1: config 9 has an invalid interface number: 138 but max is 3 [ 241.672518][ T72] usb 8-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 241.678895][ T72] usb 8-1: config 9 has an invalid interface number: 61 but max is 3 [ 241.682369][ T72] usb 8-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 241.686123][ T72] usb 8-1: config 9 has an invalid interface number: 4 but max is 3 [ 241.690022][ T72] usb 8-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 241.693761][ T72] usb 8-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 241.699934][ T72] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 241.704311][ T72] usb 8-1: config 9 has no interface number 0 [ 241.707450][ T72] usb 8-1: config 9 has no interface number 1 [ 241.710025][ T72] usb 8-1: config 9 has no interface number 2 [ 241.712509][ T72] usb 8-1: config 9 has no interface number 3 [ 241.715457][ T72] usb 8-1: config 9 interface 8 altsetting 96 has an invalid descriptor for endpoint zero, skipping [ 241.719881][ T72] usb 8-1: config 9 interface 8 altsetting 96 has 4 endpoint descriptors, different from the interface descriptor's value: 15 [ 241.726156][ T72] usb 8-1: config 9 interface 138 altsetting 239 has an invalid descriptor for endpoint zero, skipping [ 241.731186][ T72] usb 8-1: config 9 interface 138 altsetting 239 has a duplicate endpoint with address 0xB, skipping [ 241.735955][ T72] usb 8-1: config 9 interface 138 altsetting 239 has an invalid descriptor for endpoint zero, skipping [ 241.741078][ T72] usb 8-1: config 9 interface 138 altsetting 239 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 241.746350][ T72] usb 8-1: config 9 interface 138 altsetting 239 has a duplicate endpoint with address 0x8F, skipping [ 241.750879][ T72] usb 8-1: config 9 interface 138 altsetting 239 has a duplicate endpoint with address 0x9, skipping [ 241.756052][ T72] usb 8-1: config 9 interface 138 altsetting 239 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 241.760524][ T72] usb 8-1: config 9 interface 138 altsetting 239 has a duplicate endpoint with address 0x4, skipping [ 241.766568][ T72] usb 8-1: config 9 interface 138 altsetting 239 has an invalid descriptor for endpoint zero, skipping [ 241.770419][ T72] usb 8-1: config 9 interface 138 altsetting 239 has 11 endpoint descriptors, different from the interface descriptor's value: 5 [ 241.774595][ T72] usb 8-1: config 9 interface 61 altsetting 40 has a duplicate endpoint with address 0x1, skipping [ 241.777920][ T72] usb 8-1: config 9 interface 61 altsetting 40 has a duplicate endpoint with address 0x1, skipping [ 241.781247][ T72] usb 8-1: config 9 interface 61 altsetting 40 endpoint 0x7 has invalid maxpacket 80, setting to 64 [ 241.785032][ T72] usb 8-1: config 9 interface 61 altsetting 40 has a duplicate endpoint with address 0xA, skipping [ 241.788293][ T72] usb 8-1: config 9 interface 61 altsetting 40 has an endpoint descriptor with address 0x48, changing to 0x8 [ 241.791732][ T72] usb 8-1: config 9 interface 4 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 241.795063][ T72] usb 8-1: config 9 interface 4 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 241.798637][ T72] usb 8-1: config 9 interface 4 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 241.802592][ T72] usb 8-1: config 9 interface 4 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 241.806008][ T72] usb 8-1: config 9 interface 4 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 241.809264][ T72] usb 8-1: config 9 interface 4 altsetting 3 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 241.813215][ T72] usb 8-1: config 9 interface 8 has no altsetting 0 [ 241.815817][ T72] usb 8-1: config 9 interface 138 has no altsetting 0 [ 241.817917][ T72] usb 8-1: config 9 interface 61 has no altsetting 0 [ 241.820038][ T72] usb 8-1: config 9 interface 4 has no altsetting 0 [ 241.823646][ T72] usb 8-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=c5.0e [ 241.826471][ T72] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.828957][ T72] usb 8-1: Product: syz [ 241.830616][ T72] usb 8-1: Manufacturer: ⠊ [ 241.832019][ T72] usb 8-1: SerialNumber: syz [ 241.836132][T13739] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.880072][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2261'. [ 241.894218][ T9] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 241.979584][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 241.979594][ T40] audit: type=1400 audit(2000000076.989:1233): avc: denied { write } for pid=13796 comm="syz.4.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.021127][T13801] netlink: 'syz.4.2264': attribute type 1 has an invalid length. [ 242.024097][ T9] usb 10-1: device descriptor read/64, error -71 [ 242.025593][T13802] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 242.033935][T13801] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 242.061049][ T72] usb 8-1: USB disconnect, device number 21 [ 242.260912][ T40] audit: type=1400 audit(2000000077.269:1234): avc: denied { execmod } for pid=13818 comm="syz.4.2266" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=54167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 242.264262][ T9] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 242.288066][T13821] only policy match revision 0 supported [ 242.288082][T13821] unable to load match [ 242.404839][ T9] usb 10-1: device descriptor read/64, error -71 [ 242.514388][ T9] usb usb10-port1: attempt power cycle [ 242.531345][T13835] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 242.539289][T13836] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 242.672918][T13839] can: request_module (can-proto-0) failed. [ 242.858953][ T9] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 242.876027][ T9] usb 10-1: device descriptor read/8, error -71 [ 243.030058][T13873] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2283'. [ 243.114402][ T9] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 243.138207][ T9] usb 10-1: device descriptor read/8, error -71 [ 243.244141][ T9] usb usb10-port1: unable to enumerate USB device [ 243.246562][T13892] tmpfs: Unknown parameter 'mpolprefer' [ 243.302874][T13908] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 243.305686][T13908] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.309181][T13908] vhci_hcd vhci_hcd.0: Device attached [ 243.413379][T13925] fuse: Bad value for 'fd' [ 243.504155][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.553987][ T861] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 244.029825][T13909] vhci_hcd: connection reset by peer [ 244.033992][ T7447] vhci_hcd: stop threads [ 244.035882][ T7447] vhci_hcd: release socket [ 244.039570][ T7447] vhci_hcd: disconnect device [ 244.227721][T13937] sit0: entered allmulticast mode [ 244.296146][T13944] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2303'. [ 244.387526][T13948] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2305'. [ 245.276992][T13989] tun0: tun_chr_ioctl cmd 1074025675 [ 245.278702][T13989] tun0: persist enabled [ 245.280365][T13989] tun0: tun_chr_ioctl cmd 1074025675 [ 245.282015][T13989] tun0: persist enabled [ 245.411530][ T40] audit: type=1326 audit(2000000080.419:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14006 comm="syz.4.2323" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f724f58ec29 code=0x0 [ 245.515671][T14015] openvswitch: netlink: Message has 24 unknown bytes. [ 245.517972][T14015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.548457][T14017] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 246.169446][T14051] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 246.172078][T14051] netlink: 'syz.0.2336': attribute type 2 has an invalid length. [ 246.452723][T13425] syz_tun (unregistering): left allmulticast mode [ 246.454937][T13425] syz_tun (unregistering): left promiscuous mode [ 246.458813][T13425] bridge0: port 1(syz_tun) entered disabled state [ 246.460095][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.465034][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.469887][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.473446][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.476785][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.498908][T14057] lo speed is unknown, defaulting to 1000 [ 246.501885][T14057] xfrm0 speed is unknown, defaulting to 1000 [ 246.606413][T14057] chnl_net:caif_netlink_parms(): no params data found [ 246.698326][T14057] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.701150][T14057] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.704311][T14057] bridge_slave_0: entered allmulticast mode [ 246.707691][T14057] bridge_slave_0: entered promiscuous mode [ 246.714040][T14057] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.716844][T14057] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.719314][T14057] bridge_slave_1: entered allmulticast mode [ 246.722934][T14057] bridge_slave_1: entered promiscuous mode [ 246.770416][T14057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.776782][T14057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.826666][T14057] team0: Port device team_slave_0 added [ 246.830769][T14057] team0: Port device team_slave_1 added [ 246.884570][T14057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.886857][T14057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.896991][T14057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.902879][T14057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.905908][T14057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.916246][T14057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.970838][T14057] hsr_slave_0: entered promiscuous