last executing test programs: 1m34.390236163s ago: executing program 1 (id=585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fb7f0cff0000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="f77d2979697bae33eb5eb56df99d", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1m34.330628398s ago: executing program 1 (id=587): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m33.448667429s ago: executing program 1 (id=630): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m33.448575452s ago: executing program 1 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000640)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m33.446408879s ago: executing program 1 (id=632): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 1m32.370775223s ago: executing program 1 (id=657): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) 1m32.318982297s ago: executing program 32 (id=657): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) 44.109020059s ago: executing program 0 (id=1311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00b500000000000000000002004000fc80c8090000000005001b"], 0x24}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x91, "88ff831a719aadfff2cb15f6aa7852bde76549e0c9350009d8b1f0f542a82c0b88009fafb250f6358294c54f76f9e340dd8cea2f0db9be88654264d2b47fdf56520bfa26ee1a5fd49a233cb59e744cbf256462bd119016e5cce053ab62bf6e43ad9439d6235dd4da552696e40cd6640d56691fca637bd3136268cd44582b102dacaf51c2b2e6fbaeb84f56867bcd51f29d"}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'gretap0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r8], 0x50}}, 0x4854) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200000000000000fd68000000", @ANYRES32=0x0], 0x1c}}, 0x0) r10 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r10, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x0, 0x9fb, 0x2, r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 43.249448201s ago: executing program 0 (id=1333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000855, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x44) (async, rerun: 32) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) getpeername(r1, 0x0, 0x0) shutdown(r0, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) (async) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) (async) r4 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) (async) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0xfff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="f12be91ec076bd1b1c3fd7d003f779dba0fc628f382beac41eda3f250ad8c9768b36ba3c777e76f3df658f781adee1f0b342eccfab2bcb59015ccabe7d7111af8dcd2231eba3e58966ca27f9ba875eca12602b46676b79b93b75b99bfbc3a3658e8eaf4416", 0x65}, {&(0x7f0000000340)="da18e45d7cf8b3d699649de973dd65ff8db0ffb7351b80e307e75b86e74eb527e05aa5a43fae6bd76fe0639099c11b0631b67178b2dce433fcb3f96d1b89c9cc15d3aa0c402c3d4c0b07eccabfa126e99acaae5f0d389e7d21ca2d14e04786735491b3667946e63d34421e9bf6148332c280204cfa6c9b38cfccd81c6ce0f3524d62e99925a86f10a33ae38ec1573a3b53eccb52a4cadc6d73b4d270bf222f9e2d7290fb8787355c3e4c0d466f1a7b3dd9b333750221897326cfe38cd321b214b629fc26edb890c9d7c6eed22812ccc0d0f91836e1452ba435c890a340d10ee0a93379f8fca64b97dc76586608", 0xed}, {&(0x7f0000000180)="54b7f723a3d7ca79ff27157a44c095d1a51002773bcd433471c65cbd207bd7d67ac194167f5c3929f1a4a6138ee770", 0x2f}], 0x3, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0x400}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x30}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x3, @empty, 0x6a8}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="0daaed1daacaffc22100041ff8b90ccddff64a365e9e1231e77871ae1bc2cd771fef5128afaa7309feb0d84fd518beac86b94c5156b39c1e772e03dfc2284c01568b324af56120d684498be33b98689d934cc5cfa079a4002787d6bcc4e189f2dbf7c1a609357d4fde475b19b7ee1f4df428b31a2c63d70649dc64c64a33f5fadfd6d05ee53ac3ec9c419fc237a68cdc54afff24f55185a39107159adf4d816ee92bcb82116979bb9487a9b2907adf1ec4793252daaf0c2e01414dcc9b56b3c069727be6", 0xc4}, {&(0x7f00000015c0)="22e076db7548", 0x6}, {&(0x7f0000001600)="e63e7a9cab6fef1069dedb2d901cbdc424cd5a0bf9331dca2c171f5612c8b1e73f63ef8993884a6683584976435c1e75c45ca4bd87df87d329661aa549ed2e8887", 0x41}, {&(0x7f0000001680)="55e527040669c76a3e7f16e55e4ad28b618c029e2577da32a9b1b557966fe7f1f80aeb3d234f27271693bcdf2de236f0fd8a596ba4618e5fb4bc5d61e5eb634339d8a8050ccf795ba6e129a372b8888572b35c812c4243cf33dfc45b5db757642be3487b0812af7bcaa81a914674893e72b1aff0673b8b9f5ac4e07be38371c5060a83d839f61af94655bb44651fbb09888831c83ef2dbd73150aad4fd162b65a7d16e91e3b2f8f3b65edef82a3acf969504f60d3e10f2d862e927a1bf1402001e5b596a149639b5bbdd3a1d370ef40a6c", 0xd1}], 0x5, &(0x7f0000001800)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x3c, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0xf}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x7}, @ra, @jumbo={0xc2, 0x4, 0x7fffffff}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5d, 0x6}}, @generic={0xf0, 0xbb, "36f1b2cd9f370ad50fd094f7395d7109a683a36c17252d94d8e315afa6bddde24778d7b9f7b31abf6294a561a5806b0bd3080e0d389ac90511ee7214b3ae099abceee72484e443f99df05f920156e34aafdf060e9eec462ce16185948955a14b92c5dff10fd0271f6a1a4dc8a6c5360716ce662727e00822c4da5691aff34e902bee5b822c89594f15af9fb8bb4286cbbfbc349b25214dd83ecbafe1d6abd221dd55fcf96d0a3feaa3d63c0b57e407778f73e83ae247f5acb45870"}, @ra={0x5, 0x2, 0x200}]}}}], 0x120}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001940)="d6d278315018235c6d04f791fe4731040d9d1bd67276935cd6c007a223e9577462691658a54354ef13b0b785d13465ae0219c18586e5ad06fdfb3cb5dfc7", 0x3e}], 0x1, &(0x7f00000019c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x45}}, @hopopts_2292={{0xe8, 0x29, 0x36, {0x3a, 0x19, '\x00', [@generic={0x7f, 0xb6, "7ea985dd4e2771ce1c823a8705ffb740cadd81da07de938f2d08b3f2a45ef3353ca033cc7b2df12b980c536c48507327230abad3d099104858ed5332a0d811fadc0f9654097819506882838182c36a4b7a7588adc9ce092508ab226b59073fcf2dedd79c1f8137bb52650719b0610fdeaeb59b93e5e27e7d16a03d2224e718e3a1295f87ba9657fc67f147ab1bc7ada95e717a75433101ecd3c88ae8557af2bebb80ecc7ad9fc6168c1fae8841bb738dba634619ae03"}, @pad1, @jumbo={0xc2, 0x4, 0xfffffff9}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x1000}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x3a, 0xb, '\x00', [@hao={0xc9, 0x10, @private0}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x64a, [0xb517, 0x9c3, 0x5, 0x7, 0xee7a, 0x10000]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r6}}}], 0x1b8}}, {{&(0x7f0000001b80)={0xa, 0x4e21, 0x0, @local, 0x468d9959}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="7a748d9ed89cb59a879f997d2cd2e10408a13c35ea31cea7cdaf6caa19282ffa8d6805a48526a7bb554bfb72dfa8eb5f38cc7fad6d10cea95aec30dcbf5385371d28f50e4fe8ca25eb1e802cb1d67f5caf17c1323a5f0f7f86e647ff74fa18965334878c51a50b3aa873224d42feee30c6df6c8349d21210032ed92b7c495d504a5191089b5b7c886eb73497e2b279e68572ce6009fdc97af5461cf4a3e606bcbe7cca763521c4c0e6d67f51c2a0208ca0a34db32fdcfcb5a59a396dec4d6fbd16a3643616653054eccb2866e6b6b9a22523b0142f5fc9093bedd71aa9cd2314c8d2265a179dff1723f214", 0xeb}], 0x1}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)="a2246f1e68fbae67af2059f113f44f2d370b1c3d15ec77334830b3d85c903e0042b2daa3bb495a78cc3f074e669d964e166ea7712afb31882fe7cd4d5fe47b77baec0596f57773626715d1a0947991f4a08cb60210051bdda203702928e11317130d98061017d5eaf276acdf7327cd8cf75418bde860126b7297f3aaa5d34dc3a9e70feb75044c54308701bdac1681538e2cc79c35e80213b63a2d50d71deb3afac3a247f62f87a45a9d76cefd251180f9d50e741722e00226de935be449a6034b5676fb650de392b58c7f13728f39b0", 0xd0}], 0x1}}], 0x5, 0x40008c0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x7fff) 43.249042865s ago: executing program 0 (id=1334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) ioctl$sock_netdev_private(r1, 0x8948, &(0x7f0000000000)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0xfdb4, 0x1000000, 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0xdddd0000, 0x1, 0x80, 0x100, 0x0, [{0x3, 0x4, 0x40, '\x00', 0x7f}, {0xd, 0x0, 0x7, '\x00', 0x8}, {0x1, 0x6, 0x80, '\x00', 0x5}, {0x7, 0x0, 0x3, '\x00', 0xff}, {0x5, 0x2, 0x81, '\x00', 0x9}, {0x1, 0x5, 0xff, '\x00', 0x89}, {0x7, 0x0, 0xd, '\x00', 0x7}, {0x7, 0x63, 0x60, '\x00', 0x3}, {0xe8, 0x0, 0xa, '\x00', 0x5}, {0x9e, 0xa, 0x0, '\x00', 0x13}, {0xdc, 0x0, 0x4e, '\x00', 0xff}, {0xff, 0x7, 0x5b, '\x00', 0x72}, {0x2b, 0x5, 0x14, '\x00', 0x80}, {0xfd, 0x40, 0x80, '\x00', 0x8}, {0xaf, 0x8, 0xf9, '\x00', 0x1}, {0x5, 0xff, 0x1, '\x00', 0x4}, {0x1, 0x4, 0xd5, '\x00', 0xfb}, {0x1, 0xe, 0x0, '\x00', 0x7}, {0x8, 0x2, 0x5, '\x00', 0x9}, {0xc, 0x6, 0x4, '\x00', 0x3}, {0x1, 0x7, 0x7f, '\x00', 0x81}, {0x6, 0x7, 0x8, '\x00', 0x94}, {0xfd, 0x9, 0x3, '\x00', 0x1}, {0x2, 0x8, 0x7, '\x00', 0x1}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) (async) ioctl$sock_netdev_private(r1, 0x8948, &(0x7f0000000000)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$unix(0x1, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0xfdb4, 0x1000000, 0x0}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r5, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) connect$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0xdddd0000, 0x1, 0x80, 0x100, 0x0, [{0x3, 0x4, 0x40, '\x00', 0x7f}, {0xd, 0x0, 0x7, '\x00', 0x8}, {0x1, 0x6, 0x80, '\x00', 0x5}, {0x7, 0x0, 0x3, '\x00', 0xff}, {0x5, 0x2, 0x81, '\x00', 0x9}, {0x1, 0x5, 0xff, '\x00', 0x89}, {0x7, 0x0, 0xd, '\x00', 0x7}, {0x7, 0x63, 0x60, '\x00', 0x3}, {0xe8, 0x0, 0xa, '\x00', 0x5}, {0x9e, 0xa, 0x0, '\x00', 0x13}, {0xdc, 0x0, 0x4e, '\x00', 0xff}, {0xff, 0x7, 0x5b, '\x00', 0x72}, {0x2b, 0x5, 0x14, '\x00', 0x80}, {0xfd, 0x40, 0x80, '\x00', 0x8}, {0xaf, 0x8, 0xf9, '\x00', 0x1}, {0x5, 0xff, 0x1, '\x00', 0x4}, {0x1, 0x4, 0xd5, '\x00', 0xfb}, {0x1, 0xe, 0x0, '\x00', 0x7}, {0x8, 0x2, 0x5, '\x00', 0x9}, {0xc, 0x6, 0x4, '\x00', 0x3}, {0x1, 0x7, 0x7f, '\x00', 0x81}, {0x6, 0x7, 0x8, '\x00', 0x94}, {0xfd, 0x9, 0x3, '\x00', 0x1}, {0x2, 0x8, 0x7, '\x00', 0x1}]}}) (async) 43.165375119s ago: executing program 0 (id=1337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x21) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) unshare(0x30000) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 42.286733192s ago: executing program 0 (id=1352): r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 42.050552624s ago: executing program 0 (id=1356): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xff, 0x40000) chdir(&(0x7f0000000540)='./cgroup\x00') connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0xe9b, 0x9, 0x8, 0x0, '\x00', '\x00', '\x00', 0xffffffff, 0x9, 0xfd, 0x5, "57b5391c329531af1a6dc5337d7a129c"}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000100f42da86cde27ea57040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) 42.017579005s ago: executing program 33 (id=1356): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xff, 0x40000) chdir(&(0x7f0000000540)='./cgroup\x00') connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0xe9b, 0x9, 0x8, 0x0, '\x00', '\x00', '\x00', 0xffffffff, 0x9, 0xfd, 0x5, "57b5391c329531af1a6dc5337d7a129c"}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000100f42da86cde27ea57040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) 5.83487389s ago: executing program 5 (id=1792): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x30, 0x0, &(0x7f0000cab000)) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000580), 0x4) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180002ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x4080) 5.749707568s ago: executing program 5 (id=1794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000001c0)="2ba79a3bf66a5ce474b59835", 0xc}, {&(0x7f0000000480)="20f15fe4affa79d59ee1e1a2338f88f03e423eb144b65d2c16416e4e4a86add3521bbaed9e68e5b99cacf5a314f61805ca9f4d86f8bc657d9b6e61a3237d6aa62754cb198de66fcbb843978693760a7c4f30c50b357aa5ae49c6c14dd63530003ebad40b63f0795689b29c89c93e6603e2cb734e9b1c005affe742ff2888fe87c0770cb7c9a1fccc445d0d0e02351bf9268b932309", 0x95}, {&(0x7f00000005c0)="ec1daa728b4513f05b9b0d72992c9ee3a65442e109d8eae39c0ebd8355872c6cf05df20ecf12833bdc16b2db410229e649fe5d12a7006c6c2b375aa31bf742a80ee666e71f546befc1b2f7a880a53955e9a520318fa6b7b47ddfc56f7a57afd4f1461c68a81b89890ee6f9405a81cadd2f253cab9ce0001ae6bd238e0b7359c2a0dd88d8910973624dbae54eba7042acb92c7a8d5f27a39048c532b63d28d245e931d6179f288e4d60e46639d29c3fb5eeca3f4490d248f06c9a27b668e1abc3588243d6f6c7cf11a522c6b9e695fd9f3bf253ea534a0380e7", 0xd9}], 0x4, &(0x7f0000001700)=[{0xa0, 0x107, 0x0, "baf3247ecb2624f076213f70b218201b15ca6783e656ce622432faba41930570cdf5dc3caab0f8f7019360543b771b4398d809f2da34eccb904fc25337c15e46595fd0d7e04eb08fc7340dce6f9d59e4f7d38bdc14007dd3deb3c55829b488983fdf9c9579cede7c148afc9842556980ecf021e5d85a97358a9f606cc05f555933a75d20d6ea5e5319173e8584b033"}, {0x50, 0x102, 0xd0d, "51d13ea27a03274fe0c3344480a5e4b3ae9a5b5d82c6290b98d46ddabb6e27ce1a5b4577a3a29a81121021627f6a3dd3bff8da63159a78087fa2303df823"}, {0xb8, 0x181, 0x6, "3a2477657eb80d54e4d30b7044c114e1aa419e71001d559ba1853df1104b399c7e703038e09584937205c3e28a6d128fa013d5958bc23c1e339c733c3d2edc759140d50910ed1d25a247df2a9ea64a5921a111ad4b43d793defd3d2566211a025edd01ffc4493b2a44267b6ab1eac61c50ce9825586cb74b9794dda179a02211d2662ce9a392656b30b88210be5601a7a70ace9b7d70488b2e577186361830f3a34dc937"}, {0x88, 0x10b, 0x400, "319354c2b7594b7572aad25fbe1b5abf6750f8d1aa0fa63a81f3fbba76ed8e8c4a9acdeec64d437821b3197aa630a41348ffaa02fc2c218260f08d68d03670b1593c671464ed24807249d923fa1a27496750fe56d5ae4f2706598a4b0aa456272c12b580d9e006c739328e7bb2f07b405b38a0c6"}, {0x80, 0x11, 0x400, "72950f58c72df669faacd75f21405cdccfe4a4a8dd7c2ed745ea0555e700865eb968379dd922923feb5b2e75273ee13dad0cf45cb0cb2b6f326729d0c255abe61ea0a490bab76ebaf66a4b6ce1d22937ce68efb33b22d43b31ed6240c6ac9adc52666c9cb6996ea116e0"}, {0x68, 0x113, 0x40, "7a3a6563443c1786da842b64ab10909e0ea7966953bb39bfced8e4cfed39ba8ae428897228a53d71e0b2e91bd891108aac3bb44fd178cf00e927cfa0044edbb66e29507b4a4e04469011d4a7540335a38942584a4e"}, {0xe0, 0x108, 0x3ff, "dd0e34bc24659a388fa1d1d8d69e07c98dcfcbb08809d5c76d12029f0911600e9f683720184a5bb77d186ab72ae72dde7925e52e93082a6b70726e61a6ffe89cdc1457456a013f45b93910465efa551d9be70b30a5c08331ceb555e7767613f6cb72363c1f8c7e4b7ef57a0667ccf57059391bfcf129564ed985263e4ae1bfb94cd5d9f362ca4ba4fe7a76784108d8a529a06ea2222c1d28707c89d4be10e9f60a4f205cabd8f7f4cc71540be95938a389aa5e318839612c647059cbc952cd11d304a500dc1fa67cf545a671d67bbc"}, {0x18, 0x108, 0x2, "7c2476f6dc"}], 0x410}, 0x20008810) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r9, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xfffffe36, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r9, @ANYBLOB="14000500fe8091"], 0x3c}}, 0x0) 4.670034593s ago: executing program 5 (id=1812): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) 4.669298837s ago: executing program 5 (id=1813): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result}], 0x1c) syslog(0xa, &(0x7f0000000040), 0x0) 4.66902374s ago: executing program 5 (id=1814): r0 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0xe, 0x8, 0x3, 0x81}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="e0000000100001000000000003000000616567697331323800"/217], 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x128}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10004588, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ff80000}]}) 4.580314569s ago: executing program 5 (id=1815): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000220001032aafb268de926709e7bd7000ffdbdf250200000000e4ff0400f2ffff"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000e00)) 1.258477391s ago: executing program 3 (id=1850): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x25a9c0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x4) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x400, 0x10}) r3 = gettid() (async) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r5 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000180)={r5, r1, 0x3}) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000001c0)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getmulticast={0x14, 0x3a, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8000) (async) r7 = accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast1}, &(0x7f0000000340)=0x10, 0x800) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r8, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) (async) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_BUFINFO(r9, 0xc02c640e, &(0x7f0000000500)={0x2, 0x7fffffff, 0x2, 0x537, 0x2, 0x8, 