mode [ 246.973296][T14057] hsr_slave_1: entered promiscuous mode [ 246.976002][T14057] debugfs: 'hsr0' already exists in 'hsr' [ 246.977896][T14057] Cannot create hsr debugfs directory [ 247.067045][T14090] __nla_validate_parse: 1 callbacks suppressed [ 247.067060][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2349'. [ 247.069851][T14091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2349'. [ 247.589387][T14057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.596705][T14057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.601499][T14057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.607112][T14057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.666566][T14057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.680194][T14057] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.687020][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.689649][ T7447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.698786][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.701188][ T7456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.864909][T14057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.896722][T14057] veth0_vlan: entered promiscuous mode [ 247.902204][T14057] veth1_vlan: entered promiscuous mode [ 247.921059][T14057] veth0_macvtap: entered promiscuous mode [ 247.924913][T14057] veth1_macvtap: entered promiscuous mode [ 247.934286][T14057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.942021][T14057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.942166][T14143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2361'. [ 247.949341][ T7462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.953015][ T7462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.957222][ T7462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.960574][ T7462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.978830][T14143] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 248.006861][ T7458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.009424][ T7458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.031993][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.035831][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.108646][T14145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38416 sclass=netlink_route_socket pid=14145 comm=syz.0.2338 [ 248.401576][T14163] random: crng reseeded on system resumption [ 248.449107][T14166] dvmrp17: entered allmulticast mode [ 248.452736][T14166] dvmrp17: left allmulticast mode [ 248.475743][T14168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2371'. [ 248.516648][T14174] tun0: tun_chr_ioctl cmd 1074025675 [ 248.518349][T14174] tun0: persist enabled [ 248.520191][T14174] tun0: tun_chr_ioctl cmd 1074025675 [ 248.522069][T14174] tun0: persist disabled [ 248.526627][T14174] dummy0: entered promiscuous mode [ 248.554376][ T5972] Bluetooth: hci1: command tx timeout [ 248.694149][ T861] vhci_hcd: vhci_device speed not set [ 248.914336][T14182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2376'. [ 248.957691][T14185] erspan0: entered promiscuous mode [ 249.106820][ T7456] bond0: (slave wlan1): link status definitely down, disabling slave [ 249.110732][ T7456] bond0: now running without any active interface! [ 249.406550][ T40] audit: type=1400 audit(2000000084.419:1236): avc: denied { listen } for pid=14206 comm="syz.3.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 249.567493][T14215] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2386'. [ 249.684002][ T839] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 249.783310][T14230] netlink: 'syz.4.2391': attribute type 4 has an invalid length. [ 249.786858][T14230] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2391'. [ 249.836513][ T839] usb 8-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 249.840995][ T839] usb 8-1: config 1 interface 0 has no altsetting 0 [ 249.846520][ T839] usb 8-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.40 [ 249.850227][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.853492][ T839] usb 8-1: Product: ఉ [ 249.855838][ T839] usb 8-1: Manufacturer: з [ 249.857830][ T839] usb 8-1: SerialNumber: Ч [ 249.865901][T14213] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.968672][T14241] trusted_key: encrypted_key: insufficient parameters specified [ 250.079768][ T839] usbhid 8-1:1.0: can't add hid device: -71 [ 250.082395][ T839] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 250.088927][ T839] usb 8-1: USB disconnect, device number 22 [ 250.624153][ T5972] Bluetooth: hci1: command tx timeout [ 250.806739][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2415'. [ 250.917965][T14305] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2416'. [ 250.960843][T14310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2418'. [ 251.063096][T14323] openvswitch: netlink: Flow key attr not present in new flow. [ 251.102746][T14327] tipc: Enabling of bearer rejected, already enabled [ 251.186169][ T40] audit: type=1400 audit(2000000086.199:1237): avc: denied { ioctl } for pid=14331 comm="syz.3.2426" path="socket:[58947]" dev="sockfs" ino=58947 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.191842][ T72] hid_parser_main: 5 callbacks suppressed [ 251.191858][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.202400][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.206171][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.208904][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.214169][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.216754][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.221302][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.224565][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.231598][T14346] geneve2: entered promiscuous mode [ 251.232147][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.233400][T14346] geneve2: entered allmulticast mode [ 251.236840][ T72] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 251.240870][ T7462] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.246557][ T7462] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.249651][ T7462] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.253090][ T7462] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.257331][ T72] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.03 Device [syz1] on syz1 [ 251.287415][ T40] audit: type=1400 audit(2000000086.299:1238): avc: denied { read } for pid=14353 comm="syz.5.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 251.296570][T14354] bond0: option mode: unable to set because the bond device has slaves [ 251.301165][T14351] fido_id[14351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 251.314377][T14358] overlayfs: failed to clone upperpath [ 251.487408][T14360] team_slave_0 (unregistering): left promiscuous mode [ 251.490113][T14360] team_slave_0 (unregistering): left allmulticast mode [ 251.495232][T14360] team0: Port device team_slave_0 removed [ 251.512292][ T40] audit: type=1400 audit(2000000086.519:1239): avc: denied { mount } for pid=14375 comm="syz.0.2440" name="/" dev="rpc_pipefs" ino=58973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 251.657260][T14381] team0 (unregistering): Port device team_slave_0 removed [ 251.662446][T14381] team0 (unregistering): Port device team_slave_1 removed [ 251.665243][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.711331][ T40] audit: type=1400 audit(2000000086.719:1240): avc: denied { setattr } for pid=14380 comm="syz.0.2442" path="socket:[56303]" dev="sockfs" ino=56303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.907463][T14406] bond8: entered promiscuous mode [ 251.957945][ T40] audit: type=1400 audit(2000000086.969:1241): avc: denied { create } for pid=14416 comm="syz.5.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 251.967352][T14419] netlink: 'syz.5.2453': attribute type 1 has an invalid length. [ 251.972181][T14419] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 251.982079][T14423] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.009624][T14426] netlink: 'syz.5.2454': attribute type 3 has an invalid length. [ 252.158310][T14438] Failed to get privilege flags for destination (handle=0x2:0x9) [ 252.393417][T14454] tmpfs: Bad value for 'mpol' [ 252.450525][T14471] lo speed is unknown, defaulting to 1000 [ 252.453100][T14471] xfrm0 speed is unknown, defaulting to 1000 [ 252.570560][T14492] __nla_validate_parse: 10 callbacks suppressed [ 252.570572][T14492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2473'. [ 252.579096][T14497] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2475'. [ 252.589910][ T40] audit: type=1400 audit(2000000087.599:1242): avc: denied { setopt } for pid=14491 comm="syz.5.2473" lport=51128 faddr=fe88::106 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 252.617503][T14503] tmpfs: Unknown parameter '0x0000000000000000' [ 252.714222][ T5972] Bluetooth: hci1: command tx timeout [ 252.818958][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.822886][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.826457][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.829182][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.831665][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.854469][T14520] lo speed is unknown, defaulting to 1000 [ 252.856924][T14520] xfrm0 speed is unknown, defaulting to 1000 [ 252.988828][T14520] chnl_net:caif_netlink_parms(): no params data found [ 253.086682][T14548] netlink: 'syz.5.2487': attribute type 7 has an invalid length. [ 253.094295][T14520] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.096932][T14520] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.099994][T14520] bridge_slave_0: entered allmulticast mode [ 253.103325][T14520] bridge_slave_0: entered promiscuous mode [ 253.108130][T14520] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.111253][T14520] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.113594][T14520] bridge_slave_1: entered allmulticast mode [ 253.121460][T14520] bridge_slave_1: entered promiscuous mode [ 253.183535][T14520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.190001][T14520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.249426][T14563] batadv_slave_1: entered promiscuous mode [ 253.254716][T14520] team0: Port device team_slave_0 added [ 253.259218][T14520] team0: Port device team_slave_1 added [ 253.279782][T14562] batadv_slave_1: left promiscuous mode [ 253.309105][T14520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.312033][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.323679][T14520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.329797][T14520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.332670][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.344739][T14520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.401773][T14520] hsr_slave_0: entered promiscuous mode [ 253.404758][T14520] hsr_slave_1: entered promiscuous mode [ 253.407623][T14520] debugfs: 'hsr0' already exists in 'hsr' [ 253.409403][T14520] Cannot create hsr debugfs directory [ 253.412070][T14573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14573 comm=syz.4.2492 [ 253.518612][T14520] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.572779][T14520] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.637898][T14520] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.728977][T14520] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.929934][T14520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.936925][T14520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.943724][T14520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.948070][T14575] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2493'. [ 253.950048][T14520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.963923][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2493'. [ 254.039822][T14520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.051371][T14520] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.056888][ T7477] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.059396][ T7477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.065811][ T7477] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.068408][ T7477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.156565][T14600] team0: No ports can be present during mode change [ 254.194679][T14603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2500'. [ 254.208041][T14520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.224593][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.234895][T14604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2500'. [ 254.243806][T14520] veth0_vlan: entered promiscuous mode [ 254.250382][T14520] veth1_vlan: entered promiscuous mode [ 254.268025][T14520] veth0_macvtap: entered promiscuous mode [ 254.272196][T14520] veth1_macvtap: entered promiscuous mode [ 254.284479][T14520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.291688][T14520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.298924][ T7477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.301775][ T7477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.315977][ T7477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.320800][ T7477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.356874][ T7447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.359372][ T7447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.378470][ T7447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.381161][ T7447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.579352][T14623] new mount options do not match the existing superblock, will be ignored [ 254.638201][T14632] netlink: 'syz.4.2505': attribute type 1 has an invalid length. [ 254.678783][T14635] bond0: entered allmulticast mode [ 254.681022][T14635] bond_slave_0: entered allmulticast mode [ 254.683448][T14635] bond_slave_1: entered allmulticast mode [ 254.690352][T14635] xt_policy: neither incoming nor outgoing policy selected [ 254.709989][T14635] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 254.794582][ T63] Bluetooth: hci1: command tx timeout [ 254.864143][ T63] Bluetooth: hci4: command tx timeout [ 254.902712][T14646] bridge9: entered promiscuous mode [ 254.904560][T14646] bridge9: entered allmulticast mode [ 254.973311][T14655] overlayfs: failed to resolve './file2': -2 [ 255.096459][T14664] veth0: entered promiscuous mode [ 255.100848][T14664] overlayfs: failed to clone upperpath [ 255.107518][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.171540][T14664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.225225][T14668] lo: Caught tx_queue_len zero misconfig [ 255.266310][T14681] netlink: 'syz.3.2518': attribute type 178 has an invalid length. [ 255.270113][ T40] audit: type=1800 audit(2000000090.279:1243): pid=14681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2518" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 255.271966][T14681] netlink: 'syz.3.2518': attribute type 1 has an invalid length. [ 255.288254][T14663] veth0: left promiscuous mode [ 255.376054][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'. [ 255.429439][ T40] audit: type=1326 audit(2000000090.439:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.3.2521" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8ca38ec29 code=0x0 [ 255.501248][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2529'. [ 255.507256][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.511412][T14713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2529'. [ 255.553060][ T40] audit: type=1400 audit(2000000090.559:1245): avc: denied { setopt } for pid=14721 comm="syz.5.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.672891][ T40] audit: type=1400 audit(2000000090.679:1246): avc: denied { read } for pid=14743 comm="syz.3.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.699102][T14747] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 255.713140][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2541'. [ 255.759564][T14753] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 255.768642][ T40] audit: type=1400 audit(2000000090.779:1247): avc: denied { setattr } for pid=14748 comm="syz.5.2542" name="NETLINK" dev="sockfs" ino=61778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.776693][ T40] audit: type=1400 audit(2000000090.779:1248): avc: denied { read } for pid=14754 comm="syz.0.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.797630][ T40] audit: type=1400 audit(2000000090.809:1249): avc: denied { shutdown } for pid=14757 comm="syz.3.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.907347][T14766] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 255.928834][T14768] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 256.600263][T14779] lo speed is unknown, defaulting to 1000 [ 256.603075][T14779] xfrm0 speed is unknown, defaulting to 1000 [ 256.620772][T14784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.630462][ T40] audit: type=1800 audit(2000000091.639:1250): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2552" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 256.791910][ T40] audit: type=1804 audit(2000000091.799:1251): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2556" name="file0" dev="tmpfs" ino=2851 res=1 errno=0 [ 256.802499][T14792] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 256.807567][T14792] ref_ctr increment failed for inode: 0xb23 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888025202040 [ 256.944062][ T63] Bluetooth: hci4: command tx timeout [ 256.976036][T14794] overlay: Unknown parameter 'uid' [ 257.380164][T14819] MPI: mpi too large (16392 bits) [ 257.410766][T14817] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 257.413589][T14817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 257.477376][T14824] bridge2: entered promiscuous mode [ 257.502891][ T40] audit: type=1400 audit(2000000092.509:1252): avc: denied { read } for pid=14828 comm="syz.4.