0x3}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) (async) connect$rds(r0, &(0x7f0000000540)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000580)) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000005c0)=0x400, 0x4) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000600)={@dev={0xfe, 0x80, '\x00', 0x3c}, @empty, 0xd, 0xf}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r11, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000840)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000008c0)={r13, &(0x7f0000000880)=""/23}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000900)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000940)={0x1d, r14, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) 1.189131486s ago: executing program 3 (id=1852): ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xf396a347865e4dd1, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x10, 0x7312c0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f00000000c0)={0x2, 0xf}) r2 = memfd_secret(0x80000) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000100)={0x3, 0x7}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000140)) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000180)={{0x9, 0x4}, 0x100, './file0\x00'}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r3 = dup(r2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000002c0)={0x4, 0x4, 0x9b, 0x74888b83}, 0x10) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @remote}, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x404000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000380)) (async) r5 = openat2(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xcf0bb72914affebb, 0x14e, 0x36}, 0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x7d, "ae6176a6c5a6a73a1534b41f788274b7f69c928f9ef7edf7606cd58df0ff2d1cf985bd30db1a40d469280c466f58c30ae28a3f7495fcab870ef2cccab00f50f3ffd3c510d496d012fabf080575c6911ece7386b94b53326d9af5d2ea59359c921b612ea609a4b65dc8bd6f8b32e9bef07dbc167b561118f37ee51cb521"}, &(0x7f0000000500)=0x85) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000540)={r6, 0x76}, 0x8) listen(r3, 0x94) (async) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = dup(r7) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f00000005c0)={{{0x8}}, 0x28, 0x40, &(0x7f0000000580)="c3f7fa4baad18bbf517c6c6ad3ddd06ff2e37f1aeb572f9c6113eb0e8ac324c311132f4c2c85f7f2"}) syz_open_dev$sndpcmp(&(0x7f0000000600), 0x12, 0x2) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000640)) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc2f}, @in6={0xa, 0x4e24, 0xfffffffa, @loopback, 0x5}, @in={0x2, 0x4e24, @private=0xa010101}], 0x64) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x1, 0x1, 0x3ff, 0x6, {{0x32, 0x4, 0x1, 0x3e, 0xc8, 0x68, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp_prespec={0x44, 0x24, 0x87, 0x3, 0x1, [{@multicast1, 0xfffffff7}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x6}, {@rand_addr=0x64010102, 0x8}]}, @noop, @ssrr={0x89, 0x27, 0xf3, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @empty, @multicast1, @multicast2, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @generic={0x88, 0x11, "ce26acae3c6db8b8fb1e0cdbeb3fd6"}, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x1, [{@multicast2, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@rand_addr=0x64010100, 0xe72}, {@private=0xa010102, 0xfffffff0}, {@private=0xa010102, 0x8519}]}, @lsrr={0x83, 0xb, 0xc2, [@remote, @local]}, @timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x2}, {@private=0xa010101, 0xfffffffd}, {@rand_addr=0x64010102, 0xdb42}]}, @generic={0x86, 0x4, "0ae2"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0xcaa, 0x3ff, 0x7, 0x0, 0x1, 0x3, '\x00', r9, r3, 0x3, 0x3, 0x4}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x32, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @ldst={0x2, 0x0, 0x2, 0x5, 0x2, 0x10, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3513}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x663e97c, 0x0, 0x0, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3d}, @map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x10000, 0x26, &(0x7f0000000ac0)=""/38, 0x40f00, 0x42, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x4, 0xf, 0x3, 0x10}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[r8], &(0x7f0000000b80)=[{0x5, 0x3, 0x2, 0x2}, {0x5, 0x3, 0x6, 0x1}, {0x0, 0x3, 0xd, 0x3}], 0x10, 0x7}, 0x94) (async) ioctl$sock_netdev_private(r7, 0x89f9, &(0x7f0000000c80)="43cfc8689ea9a1d848644fc13e80f91298dc4693c759d4d1b909036e04e3067b9a3ac850f13802cf389a8d6d307d667d435f39c046d22f5f920da2af1c2d28819e82e108d8635b97dba3f69e04522198492d12623dbd8bf8dfc48d0a605509f7fd6859ba784c8d9e543995eae03617aa1969c183b11f086f39d9a01d") 1.119890671s ago: executing program 3 (id=1855): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r3, 0x5392, &(0x7f00000006c0)={@lba=0x1, 0x2, 0xffffffffffffffab, 0x0}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x1, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x86) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ec0)=""/218, 0xda}], 0x1}, 0xcf}], 0x1, 0x100, 0x0) 902.886526ms ago: executing program 3 (id=1861): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ppoll(&(0x7f0000001780)=[{r0, 0x2108}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="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", 0x16e) 839.960225ms ago: executing program 3 (id=1863): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x80000, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="5b80010000000000140012800a000100767a63616e00000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 778.529243ms ago: executing program 3 (id=1864): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) pipe2$9p(&(0x7f0000000040), 0x800) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 777.558002ms ago: executing program 2 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c710fa978939bf7640c25675e0000002d00010026bd7000fcdbdf25bb240b62b38e791bf06c4927a8ddddce7f8a9fc3f9a3fc294501fe5c87b6a1cc46baf876982cb99d87aa8b6c2530bec64bcd3286d993f12821e83b0bdd8e96d817c8a120a887d1003197f6bc461100000000df758a263a4a3fa1037e3022b6816531ee"], 0x1c}}, 0x20000000) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24000880) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r6, 0x431, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', 0x0, 0x29, 0x4b, 0x5, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x700}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000bc0)={'gretap0\x00', 0x0, 0x8, 0x1, 0x1, 0xc, {{0x53, 0x4, 0x2, 0x1, 0x14c, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x14, 0x64, 0x0, 0x7, [0xb2c, 0x2692, 0x9, 0x228]}, @cipso={0x86, 0x7e, 0xffffffffffffffff, [{0x7, 0xa, "b404150c669dc87b"}, {0x0, 0x4, "d1ad"}, {0x5, 0x12, "7a043ea81a38195c3172d0c6c7505eb0"}, {0x0, 0xe, "25dd8d205c1cbb361e98ef6a"}, {0x6, 0x12, "6063807c6ad56f959c3b9bb2c1f36823"}, {0x1, 0x12, "2b879c32c845dd3f752543c482bb2a69"}, {0x1, 0x3, 's'}, {0x2, 0xc, "262890ea3620ad3be029"}, {0x6, 0x10, "1b9df3c17138ba7ad10d6f9573a6"}, {0x0, 0x7, "70890a3191"}]}, @timestamp_addr={0x44, 0x1c, 0xa4, 0x1, 0x6, [{@empty, 0xe8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@broadcast, 0xf1}]}, @ssrr={0x89, 0x17, 0xa3, [@multicast1, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0xc, 0x1e, 0x1, 0xb, [{@loopback, 0x5b}]}, @timestamp_prespec={0x44, 0x2c, 0x92, 0x3, 0x1, [{@local, 0x10000}, {@remote, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x8}, 0x138600}, {@local, 0x21f}, {@empty, 0xfff}]}, @cipso={0x86, 0x38, 0x3, [{0x6, 0xb, "d58fa99fbfc4500ef1"}, {0x7, 0x7, "1797129b59"}, {0x2, 0x5, "130a12"}, {0x7, 0x2}, {0x0, 0xe, "447e8c0fffb3ba843ee0275e"}, {0xea2f6bfce174eb2e, 0xb, "c2787bc72466959842"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x1, 0x2, {{0x2a, 0x4, 0x2, 0x17, 0xa8, 0x0, 0x0, 0xa4, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0xd, [{@multicast2, 0x6}]}, @lsrr={0x83, 0x23, 0xa6, [@private=0xa010102, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x54, 0x98, 0x1, 0x4, [{@private=0xa010102, 0x80000000}, {@broadcast, 0x24}, {@loopback, 0x3}, {@private=0xa010100, 0x3}, {@private=0xa010101, 0x6}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0x3522}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x62, 0xb9, [@multicast2, @broadcast]}, @noop]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000f40)={'ip_vti0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x9, 0x5, {{0x10, 0x4, 0x1, 0x5, 0x40, 0x67, 0x0, 0x8, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x25}, {[@rr={0x7, 0x13, 0x6d, [@dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @rr={0x7, 0x17, 0xdb, [@multicast1, @multicast1, @empty, @local, @dev={0xac, 0x14, 0x14, 0x15}]}, @end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001140)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)={0x130, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x2f, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004014}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r4, 0x303, 0x0, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xdd}, [@call={0x85, 0x0, 0x0, 0xa6}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0xc1, &(0x7f0000000440)=""/193, 0x40f00, 0x6a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x1, 0x2, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r15, 0x0, 0x33, 0x58, &(0x7f00000006c0)="e612924c59942351d405a57fa20d173c42804c6391057a33c4fe834de64be09e5da71ba2e7b5c4039a91159049482af8c0757a", &(0x7f0000000700)=""/88, 0x7fffffff, 0x0, 0xde, 0xdc, &(0x7f0000000780)="f9399c3cca5fbcea5d4cf0018c26fe6ffb2f0aa046d9233ad2481ca08f5b7d7840112ac965c96c8a75649897e2f934faabe04fedf8e3586c5e8e29c36de7a03c1cf53de7e6f7c383b9742678cd82378ec8b499da8c8e9ec89939cce53cd64e586066b27653927ed3b54b8dbf3a0d76e738a0c61dcc649407e6f5a8e32ec56e743817a63076d3d0440f725ad9138d80134bfcf539c3e05b5b10e0560f2261e23448580fa39f5a0a34b9c7c8277bab51ecbb8b3983d066b495002de34a09fa9651de9c06cd47ba33a01b04f69060ac8436c9f5bf10e32dd977ee9bef433724", &(0x7f0000000880)="c30c7f46506d130d786faa7593b9e438a7b09cc8a81b3da794acdb60e29a323eceff12a46c26944d69b4d6a42f5c020325317ae9bccf1ae094a04b47f74fac7f66f48999f7b527cbebd347b07f4ebdcd18495912861788a4effd135a8ab30045a763d083cbacf0fbd0e4922a8140d310e36c21247a52a6e8dd1d5f4f8c7becb58259685eac7fb4b1cb9a02f7fafadbdeb36827d23397c023ee8c7c348d991a8c2c3c17bdcb359d0053f29b945bdb97962936b990f920c372235fd7c79a8de4b1a09b15fb34f500d1cfdd03b87eb9e2670d2d031ed54713e0951bde11", 0x3, 0x0, 0x6d}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r17 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r17, &(0x7f0000000040)={'#! ', './file0'}, 0xb) (async) close_range(r17, r17, 0x0) ioctl$KDSKBMETA(r17, 0x4b63, &(0x7f0000000a00)=0x3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@getnexthop={0x4c, 0x6a, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r16}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r16}, @NHA_FDB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4050081}, 0x80) 720.045309ms ago: executing program 2 (id=1867): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{}, 0x4}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfa, 0xf2, 0x2, 0x20, @mcast2, @loopback, 0x80, 0x1, 0x38a, 0xf8}}) connect(r4, &(0x7f0000000280)=@xdp={0x2c, 0xe, r5, 0x12}, 0x80) (async) connect(r4, &(0x7f0000000280)=@xdp={0x2c, 0xe, r5, 0x12}, 0x80) 439.641782ms ago: executing program 2 (id=1870): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) 439.379002ms ago: executing program 2 (id=1871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f00000000c0)={0x2, 0x2, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd, 0x0, 0x8}]}}}], 0x18}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72ffffffffff0400f60000070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 370.196863ms ago: executing program 2 (id=1872): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r1, 0x400, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000340)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(0x0, r5, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) (async) write$dsp(r6, 0x0, 0xfffffe59) (async) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 320.228656ms ago: executing program 4 (id=1874): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x410202, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000300)="31144fabdb8f3333", 0x8, 0x40, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) 320.087628ms ago: executing program 4 (id=1875): timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_gettime(0x0, &(0x7f0000000280)) (async) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd448d1e7cbdaf3657d0f34e790c85bdba7931791f6d13318815e115000000000000000242f5b01bc4834608a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x101000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x9, 0x8, 0xfff, 0x1, 0x10, 0x0, 0x437b, 0xc, 0x5, 0x7, 0x749, 0x10001, 0x0, 0x6, 0xffffffff, 0xffffffff, 0x8, 0x81, 0x5, 0x0, 0x9, 0xe0ef, 0x9, 0xfffffc00, 0x8, 0x9132, 0x9, 0x60, 0x1ff, 0x2, 0x7fffffff]}) 250.105136ms ago: executing program 4 (id=1876): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="01"], 0x20}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000440)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) setresuid(r10, r11, 0x0) 190.264566ms ago: executing program 4 (id=1877): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0xffffffe5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x90) 189.760295ms ago: executing program 2 (id=1878): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x8}, @TCA_PIE_TUPDATE={0x8}]}}]}, 0x40}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0xc0049364, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x20000002, 0x620400, 0x5, 0x9e, 0x0, 0x17}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r5) flock(r5, 0x6) r8 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syslog(0xa, 0x0, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r8) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 142.673226ms ago: executing program 4 (id=1879): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090386dd6000195800183afffe800000000000000000000000000018ff0200000000000000000000000000018800907849000000fc000000000000000000000000000001cfa2515290cc5079ea4b4a111d936ee5a31c47b2ee342a49333330edd4961ba1ba819adba82774223e8548443cf7709c971a6f66939b02411787683c46651dbe54a1a2ccf33fc58a478d2a23a26a0a5dfe83be26bdf9b92d9f18b4f1ce02bbf201835cb215976d8747f41db709"], 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000004ec0)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004e80)={&(0x7f0000005600)={0xb8, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc00c055}, 0x800) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1fc, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x1, 0xc, 0xf, 0xe694, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x125d, &(0x7f0000001080)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000ac0)={0x38, r8, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x28}}, 0x4000) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r12, &(0x7f0000002700)=ANY=[@ANYBLOB="080008000701010005001400"], 0xfce) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 0s ago: executing program 4 (id=1880): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/89, 0x59}], 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x7}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="c1", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000), 0x4) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup(r2) connect$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$UHID_INPUT(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa0dffffffffffff88a8000081003d00080045be003c006300004906907800000000ffffffff0000000000000000000000000000000080004e2200004e2200000004000000020000000000000000"], 0x0) write$char_usb(r3, &(0x7f0000000040)="50e42a2e4dcfbbb0e59d6777b8e253922b7ca24e5265d09f8ea454e4b0ebdfacb7383e740d", 0x25) 0s ago: executing program 3 (id=1881): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = socket$inet(0x2, 0x2, 0x1) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) (async, rerun: 64) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="080016fbb07d586e", 0x20}], 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x10000}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x1, 0x8, 0x0, 0x4, 0x2d2, 0x4, 0xc6e1, {r6, @in6={{0xa, 0x4e22, 0x4003, @mcast1, 0x3}}, 0xd, 0x4, 0x5, 0xf2, 0x6}}, &(0x7f0000000580)=0xb0) kernel console output (not intermixed with test programs): for pid=8756 comm="syz.3.1047" path="socket:[21654]" dev="sockfs" ino=21654 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.322330][ T8761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.329463][ T8761] netlink: 'syz.4.1049': attribute type 10 has an invalid length. [ 90.342496][ T8761] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 90.356481][ T8759] __nla_validate_parse: 2 callbacks suppressed [ 90.356493][ T8759] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1047'. [ 90.474140][ T40] audit: type=1400 audit(1754228057.331:382): avc: denied { create } for pid=8760 comm="syz.4.