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 257.886232][T14846] netlink: 'syz.3.2576': attribute type 4 has an invalid length. [ 258.319509][T14873] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=508 sclass=netlink_xfrm_socket pid=14873 comm=syz.4.2584 [ 258.370054][T14774] netlink: 'syz.0.2550': attribute type 16 has an invalid length. [ 258.372916][T14774] netlink: 3202 bytes leftover after parsing attributes in process `syz.0.2550'. [ 258.400206][T14883] Trying to write to read-only block-device nullb0 [ 258.421540][T14883] netlink: 'syz.3.2587': attribute type 6 has an invalid length. [ 258.437182][T14852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=14852 comm=syz.0.2550 [ 258.507362][T14774] binder: 14773:14774 ioctl c0306201 200000000640 returned -22 [ 258.603575][T14914] cgroup: Invalid name [ 258.606571][T14914] overlayfs: failed to clone upperpath [ 258.634737][T14916] vxcan1: tx address claim with dest, not broadcast [ 258.793618][T14939] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 258.859370][T14961] overlayfs: missing 'workdir' [ 258.992270][T14920] cgroup: fork rejected by pids controller in /syz3 [ 259.025176][ T63] Bluetooth: hci4: command tx timeout [ 259.044283][ T34] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 259.224036][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 259.235072][ T34] usb 8-1: config 0 has no interfaces? [ 259.236969][ T34] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 259.240615][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.251801][ T34] usb 8-1: config 0 descriptor?? [ 259.784601][ T53] usb 8-1: USB disconnect, device number 23 [ 260.116696][T15029] overlayfs: failed to clone upperpath [ 260.161060][T15033] fuse: Unknown parameter 'gro' [ 260.231845][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2613'. [ 260.235458][T15042] netlink: 'syz.4.2613': attribute type 13 has an invalid length. [ 260.237883][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 260.241093][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2613'. [ 260.244274][T15042] netlink: 'syz.4.2613': attribute type 13 has an invalid length. [ 260.246874][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 260.352224][T15053] netlink: 700 bytes leftover after parsing attributes in process `syz.4.2617'. [ 260.360783][T15055] netlink: 700 bytes leftover after parsing attributes in process `syz.4.2617'. [ 260.379633][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 260.379644][ T40] audit: type=1400 audit(2000000095.389:1258): avc: denied { unmount } for pid=14520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 260.404252][T15061] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2619'. [ 260.432969][T15061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15061 comm=syz.3.2619 [ 260.452785][T15069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2618'. [ 260.567915][T15081] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2625'. [ 260.647522][T15091] bond0: Caught tx_queue_len zero misconfig [ 260.760577][T15101] syzkaller1: entered promiscuous mode [ 260.762372][T15101] syzkaller1: entered allmulticast mode [ 260.874115][T15109] tipc: Enabling of bearer rejected, failed to enable media [ 260.878794][T15108] tipc: Enabling of bearer rejected, failed to enable media [ 261.020437][T15136] netlink: 'syz.4.2643': attribute type 3 has an invalid length. [ 261.060214][ T40] audit: type=1400 audit(2000000096.069:1259): avc: denied { setopt } for pid=15141 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.074052][ T40] audit: type=1400 audit(2000000096.089:1260): avc: denied { map } for pid=15143 comm="syz.3.2646" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 261.083457][ T40] audit: type=1400 audit(2000000096.089:1261): avc: denied { firmware_load } for pid=15141 comm="syz.4.2645" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 261.103963][ T63] Bluetooth: hci4: command tx timeout [ 261.145296][T15142] syz.4.2645 (15142) used greatest stack depth: 19576 bytes left [ 261.976210][T15148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.978710][T15148] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 262.411848][T15148] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.414930][T15148] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 263.009315][T15234] bridge10: entered promiscuous mode [ 263.011054][T15234] bridge10: entered allmulticast mode [ 263.180169][T15253] bridge_slave_0: default FDB implementation only supports local addresses [ 263.354725][T15271] tipc: Started in network mode [ 263.356938][T15271] tipc: Node identity 8edd79c22756, cluster identity 4711 [ 263.360045][T15271] tipc: Enabled bearer , priority 0 [ 263.363518][T15271] syzkaller0: entered promiscuous mode [ 263.366359][T15271] syzkaller0: entered allmulticast mode [ 263.381495][T15271] tipc: Resetting bearer [ 263.385293][T15270] tipc: Resetting bearer [ 263.396809][T15270] tipc: Disabling bearer [ 263.610068][T15284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.656460][ T40] audit: type=1400 audit(2000000098.669:1262): avc: denied { map } for pid=15285 comm="syz.0.2677" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 263.665343][ T40] audit: type=1400 audit(2000000098.669:1263): avc: denied { execute } for pid=15285 comm="syz.0.2677" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 263.848267][T15288] kvm: pic: single mode not supported [ 263.848868][T15288] kvm: pic: non byte read [ 263.855540][T15288] kvm: pic: single mode not supported [ 263.856177][T15288] kvm: pic: non byte read [ 263.861781][T15288] kvm: pic: non byte read [ 263.865084][T15288] kvm: pic: non byte read [ 263.868486][T15288] kvm: pic: level sensitive irq not supported [ 263.868825][T15288] kvm: pic: non byte read [ 264.280362][T15309] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 264.321591][ T40] audit: type=1400 audit(2000000099.329:1264): avc: denied { mounton } for pid=15312 comm="syz.0.2685" path="/38/file0" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 264.333949][ T40] audit: type=1400 audit(2000000099.339:1265): avc: denied { mounton } for pid=15312 comm="syz.0.2685" path="/38/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 264.334312][T15317] overlayfs: failed to clone upperpath [ 264.397087][T15324] lo speed is unknown, defaulting to 1000 [ 264.399616][T15324] xfrm0 speed is unknown, defaulting to 1000 [ 264.461979][T15330] __nla_validate_parse: 8 callbacks suppressed [ 264.461994][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 264.474384][ T40] audit: type=1400 audit(2000000099.489:1266): avc: denied { create } for pid=15327 comm="syz.4.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 264.482950][ T40] audit: type=1400 audit(2000000099.489:1267): avc: denied { write } for pid=15327 comm="syz.4.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 264.483333][T15330] bridge11: port 1(bond2) entered blocking state [ 264.498253][T15330] bridge11: port 1(bond2) entered disabled state [ 264.500524][T15330] bond2: entered allmulticast mode [ 264.506190][T15330] bond2: entered promiscuous mode [ 264.516996][T15330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2691'. [ 264.673222][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2697'. [ 264.677792][T15354] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 264.680931][T15355] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 264.704020][ T5972] Bluetooth: hci2: command 0x1003 tx timeout [ 264.707870][ T63] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 264.710329][T15357] netlink: 'syz.5.2699': attribute type 1 has an invalid length. [ 264.750328][T15357] bond1: (slave geneve3): making interface the new active one [ 264.753377][T15357] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 264.879214][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2705'. [ 264.881971][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2705'. [ 264.975516][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2706'. [ 265.090322][T15390] netlink: 'syz.4.2709': attribute type 3 has an invalid length. [ 265.092819][T15390] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2709'. [ 265.117942][T15404] overlayfs: missing 'workdir' [ 265.169151][T15415] xt_HMARK: spi-set and port-set can't be combined [ 265.246759][T15420] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2719'. [ 265.350312][T15438] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2725'. [ 265.446787][T15454] netlink: 'syz.4.2731': attribute type 13 has an invalid length. [ 265.451728][T15454] netlink: 'syz.4.2731': attribute type 1 has an invalid length. [ 265.455333][T15454] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2731'. [ 265.465388][T15459] openvswitch: netlink: Missing valid actions attribute. [ 265.467654][T15459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.533195][T15457] bond1: entered promiscuous mode [ 265.536165][T15457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.539100][T15457] bond1: entered allmulticast mode [ 265.541272][T15457] bond0: (slave bond1): Enslaving as an active interface with an up link [ 265.552417][T15457] netdevsim netdevsim3: Direct firmware load for lookup_extent_enter failed with error -2 [ 265.561045][T15457] netdevsim netdevsim3: Falling back to sysfs fallback for: lookup_extent_enter [ 265.561335][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 265.561344][ T40] audit: type=1400 audit(2000000100.569:1273): avc: denied { firmware_load } for pid=15433 comm="syz.3.2723" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 265.632443][T15480] program syz.0.2741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.637761][T15478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=15478 comm=syz.5.2740 [ 265.689059][T15483] fuse: Bad value for 'group_id' [ 265.690656][T15483] fuse: Bad value for 'group_id' [ 265.704897][ T40] audit: type=1400 audit(2000000100.719:1274): avc: denied { getopt } for pid=15482 comm="syz.0.