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.599967][ T8774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.622983][ T5776] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 90.794252][ T5776] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.797536][ T5776] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 90.801665][ T5776] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.804624][ T5776] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.809299][ T5776] usb 8-1: config 0 descriptor?? [ 90.815470][ T5776] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 91.038473][ T8784] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.042216][ T40] audit: type=1400 audit(1754228057.891:383): avc: denied { create } for pid=8783 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 91.049663][ T40] audit: type=1400 audit(1754228057.901:384): avc: denied { ioctl } for pid=8783 comm="syz.4.1056" path="socket:[19254]" dev="sockfs" ino=19254 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 91.213237][ T1145] batadv1: left promiscuous mode [ 91.257813][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 92.004597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.189945][ T40] audit: type=1400 audit(1754228059.041:385): avc: denied { mounton } for pid=8808 comm="syz.2.1064" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 92.840528][ T8817] geneve3: entered promiscuous mode [ 92.842269][ T8817] geneve3: entered allmulticast mode [ 93.068042][ T8828] bridge3: entered promiscuous mode [ 93.069720][ T8828] bridge3: entered allmulticast mode [ 93.096465][ T40] audit: type=1400 audit(1754228059.951:386): avc: denied { ioctl } for pid=8831 comm="syz.2.1072" path="socket:[19281]" dev="sockfs" ino=19281 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.362981][ T6777] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 93.405126][ T10] usb 8-1: USB disconnect, device number 5 [ 93.436908][ T8839] fuse: Unknown parameter '' [ 93.493026][ T6777] usb 7-1: device descriptor read/64, error -71 [ 93.753050][ T6777] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 93.769639][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 93.769648][ T40] audit: type=1400 audit(1754228060.621:388): avc: denied { getopt } for pid=8850 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.775426][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 93.789031][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 93.806600][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 93.883287][ T6777] usb 7-1: device descriptor read/64, error -71 [ 93.993175][ T6777] usb usb7-port1: attempt power cycle [ 94.343025][ T6777] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 94.363387][ T6777] usb 7-1: device descriptor read/8, error -71 [ 94.470199][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 94.497337][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 94.613105][ T6777] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 94.633664][ T6777] usb 7-1: device descriptor read/8, error -71 [ 94.746773][ T6777] usb usb7-port1: unable to enumerate USB device [ 94.862796][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1090'. [ 94.969991][ T8894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8894 comm=syz.0.1095 [ 94.975875][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1095'. [ 94.983298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.998331][ T8894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=8894 comm=syz.0.1095 [ 95.002865][ T40] audit: type=1400 audit(1754228061.851:389): avc: denied { create } for pid=8893 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.008999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.010780][ T40] audit: type=1400 audit(1754228061.861:390): avc: denied { accept } for pid=8893 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.033658][ T8896] fuseblk: Bad value for 'fd' [ 95.069578][ T40] audit: type=1400 audit(1754228061.921:391): avc: denied { mount } for pid=8902 comm="syz.3.1098" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 95.076594][ T40] audit: type=1400 audit(1754228061.921:392): avc: denied { unmount } for pid=8902 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 95.109115][ T8907] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 95.112355][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 95.348888][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 95.350141][ T40] audit: type=1400 audit(1754228062.201:393): avc: denied { bind } for pid=8917 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.359201][ T40] audit: type=1400 audit(1754228062.201:394): avc: denied { connect } for pid=8917 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.382124][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 95.385219][ T8920] fuseblk: Unknown parameter 'gro' [ 95.411161][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 95.468208][ T8928] tmpfs: Unknown parameter 'grpquota [ 95.468208][ T8928] ' [ 95.471718][ T40] audit: type=1400 audit(1754228062.321:395): avc: denied { create } for pid=8927 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.527226][ T40] audit: type=1400 audit(1754228062.381:396): avc: denied { execmod } for pid=8927 comm="syz.0.1106" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 95.653045][ T839] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 95.824118][ T839] usb 9-1: config 0 has no interfaces? [ 95.825846][ T839] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.828599][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.833260][ T839] usb 9-1: config 0 descriptor?? [ 96.041603][ T8922] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1103'. [ 96.096595][ T8922] team0: Port device team_slave_0 removed [ 96.159053][ T3245] usb 9-1: USB disconnect, device number 3 [ 96.329489][ T40] audit: type=1400 audit(1754228063.181:397): avc: denied { setopt } for pid=8938 comm="syz.0.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.339863][ T840] IPVS: starting estimator thread 0... [ 96.422967][ T8940] IPVS: using max 44 ests per chain, 105600 per kthread [ 96.691142][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 96.867148][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 97.162997][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 97.163007][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 97.200569][ T8963] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1116'. [ 97.210156][ T8963] loop0: Can't mount, would change RO state [ 97.216231][ T8965] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1117'. [ 97.219117][ T8965] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1117'. [ 97.237961][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 97.240560][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 97.243846][ T8968] netlink: 'syz.3.1118': attribute type 11 has an invalid length. [ 97.264596][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 97.268385][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 97.298722][ T8976] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 97.342973][ T840] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 97.473142][ T840] usb 7-1: device descriptor read/64, error -71 [ 97.500021][ T8988] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 97.559303][ T8992] process 'syz.3.1123' launched '/dev/fd/6' with NULL argv: empty string added [ 97.713313][ T840] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 97.852951][ T840] usb 7-1: device descriptor read/64, error -71 [ 97.963653][ T840] usb usb7-port1: attempt power cycle [ 98.312963][ T840] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 98.334227][ T840] usb 7-1: device descriptor read/8, error -71 [ 98.593527][ T840] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 98.627104][ T840] usb 7-1: device descriptor read/8, error -71 [ 98.669994][ T5966] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 98.734167][ T840] usb usb7-port1: unable to enumerate USB device [ 99.098470][ T9022] netlink: 163952 bytes leftover after parsing attributes in process `syz.0.1134'. [ 99.123876][ T9025] vlan0: entered promiscuous mode [ 99.130742][ T9025] team0: Port device vlan0 added [ 99.345977][ T9009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.372359][ T9030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.546909][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 99.959883][ T9040] autofs: Unknown parameter '0000000000000000000' [ 99.996374][ T9042] syzkaller0: entered promiscuous mode [ 99.998144][ T9042] syzkaller0: entered allmulticast mode [ 100.005687][ C2] sr 2:0:0:0: [sr0] tag#26 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 100.008932][ C2] sr 2:0:0:0: [sr0] tag#26 CDB: opcode=0xd6 (vendor) d6 43 70 da 33 ae [ 100.046608][ T9047] team0: Port device vlan0 removed [ 100.117940][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 100.169093][ T9055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9055 comm=syz.0.1147 [ 100.196509][ T9057] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.359909][ T9068] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 100.371471][ T9070] fuse: Bad value for 'fd' [ 100.400758][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 100.431943][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 100.471836][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 100.522983][ T5966] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.722952][ T840] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 100.853016][ T840] usb 9-1: device descriptor read/64, error -71 [ 101.123002][ T840] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 101.228942][ T9085] netlink: 'syz.2.1157': attribute type 11 has an invalid length. [ 101.231361][ T9085] netlink: 'syz.2.1157': attribute type 10 has an invalid length. [ 101.235061][ T9085] __nla_validate_parse: 4 callbacks suppressed [ 101.235069][ T9085] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1157'. [ 101.262876][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 101.262886][ T40] audit: type=1400 audit(1754228068.111:406): avc: denied { ioctl } for pid=9084 comm="syz.2.1157" path="socket:[21249]" dev="sockfs" ino=21249 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.263695][ T840] usb 9-1: device descriptor read/64, error -71 [ 101.266115][ T9085] fuseblk: Unknown parameter 'rooΰ]e' [ 101.311341][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.2.1159 [ 101.386288][ T840] usb usb9-port1: attempt power cycle [ 101.734126][ T840] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 101.764011][ T840] usb 9-1: device descriptor read/8, error -71 [ 101.856388][ T40] audit: type=1400 audit(1754228068.711:407): avc: denied { wake_alarm } for pid=9095 comm="syz.3.1162" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.882150][ T9098] netlink: 'syz.3.1163': attribute type 9 has an invalid length. [ 101.885109][ T9098] netlink: 'syz.3.1163': attribute type 7 has an invalid length. [ 101.887593][ T9098] netlink: 'syz.3.1163': attribute type 8 has an invalid length. [ 101.982401][ T9107] fuse: Bad value for 'fd' [ 102.014106][ T840] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 102.033428][ T840] usb 9-1: device descriptor read/8, error -71 [ 102.143117][ T840] usb usb9-port1: unable to enumerate USB device [ 102.188917][ T9110] bridge4: entered promiscuous mode [ 102.190556][ T9110] bridge4: entered allmulticast mode [ 102.262723][ T40] audit: type=1400 audit(1754228069.111:408): avc: denied { setopt } for pid=9119 comm="syz.0.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.293228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.410740][ T40] audit: type=1400 audit(1754228069.261:409): avc: denied { ioctl } for pid=9128 comm="syz.0.1176" path="socket:[23677]" dev="sockfs" ino=23677 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 102.420623][ T40] audit: type=1400 audit(1754228069.261:410): avc: denied { write } for pid=9128 comm="syz.0.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 103.137844][ T9137] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.215493][ T40] audit: type=1400 audit(1754228070.071:411): avc: denied { write } for pid=9138 comm="syz.0.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.494183][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 103.736622][ T40] audit: type=1400 audit(1754228070.591:412): avc: denied { bind } for pid=9145 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.738223][ T9146] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 103.744329][ T40] audit: type=1400 audit(1754228070.591:413): avc: denied { read } for pid=9145 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.746289][ T9146] program syz.3.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.045677][ T9152] fuse: Bad value for 'fd' [ 104.102502][ T40] audit: type=1400 audit(1754228070.951:414): avc: denied { create } for pid=9156 comm="syz.0.1187" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.104808][ T9157] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 104.108785][ T40] audit: type=1400 audit(1754228070.951:415): avc: denied { write } for pid=9156 comm="syz.0.1187" name="file0" dev="tmpfs" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.349496][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 104.522985][ T840] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 104.653021][ T840] usb 8-1: device descriptor read/64, error -71 [ 104.898814][ T9164] fuseblk: Unknown parameter 'Fd' [ 104.903147][ T840] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 104.988935][ T9174] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 105.053036][ T840] usb 8-1: device descriptor read/64, error -71 [ 105.163464][ T840] usb usb8-port1: attempt power cycle [ 105.206264][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 105.503094][ T840] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 105.523411][ T840] usb 8-1: device descriptor read/8, error -71 [ 105.763018][ T840] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 105.783458][ T840] usb 8-1: device descriptor read/8, error -71 [ 105.894827][ T840] usb usb8-port1: unable to enumerate USB device [ 106.010180][ T9194] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.014519][ T9194] geneve1: entered allmulticast mode [ 106.059462][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 106.994860][ T9212] fuse: Unknown parameter '' [ 107.022539][ T9214] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 107.876030][ T9232] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 107.909860][ T9234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1219'. [ 107.936891][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 108.065764][ T9243] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1222'. [ 108.168235][ T9247] netlink: 700 bytes leftover after parsing attributes in process `syz.2.1223'. [ 108.283064][ T9250] futex_wake_op: syz.2.1224 tries to shift op by -1; fix this program [ 108.290231][ T9252] comedi comedi4: comedi_config --init_data is deprecated [ 108.294619][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 108.294629][ T40] audit: type=1400 audit(1754228075.151:419): avc: denied { read append } for pid=9251 comm="syz.3.1225" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 108.307072][ T40] audit: type=1400 audit(1754228075.151:420): avc: denied { open } for pid=9251 comm="syz.3.1225" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 108.314332][ T40] audit: type=1400 audit(1754228075.151:421): avc: denied { ioctl } for pid=9251 comm="syz.3.1225" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 108.331420][ T9254] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 108.342515][ T9254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.352378][ T9254] bond1: (slave geneve2): making interface the new active one [ 108.355919][ T9254] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 108.361554][ T9254] bond1: entered promiscuous mode [ 108.363378][ T9254] geneve2: entered promiscuous mode [ 108.414456][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 108.417705][ T9257] bond1: left allmulticast mode [ 108.419372][ T9257] bond1: left promiscuous mode [ 108.421046][ T9257] bridge0: port 3(bond1) entered disabled state [ 108.425448][ T9257] bridge_slave_1: left allmulticast mode [ 108.427324][ T9257] bridge_slave_1: left promiscuous mode [ 108.429316][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.434972][ T9257] bridge_slave_0: left allmulticast mode [ 108.437171][ T9257] bridge_slave_0: left promiscuous mode [ 108.439003][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.577983][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 108.639490][ T9267] vlan0: entered promiscuous mode [ 108.644543][ T9267] team0: Port device vlan0 added [ 108.647948][ T9267] loop6: detected capacity change from 0 to 524287999 [ 108.715907][ T5970] udevd[5970]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 108.735428][ T5970] udevd[5970]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 108.744400][ T5970] udevd[5970]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system [ 108.751940][ T40] audit: type=1400 audit(1754228075.601:422): avc: denied { bind } for pid=9268 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.791652][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 108.884240][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 108.892735][ T9277] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 108.926708][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 108.968706][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 109.058179][ T9286] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1238'. [ 109.082107][ T9286] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1238'. [ 109.308840][ T40] audit: type=1400 audit(1754228076.161:423): avc: denied { create } for pid=9293 comm="syz.3.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.314728][ T40] audit: type=1400 audit(1754228076.161:424): avc: denied { read } for pid=9293 comm="syz.3.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.596651][ T9310] IPVS: Unknown mcast interface: ip6erspan0 [ 109.622739][ T9314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=617 sclass=netlink_route_socket pid=9314 comm=syz.0.1246 [ 109.628259][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'. [ 109.676748][ T40] audit: type=1400 audit(1754228076.531:425): avc: denied { getopt } for pid=9319 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.699079][ T40] audit: type=1400 audit(1754228076.551:426): avc: denied { execute_no_trans } for pid=9322 comm="syz.2.1250" path="/359/file0" dev="tmpfs" ino=1895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.729082][ T9329] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1251'. [ 109.784352][ T40] audit: type=1400 audit(1754228076.641:427): avc: denied { map } for pid=9332 comm="syz.2.1253" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.838237][ T9337] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 110.516329][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 110.733406][ T40] audit: type=1400 audit(1754228077.581:428): avc: denied { read } for pid=9372 comm="syz.2.1269" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.065472][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 111.552014][ T9373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.554263][ T9373] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.558801][ T9373] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.562276][ T9373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.567680][ T9373] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.570349][ T9373] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.572618][ T9373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.575204][ T9373] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.578837][ T9373] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.581213][ T9373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.583201][ T9373] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.586301][ T9373] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.622405][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 111.683887][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 111.684983][ T9402] binder: 9401:9402 ioctl c0306201 200000000540 returned -22 [ 111.708777][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 111.836395][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 111.879098][ T9416] syz.2.1283: attempt to access beyond end of device [ 111.879098][ T9416] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 111.883657][ T9416] syz.2.1283: attempt to access beyond end of device [ 111.883657][ T9416] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 111.888216][ T9416] Mount JFS Failure: -5 [ 111.889621][ T9416] jfs_mount failed w/return code = -5 [ 111.980438][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 112.001551][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 112.024596][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 112.039743][ T9439] hsr0: entered promiscuous mode [ 112.041344][ T9439] hsr0: entered allmulticast mode [ 112.043082][ T9439] hsr_slave_0: entered allmulticast mode [ 112.044830][ T9439] hsr_slave_1: entered allmulticast mode [ 112.048821][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 112.843571][ T5966] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.920020][ T5967] udevd[5967]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 112.933728][ T9464] overlayfs: failed to clone upperpath [ 112.937948][ T9464] overlayfs: failed to clone upperpath [ 113.152976][ T6028] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 113.314275][ T6028] usb 9-1: config 0 has no interfaces? [ 113.317696][ T6028] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.320566][ T6028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.325488][ T6028] usb 9-1: Product: syz [ 113.326980][ T6028] usb 9-1: Manufacturer: syz [ 113.332958][ T6028] usb 9-1: SerialNumber: syz [ 113.335648][ T6028] usb 9-1: config 0 descriptor?? [ 113.544485][ T9460] syz.4.1299: attempt to access beyond end of device [ 113.544485][ T9460] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 113.548690][ T9460] EXT4-fs (nbd4): unable to read superblock [ 113.572995][ T5966] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.591703][ T10] usb 9-1: USB disconnect, device number 8 [ 113.643062][ T5966] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.643414][ T5975] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.647703][ T63] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 113.792749][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 113.792764][ T40] audit: type=1400 audit(1754228080.641:434): avc: denied { mounton } for pid=9475 comm="syz.2.1304" path="mnt:[4026532870]" dev="nsfs" ino=4026532870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.812722][ T9478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9478 comm=syz.2.1305 [ 113.850893][ T40] audit: type=1400 audit(1754228080.701:435): avc: denied { ioctl } for pid=9481 comm="syz.2.1306" path="socket:[22331]" dev="sockfs" ino=22331 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.872951][ T9485] bridge0: entered promiscuous mode [ 113.875786][ T9485] bridge0: port 3(macsec1) entered blocking state [ 113.877887][ T9485] bridge0: port 3(macsec1) entered disabled state [ 113.880021][ T9485] macsec1: entered allmulticast mode [ 113.881715][ T9485] bridge0: entered allmulticast mode [ 113.885337][ T9485] macsec1: left allmulticast mode [ 113.887795][ T9485] bridge0: left allmulticast mode [ 113.890265][ T9485] bridge0: left promiscuous mode [ 113.933738][ T9496] __nla_validate_parse: 6 callbacks suppressed [ 113.933749][ T9496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1308'. [ 113.957215][ T9499] pimreg3: entered allmulticast mode [ 114.042996][ T9510] vlan0: entered promiscuous mode [ 114.044772][ T9510] vlan0: entered allmulticast mode [ 114.046466][ T9510] hsr_slave_1: entered allmulticast mode [ 114.087279][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1314'. [ 114.298245][ T40] audit: type=1400 audit(1754228081.151:436): avc: denied { setopt } for pid=9530 comm="syz.3.