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.743094][ T40] audit: type=1400 audit(2000000100.749:1275): avc: denied { ioctl } for pid=15489 comm="syz.0.2745" path="/dev/ttyq4" dev="devtmpfs" ino=387 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 265.747890][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.759277][ T5972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.768792][ T40] audit: type=1400 audit(2000000100.779:1276): avc: denied { map } for pid=15487 comm="syz.5.2744" path="socket:[68061]" dev="sockfs" ino=68061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.777181][ T5972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.779956][ T5972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.782452][ T5972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.791954][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.799665][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.802501][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.806176][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.808701][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.831781][T15491] lo speed is unknown, defaulting to 1000 [ 265.834451][T15491] xfrm0 speed is unknown, defaulting to 1000 [ 265.924688][T15491] chnl_net:caif_netlink_parms(): no params data found [ 266.004084][T15491] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.006386][T15491] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.008687][T15491] bridge_slave_0: entered allmulticast mode [ 266.011305][T15491] bridge_slave_0: entered promiscuous mode [ 266.020133][T15491] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.022462][T15491] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.024959][T15491] bridge_slave_1: entered allmulticast mode [ 266.027685][T15491] bridge_slave_1: entered promiscuous mode [ 266.065778][T15491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.072578][T15491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.132542][T15491] team0: Port device team_slave_0 added [ 266.138088][T15491] team0: Port device team_slave_1 added [ 266.176130][T15491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.179532][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.182215][T15540] delete_channel: no stack [ 266.188760][T15491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.194471][T15491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.196924][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.205399][T15491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.219172][T15545] random: crng reseeded on system resumption [ 266.225130][ T40] audit: type=1400 audit(2000000101.229:1277): avc: denied { write } for pid=15543 comm="syz.0.2759" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 266.260661][T15491] hsr_slave_0: entered promiscuous mode [ 266.263148][T15491] hsr_slave_1: entered promiscuous mode [ 266.266082][T15491] debugfs: 'hsr0' already exists in 'hsr' [ 266.267969][T15491] Cannot create hsr debugfs directory [ 266.277752][T15556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.322302][ T40] audit: type=1400 audit(2000000101.329:1278): avc: denied { ioctl } for pid=15557 comm="syz.3.2765" path="socket:[68119]" dev="sockfs" ino=68119 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 266.394199][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.400384][T15491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.403593][T15491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.458942][T15587] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.461340][T15587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.463617][T15587] IPv6: NLM_F_CREATE should be set when creating new route [ 266.466658][T15588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.514954][T15594] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 266.517770][T15594] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 266.519461][T15491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.520222][T15594] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 266.523131][T15491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.526404][T15594] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 266.532350][T15594] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 266.536584][T15594] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 266.539803][T15594] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 266.542173][T15594] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 266.546300][T15594] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 266.548814][T15594] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 266.551233][T15594] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 266.553659][T15594] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 266.556454][T15594] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 266.558802][T15594] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 266.561222][T15594] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 266.563451][T15594] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 266.566269][T15594] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 266.568735][T15594] comedi comedi3: 8255: I/O port conflict (0xf,4) [ 266.571213][T15594] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 266.573291][T15594] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 266.576745][T15594] comedi comedi3: 8255: I/O port conflict (0xc0000,4) [ 266.599896][T15491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.603639][T15491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.689014][T15491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.692214][T15491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.699198][T15611] netlink: 'syz.0.2780': attribute type 1 has an invalid length. [ 266.776080][T15619] sctp: [Deprecated]: syz.0.2782 (pid 15619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.776080][T15619] Use struct sctp_sack_info instead [ 266.948966][T15491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.959067][T15491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.977520][T15491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.982298][T15491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.123057][T15491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.139008][T15491] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.144109][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.146447][ T7458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.158877][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.161286][ T7456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.190838][T15491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.219012][T15648] netlink: 'syz.3.2788': attribute type 12 has an invalid length. [ 267.227720][T15648] netlink: 'syz.3.2788': attribute type 12 has an invalid length. [ 267.229000][ T7458] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.234248][ T7458] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.237190][ T7458] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.240806][ T7458] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.315896][T15491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.335565][ T40] audit: type=1400 audit(2000000102.349:1279): avc: denied { getopt } for pid=15658 comm="syz.3.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.419265][T15667] geneve2: entered promiscuous mode [ 267.424285][T15667] geneve2: entered allmulticast mode [ 267.517610][T15491] veth0_vlan: entered promiscuous mode [ 267.528631][T15491] veth1_vlan: entered promiscuous mode [ 267.562375][T15491] veth0_macvtap: entered promiscuous mode [ 267.567485][T15491] veth1_macvtap: entered promiscuous mode [ 267.579277][T15491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.586800][T15491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.590875][T15681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.593509][T15183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.597313][T15681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.598865][T15183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.603694][T15183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.607563][T15183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.658373][ T7458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.660829][ T7458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.677107][T15183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.680358][T15183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.835897][T15707] proc: Unknown parameter 'a&2rϠ¡' [ 267.904228][ T5972] Bluetooth: hci2: command tx timeout [ 267.958539][ T40] audit: type=1400 audit(2000000102.969:1280): avc: denied { override_creds } for pid=15719 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.994608][T15725] lo speed is unknown, defaulting to 1000 [ 267.997195][T15725] xfrm0 speed is unknown, defaulting to 1000 [ 268.260139][ T40] audit: type=1800 audit(2000000103.269:1281): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2818" name="file1" dev="9p" ino=71827845 res=0 errno=0 [ 268.893413][T15771] 9pnet: Could not find request transport: virtB[a$Lio$posixacl, priority 10 [ 284.814529][T16844] tipc: Enabling of bearer rejected, failed to enable media [ 284.860373][ T40] audit: type=1400 audit(2000000119.869:1308): avc: denied { connect } for pid=16852 comm="syz.0.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.314894][T16863] __nla_validate_parse: 9 callbacks suppressed [ 285.314905][T16863] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3148'. [ 285.774609][T16891] netlink: 'syz.3.3156': attribute type 1 has an invalid length. [ 285.828011][T16894] misc userio: Invalid payload size [ 285.925882][ T72] tipc: Node number set to 2130706433 [ 285.930705][T16901] efs: device does not support 512 byte blocks [ 285.932973][T16901] device does not support 512 byte blocks [ 285.932973][T16901] [ 285.995648][T16905] overlayfs: workdir and upperdir must be separate subtrees [ 286.063814][ T40] audit: type=1400 audit(2000000121.069:1309): avc: denied { watch watch_reads } for pid=16911 comm="syz.0.3165" path="/111/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 286.077653][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3166'. [ 286.117673][ T40] audit: type=1400 audit(2000000121.129:1310): avc: denied { setopt } for pid=16916 comm="syz.0.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.178315][T16918] gre0: Master is either lo or non-ether device [ 286.181682][T16918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.184414][T16918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.187389][T16918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.190060][T16918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.458193][T16922] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3169'. [ 286.981031][T16942] tmpfs: Bad value for 'nr_inodes' [ 287.091569][T16957] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3181'. [ 287.098202][T16957] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 287.121835][ T40] audit: type=1400 audit(2000000122.129:1311): avc: denied { accept } for pid=16926 comm="syz.5.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.229415][T16968] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 287.407739][ T40] audit: type=1326 audit(2000000122.419:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.0.3186" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f135c18ec29 code=0x0 [ 287.922151][T16987] netlink: 'syz.5.3191': attribute type 30 has an invalid length. [ 287.940775][T16990] macsec0: entered promiscuous mode [ 287.943172][T16990] macsec0: entered allmulticast mode [ 287.945274][T16990] veth1_macvtap: entered allmulticast mode [ 287.951805][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3192'. [ 288.045818][T17001] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 288.133807][ T40] audit: type=1400 audit(2000000123.139:1313): avc: denied { cmd } for pid=17009 comm="syz.4.3198" path="socket:[76196]" dev="sockfs" ino=76196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 288.159200][ T40] audit: type=1400 audit(2000000123.169:1314): avc: denied { validate_trans } for pid=17009 comm="syz.4.3198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 288.394919][ T40] audit: type=1400 audit(2000000123.409:1315): avc: denied { setattr } for pid=17029 comm="syz.5.3206" name="PING" dev="sockfs" ino=77966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 288.548612][ T40] audit: type=1400 audit(2000000123.559:1316): avc: denied { setattr } for pid=17041 comm="syz.5.3211" name="" dev="pipefs" ino=75539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 288.678825][T17048] bond0: entered allmulticast mode [ 288.681281][T17048] bond_slave_0: entered allmulticast mode [ 288.684287][T17048] bond_slave_1: entered allmulticast mode [ 288.868936][T17052] tmpfs: Unknown parameter 'grpquo$a_block_hardlimit' [ 288.987311][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'. [ 289.123922][ T40] audit: type=1400 audit(2000000124.129:1317): avc: denied { getopt } for pid=17079 comm="syz.5.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 289.124338][T17080] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 289.189424][T17089] openvswitch: netlink: Missing valid actions attribute. [ 289.192505][T17089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.313241][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3229'. [ 289.628744][T17119] kvm: Disabled LAPIC found during irq injection [ 289.743215][T17133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3239'. [ 289.852710][T17143] overlayfs: missing 'lowerdir' [ 289.866751][T17145] syz_tun: refused to change device tx_queue_len [ 289.999175][T17163] xt_limit: Overflow, try lower: 271964/0 [ 290.034297][T17163] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.504020][T17182] kvm: user requested TSC rate below hardware speed [ 290.511131][T17182] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 290.521963][T17191] lo speed is unknown, defaulting to 1000 [ 290.522825][T17191] xfrm0 speed is unknown, defaulting to 1000 [ 290.586220][ T40] audit: type=1400 audit(2000000125.599:1318): avc: denied { read write } for pid=17197 comm="syz.0.3262" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 290.595527][ T40] audit: type=1400 audit(2000000125.599:1319): avc: denied { open } for pid=17197 comm="syz.0.3262" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 290.861340][T17209] netlink: 'syz.3.3265': attribute type 1 has an invalid length. [ 290.866020][T17209] NCSI netlink: No device for ifindex 0 [ 290.974968][T17214] overlayfs: failed to resolve './file0': -2 [ 290.984359][T17214] cgroup: noprefix used incorrectly [ 291.030642][T17219] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 291.127645][T17224] program syz.4.3270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.187502][T17230] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3275'. [ 291.200983][T17231] gre0: Master is either lo or non-ether device [ 291.205267][T17231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.209036][T17231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.267120][T17237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3277'. [ 291.505293][T17259] syzkaller1: entered allmulticast mode [ 291.632598][ T40] audit: type=1400 audit(2000002704.636:1320): avc: denied { bind } for pid=17261 comm="syz.0.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 291.636094][T17262] autofs: Unknown parameter '' [ 291.729335][T17271] tmpfs: Unknown parameter 'usrquota' [ 291.857408][T17284] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 291.859774][T17284] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 291.865749][T17284] netlink: 'syz.4.3290': attribute type 10 has an invalid length. [ 291.947786][T17284] mac80211_hwsim hwsim28 wlan1: left promiscuous mode [ 291.950355][T17284] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 291.956260][T17284] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 292.186733][T17308] openvswitch: netlink: IPv6 tunnel dst address is zero [ 292.363636][T17330] gre0: Master is either lo or non-ether device [ 292.368966][T17330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.372286][T17330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.410201][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 292.410212][ T40] audit: type=1400 audit(2000002705.416:1324): avc: denied { read } for pid=17328 comm="syz.3.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 292.738072][T17336] random: crng reseeded on system resumption [ 292.841654][T17339] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 292.844187][T17339] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 292.847268][T17339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.098785][T17353] SELinux: ebitmap: empty map [ 293.102382][T17353] SELinux: failed to load policy [ 293.208116][ T9] IPVS: starting estimator thread 0... [ 293.247285][T17367] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3319'. [ 293.271863][T17370] openvswitch: netlink: IP tunnel dst address not specified [ 293.304797][T17361] IPVS: using max 42 ests per chain, 100800 per kthread [ 293.306586][ T40] audit: type=1400 audit(2000002706.316:1325): avc: denied { append } for pid=17376 comm="syz.3.3322" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 293.353051][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3324'. [ 293.360962][T17385] No buffer was provided with the request [ 293.703979][T17408] IPv6: Can't replace route, no match found [ 293.762840][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3324'. [ 293.767107][T17399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17399 comm=syz.5.3324 [ 293.771142][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3324'. [ 293.949009][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 294.178080][T17430] overlayfs: failed to clone upperpath [ 294.215598][T17432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=17432 comm=syz.5.3339 [ 294.222548][T17432] netlink: 'syz.5.3339': attribute type 13 has an invalid length. [ 294.329607][ T40] audit: type=1400 audit(2000002707.336:1326): avc: denied { read } for pid=5367 comm="acpid" name="event4" dev="devtmpfs" ino=3144 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 294.338807][ T40] audit: type=1400 audit(2000002707.336:1327): avc: denied { open } for pid=5367 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3144 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 294.349997][ T40] audit: type=1400 audit(2000002707.336:1328): avc: denied { ioctl } for pid=5367 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3144 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 294.426357][T17466] snd_dummy snd_dummy.0: control 1:96:0:syz0:211 is already present [ 294.435525][T17467] snd_dummy snd_dummy.0: control 1:96:0:syz0:211 is already present [ 294.542597][T17473] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3350'. [ 294.737849][ T40] audit: type=1400 audit(2000002707.746:1329): avc: denied { read } for pid=17483 comm="syz.5.3353" name="file0" dev="tmpfs" ino=2404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.748409][ T40] audit: type=1400 audit(2000002707.746:1330): avc: denied { open } for pid=17483 comm="syz.5.3353" path="/450/file0" dev="tmpfs" ino=2404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.749012][T17484] bridge_slave_0: default FDB implementation only supports local addresses [ 294.758381][ T40] audit: type=1400 audit(2000002707.746:1331): avc: denied { ioctl } for pid=17483 comm="syz.5.3353" path="/450/file0" dev="tmpfs" ino=2404 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.889860][T17498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3357'. [ 294.939553][T17502] veth1_macvtap: left promiscuous mode [ 294.941659][T17502] macsec0: entered promiscuous mode [ 294.943733][T17502] macsec0: entered allmulticast mode [ 294.950835][T17502] veth1_macvtap: entered promiscuous mode [ 294.953173][T17502] veth1_macvtap: entered allmulticast mode [ 294.957885][T17502] macsec0: left promiscuous mode [ 294.960045][T17502] macsec0: left allmulticast mode [ 294.962063][T17502] veth1_macvtap: left allmulticast mode [ 295.085511][T17512] tmpfs: Bad value for 'mpol' [ 295.092108][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3363'. [ 295.141567][T17514] could not allocate digest TFM handle cryptd(blake2b-160) [ 295.172448][T17524] overlayfs: failed to clone lowerpath [ 295.194362][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.262776][T17530] netlink: 'syz.3.3369': attribute type 1 has an invalid length. [ 295.604019][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 295.659713][T17537] netlink: 'syz.0.3372': attribute type 21 has an invalid length. [ 295.659765][T17538] netlink: 'syz.0.3372': attribute type 21 has an invalid length. [ 295.662263][T17537] netlink: 'syz.0.3372': attribute type 6 has an invalid length. [ 295.668216][T17538] netlink: 'syz.0.3372': attribute type 6 has an invalid length. [ 295.719936][T17540] lo speed is unknown, defaulting to 1000 [ 295.723442][T17540] xfrm0 speed is unknown, defaulting to 1000 [ 295.757525][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 295.761523][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.765229][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.768339][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 295.773204][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 295.776465][ T9] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 295.779007][ T9] usb 8-1: Manufacturer: syz [ 295.783815][ T9] usb 8-1: config 0 descriptor?? [ 295.902015][T17546] binder: 17543:17546 ioctl c0306201 200000000600 returned -22 [ 295.905514][T17546] tmpfs: Unknown parameter 'grpquota ' [ 296.191959][ T9] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 296.198212][ T9] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 296.375718][T17563] 9pnet_rdma: rdma_create_trans (17563): problem binding to privport: 13 [ 296.381457][ T40] audit: type=1400 audit(2000002709.386:1332): avc: denied { setopt } for pid=17562 comm="syz.5.3379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 297.884498][T17564] raw-gadget.0 gadget.3: fail, usb_ep_queue returned -108 [ 298.652749][ T6028] usb 8-1: USB disconnect, device number 26 [ 307.601072][T17566] __nla_validate_parse: 4 callbacks suppressed [ 307.601082][T17566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3380'. [ 307.642789][T17576] snd_dummy snd_dummy.0: control 1:96:0:syz0:211 is already present [ 307.678482][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3386'. [ 307.685455][T17586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=17586 comm=syz.3.3386 [ 307.697330][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 307.701667][T17586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17586 comm=syz.3.3386 [ 307.707915][T17586] netlink: 'syz.3.3386': attribute type 1 has an invalid length. [ 307.710958][T17586] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3386'. [ 307.714750][T17586] netlink: 'syz.3.3386': attribute type 1 has an invalid length. [ 307.868474][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3393'. [ 307.877226][T17610] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3393'. [ 308.032639][ T40] audit: type=1400 audit(2000002721.036:1333): avc: denied { watch_reads } for pid=17618 comm="syz.3.3396" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 308.108280][T17624] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3397'. [ 308.113239][T17624] unsupported nlmsg_type 40 [ 308.179729][T17631] openvswitch: netlink: IP tunnel dst address not specified [ 308.256686][T17636] tmpfs: Bad value for 'mpol' [ 308.261058][T17636] block nbd3: Attempted send on invalid socket [ 308.263763][T17636] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.268059][T17636] block nbd3: Attempted send on invalid socket [ 308.270761][T17636] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.274954][T17636] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 308.279184][T17636] block nbd3: Attempted send on invalid socket [ 308.281888][T17636] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.285340][T17636] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 308.288479][T17636] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 308.291191][T17636] UDF-fs: Scanning with blocksize 1024 failed [ 308.293545][T17636] block nbd3: Attempted send on invalid socket [ 308.295772][T17636] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.299152][T17636] block nbd3: Attempted send on invalid socket [ 308.301321][T17636] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.304674][T17636] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 308.307833][T17636] block nbd3: Attempted send on invalid socket [ 308.309922][T17636] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.312958][T17636] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 308.316021][T17636] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 308.318179][T17637] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3401'. [ 308.318352][T17636] UDF-fs: Scanning with blocksize 2048 failed [ 308.318656][T17636] block nbd3: Attempted send on invalid socket [ 308.321667][T17637] binder: Bad value for 'max' [ 308.323178][T17636] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.323309][T17636] block nbd3: Attempted send on invalid socket [ 308.332023][T17636] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.335102][T17636] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 308.338096][T17636] block nbd3: Attempted send on invalid socket [ 308.340140][T17636] I/O error, dev nbd3, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.343062][T17636] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 308.346101][T17636] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 308.348458][T17636] UDF-fs: Scanning with blocksize 4096 failed [ 308.350495][T17636] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 308.574027][T17654] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.576591][T17654] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.807878][ T40] audit: type=1400 audit(2000002721.816:1334): avc: denied { write } for pid=17659 comm="syz.3.3408" path="socket:[80248]" dev="sockfs" ino=80248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 308.928170][ T40] audit: type=1400 audit(2000002721.936:1335): avc: denied { unmount } for pid=15491 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 309.222868][T17651] bond2: entered promiscuous mode [ 309.226546][ T1144] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.230783][ T1144] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.234517][ T13] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.238093][ T13] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.244862][ T13] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.248795][ T13] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.252264][ T13] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.256156][ T13] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.442305][T17701] cgroup2: Unknown parameter 'euid' [ 309.480186][ T40] audit: type=1400 audit(2000002722.486:1336): avc: denied { accept } for pid=17705 comm="syz.5.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 309.533388][T17714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17714 comm=syz.5.3425 [ 309.638866][T17710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17710 comm=syz.3.3424 [ 309.756170][T17722] netlink: 'syz.3.3428': attribute type 6 has an invalid length. [ 309.759274][T17722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3428'. [ 309.806437][T17729] netlink: 'syz.0.3430': attribute type 12 has an invalid length. [ 309.809409][T17729] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3430'. [ 309.883282][T17734] netlink: 'syz.3.3431': attribute type 1 has an invalid length. [ 310.296141][T17769] FAULT_INJECTION: forcing a failure. [ 310.296141][T17769] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 310.304045][T17769] CPU: 0 UID: 0 PID: 17769 Comm: syz.0.3441 Not tainted syzkaller #0 PREEMPT(full) [ 310.304068][T17769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.304079][T17769] Call Trace: [ 310.304085][T17769] [ 310.304092][T17769] dump_stack_lvl+0x16c/0x1f0 [ 310.304142][T17769] should_fail_ex+0x512/0x640 [ 310.304173][T17769] _copy_from_user+0x2e/0xd0 [ 310.304200][T17769] get_timespec64+0x8b/0x240 [ 310.304226][T17769] ? __pfx_get_timespec64+0x10/0x10 [ 310.304253][T17769] ? __fget_files+0x20e/0x3c0 [ 310.304278][T17769] __x64_sys_ppoll+0x185/0x2d0 [ 310.304297][T17769] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 310.304329][T17769] ? ksys_write+0x1ac/0x250 [ 310.304351][T17769] ? __pfx_ksys_write+0x10/0x10 [ 310.304378][T17769] do_syscall_64+0xcd/0x4e0 [ 310.304410][T17769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.304430][T17769] RIP: 0033:0x7f135c18ec29 [ 310.304445][T17769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.304462][T17769] RSP: 002b:00007f135cfc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 310.304478][T17769] RAX: ffffffffffffffda RBX: 00007f135c3d5fa0 RCX: 00007f135c18ec29 [ 310.304490][T17769] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 0000200000000080 [ 310.304501][T17769] RBP: 00007f135cfc1090 R08: 0000000000000000 R09: 0000000000000000 [ 310.304509][T17769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.304519][T17769] R13: 00007f135c3d6038 R14: 00007f135c3d5fa0 R15: 00007ffe0b53c908 [ 310.304544][T17769] [ 310.359040][T17771] netlink: 'syz.3.3442': attribute type 1 has an invalid length. [ 310.383007][T17771] bond3 (unregistering): Released all slaves [ 310.392962][T17779] netlink: 'syz.0.3444': attribute type 4 has an invalid length. [ 310.412075][T17779] netlink: 'syz.0.3444': attribute type 4 has an invalid length. [ 310.622158][T17808] FAULT_INJECTION: forcing a failure. [ 310.622158][T17808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.628690][T17808] CPU: 2 UID: 0 PID: 17808 Comm: syz.4.3454 Not tainted syzkaller #0 PREEMPT(full) [ 310.628706][T17808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.628713][T17808] Call Trace: [ 310.628718][T17808] [ 310.628722][T17808] dump_stack_lvl+0x16c/0x1f0 [ 310.628740][T17808] should_fail_ex+0x512/0x640 [ 310.628758][T17808] _copy_from_user+0x2e/0xd0 [ 310.628775][T17808] do_sys_poll+0x1d5/0xdf0 [ 310.628788][T17808] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.628806][T17808] ? kernel_text_address+0x8d/0x100 [ 310.628819][T17808] ? __kernel_text_address+0xd/0x40 [ 310.628832][T17808] ? __pfx_do_sys_poll+0x10/0x10 [ 310.628855][T17808] ? find_held_lock+0x2b/0x80 [ 310.628898][T17808] ? __pfx_timespec64_add_safe+0x10/0x10 [ 310.628911][T17808] ? ktime_get_ts64+0x2d2/0x400 [ 310.628927][T17808] ? set_user_sigmask+0x21b/0x2b0 [ 310.628941][T17808] ? __pfx_set_user_sigmask+0x10/0x10 [ 310.628956][T17808] __x64_sys_ppoll+0x254/0x2d0 [ 310.628969][T17808] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 310.628980][T17808] ? ksys_write+0x1ac/0x250 [ 310.628991][T17808] ? __pfx_ksys_write+0x10/0x10 [ 310.629006][T17808] do_syscall_64+0xcd/0x4e0 [ 310.629022][T17808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.629033][T17808] RIP: 0033:0x7fda5b58ec29 [ 310.629042][T17808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.629053][T17808] RSP: 002b:00007fda5c3e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 310.629064][T17808] RAX: ffffffffffffffda RBX: 00007fda5b7d5fa0 RCX: 00007fda5b58ec29 [ 310.629071][T17808] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 0000200000000080 [ 310.629078][T17808] RBP: 00007fda5c3e8090 R08: 0000000000000000 R09: 0000000000000000 [ 310.629084][T17808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.629090][T17808] R13: 00007fda5b7d6038 R14: 00007fda5b7d5fa0 R15: 00007ffc1a6e6dc8 [ 310.629103][T17808] [ 310.839475][T17824] overlayfs: failed to clone upperpath [ 310.905105][T17832] chnl_net:caif_netlink_parms(): no params data found [ 310.959830][T17826] Bluetooth: hci0: Opcode 0x0c03 failed: -4 Connection to localhost closed by remote host. [ 311.631922][ T7447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.637455][ T7447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 311.777844][ T7447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.782012][ T7447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 311.858332][ T7447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.861894][ T7447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 311.952769][ T7447] bond0: (slave netdevsim0): Releasing backup interface [ 312.006585][ T7447] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.009826][ T7447] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 312.266445][ T7447] bridge_slave_1: left allmulticast mode [ 312.268749][ T7447] bridge_slave_1: left promiscuous mode [ 312.271113][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.279844][ T7447] bridge_slave_0: left allmulticast mode [ 312.282108][ T7447] bridge_slave_0: left promiscuous mode [ 312.287232][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.633517][ T7447] bond1 (unregistering): (slave geneve3): Releasing active interface [ 312.944654][ T7447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.996010][ T7447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.026498][ T7447] bond0 (unregistering): Released all slaves [ 313.037114][ T7447] bond1 (unregistering): Released all slaves [ 313.045593][ T7447] bond2 (unregistering): Released all slaves [ 313.131186][ T7447] tipc: Left network mode [ 313.770312][ T7447] hsr_slave_0: left promiscuous mode [ 313.773548][ T7447] hsr_slave_1: left promiscuous mode [ 313.805544][ T7447] veth1_macvtap: left promiscuous mode [ 313.807471][ T7447] veth0_macvtap: left promiscuous mode [ 313.809319][ T7447] veth1_vlan: left promiscuous mode [ 313.811134][ T7447] veth0_vlan: left promiscuous mode [ 316.946010][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.066045][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.554032][ T53] page_pool_release_retry() stalled pool shutdown: id 67, 3329 inflight 60 sec VM DIAGNOSIS: 17:05:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000229389 RBX=0000000000000000 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d29 RDI=ffffffff8c163380 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa8cb20dd58 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefee000 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000001041000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e9e906b7487ccaba 401a8afeb043c211 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 709f331d164a0657 d37010814a6c6a9e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6edc874590774c99 271e4bb3ca9f6c77 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 57f5804b0425c17b a4628f6037a16835 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e4e4105b024bd29 43a57f2cb0f484f3 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 90edf64a7f840417 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 642509366de4fb4c 65a192a8350a04a5 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 11c66dca00000000 5a838011fb74dae4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a50e799b6765bfe5 25447c65055842ea ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bbdb7f40ab261e31 b84ad82705078fd8 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3174726f702d3162 73752f302e313a30 2d312f316273752f 302e64313a30303a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030302f30303a 303030306963702f 736563697665642f 3d54524f505f544e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000061 0000000000000000 0000003165737500 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000021508b RBX=0000000000000001 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d29 RDI=ffffffff8c163380 RBP=ffffed1003bd7488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deba440 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50b21f84c0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0e000 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32cb01d3b2e673eb f81f8ffdaf741fd9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 256e0efcc240a7f1 239b219475c18b4a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 417a68829485ff76 21c8c91c64e78cfc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ec51b6ef9257d35 e848ddf23d9287ea ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 53156193e1bdb8d7 15ce348ee0b371b0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8453bb841c5793d1 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a714e0445e1148c6 23aabb72d0f8ec05 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4ea0d4200000000 a67187e358cc7f21 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 50314091e79e35c0 4a3c63fd8beb9e47 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 945a6126a269330e 19ffcd1b1c1f742f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3174726f702d3162 73752f302e313a30 2d312f316273752f 302e64313a30303a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a430502560002 0540494c43055600 0541405144405746 000a56001f47000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 00003044333e1b33 0000000000000020 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002013c3 RBX=0000000000000002 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d29 RDI=ffffffff8c163380 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcbaf45f98 CR3=000000003f62a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec1e000 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557bab84f710 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad343f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad343f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a15d5 2a2a2a2a2a415943 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e754f4645425d05 1a474f475a054149 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3174726f702d3162 73752f302e313a30 2d312f316273752f 302e64313a30303a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a430502560002 0540494c43055600 0541405144405746 000a56001f47000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 157e08a9b572b520 0000557efc395b63 00000000000000d1 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 00003044333e1b33 0000000000000020 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002321e5 RBX=0000000000000003 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d29 RDI=ffffffff8c163380 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa8ca3729e0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000fff Opmask02=0000000011400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e17f9016f090e6f 7415f7ba4727ac53 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69f7cbd6d74e9ae2 1f56b5dc27d40ca8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03669a16141e9c2d c1b6c255c05094ac ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c69f8abf21b8786 c000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000008600000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1ae5aaa4582034a bfa61e28b8d56445 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a611187c950d8b ecb7d19d15bb3f62 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4ef0f81ef3b3098 5e423bbb811c41a8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000008600000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d51d6d828f7c7c0 5462ca4bb8d51bd6 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6870203435313230 3865656569205d36 32343154205b5d30 31303634392e3631 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203861203163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001