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.400085][ T9536] tc_dump_action: action bad kind [ 114.448000][ T9539] dlm: no locking on control device [ 114.504074][ T40] audit: type=1400 audit(1754228081.361:437): avc: denied { getopt } for pid=9543 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.536167][ T40] audit: type=1400 audit(1754228081.391:438): avc: denied { getopt } for pid=9546 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.557856][ T40] audit: type=1400 audit(1754228081.411:439): avc: denied { write } for pid=9543 comm="syz.2.1324" path="socket:[22983]" dev="sockfs" ino=22983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.558349][ T9544] Bluetooth: MGMT ver 1.23 [ 114.593372][ T9552] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 114.596802][ T9554] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 114.669987][ T40] audit: type=1400 audit(1754228081.521:440): avc: denied { listen } for pid=9559 comm="syz.2.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.694265][ T9562] fuse: Bad value for 'rootmode' [ 114.726751][ T9564] capability: warning: `syz.2.1332' uses deprecated v2 capabilities in a way that may be insecure [ 114.734742][ T40] audit: type=1400 audit(1754228081.591:441): avc: denied { read } for pid=9563 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.785174][ T40] audit: type=1400 audit(1754228081.641:442): avc: denied { write } for pid=9563 comm="syz.2.1332" path="socket:[24098]" dev="sockfs" ino=24098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.785340][ T9565] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 114.933039][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.977026][ T40] audit: type=1400 audit(1754228081.831:443): avc: denied { bind } for pid=9581 comm="syz.2.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.006446][ T9590] netlink: 'syz.4.1338': attribute type 27 has an invalid length. [ 115.039881][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.042697][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.106903][ T9590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.118216][ T9590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.185554][ T9590] geneve2: left promiscuous mode [ 115.187479][ T9590] geneve2: left allmulticast mode [ 115.204868][ T9593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.207625][ T9593] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.211701][ T9593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.217060][ T9604] tipc: Started in network mode [ 115.218656][ T9604] tipc: Node identity ac14140f, cluster identity 4711 [ 115.220875][ T9604] tipc: New replicast peer: 255.255.255.255 [ 115.223168][ T9604] tipc: Enabled bearer , priority 10 [ 115.227907][ T71] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.231691][ T71] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.237184][ T71] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.240075][ T71] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.642983][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.705444][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 115.723268][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.733000][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.733021][ T840] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 115.799699][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'. [ 115.803413][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'. [ 115.884618][ T840] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 115.887812][ T840] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.891191][ T840] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.895587][ T840] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.898414][ T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.904678][ T840] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.917127][ T840] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 115.935664][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'. [ 115.938460][ T9642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1353'. [ 115.943097][ T9640] nbd0: detected capacity change from 0 to 127 [ 115.947728][ T5970] block nbd0: Send control failed (result -32) [ 115.947773][ T63] block nbd0: Receive control failed (result -32) [ 115.950412][ T5970] block nbd0: Request send failed, requeueing [ 115.957414][ T5970] block nbd0: Dead connection, failed to find a fallback [ 115.960681][ T67] block nbd0: Dead connection, failed to find a fallback [ 115.964089][ T67] blk_print_req_error: 10 callbacks suppressed [ 115.964099][ T67] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.964107][ T5970] block nbd0: shutting down sockets [ 115.966571][ T67] buffer_io_error: 10 callbacks suppressed [ 115.966579][ T67] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.970213][ T5970] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.970240][ T5970] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.984731][ T5970] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.988193][ T5970] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.991239][ T5970] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.995039][ T5970] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.998078][ T5970] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.001521][ T5970] Buffer I/O error on dev nbd0, logical block 0, async page read [ 116.004789][ T5970] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.007970][ T5970] Buffer I/O error on dev nbd0, logical block 1, async page read [ 116.010547][ T5970] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.013449][ T5970] Buffer I/O error on dev nbd0, logical block 2, async page read [ 116.016037][ T5970] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.018907][ T5970] Buffer I/O error on dev nbd0, logical block 3, async page read [ 116.021420][ T5970] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.024346][ T5970] Buffer I/O error on dev nbd0, logical block 0, async page read [ 116.027056][ T5970] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.030172][ T5970] Buffer I/O error on dev nbd0, logical block 1, async page read [ 116.034433][ T5970] ldm_validate_partition_table(): Disk read failed. [ 116.037416][ T5970] Dev nbd0: unable to read RDB block 0 [ 116.040077][ T5970] nbd0: unable to read partition table [ 116.045195][ T5970] ldm_validate_partition_table(): Disk read failed. [ 116.047993][ T5970] Dev nbd0: unable to read RDB block 0 [ 116.050955][ T5970] nbd0: unable to read partition table [ 116.104316][ T840] usb 9-1: USB disconnect, device number 9 [ 116.204361][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.208504][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.214441][ T6777] tipc: Node number set to 2886997007 [ 116.221558][ T5975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.226471][ T5975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.229169][ T5975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.232100][ T5975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.235373][ T5975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.299124][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.303869][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.358448][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 116.389730][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.393682][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.412437][ T9680] IPVS: length: 184 != 1464 [ 116.438066][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.440580][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.443204][ T9669] bridge_slave_0: entered allmulticast mode [ 116.445846][ T9669] bridge_slave_0: entered promiscuous mode [ 116.448861][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.451153][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.454010][ T9669] bridge_slave_1: entered allmulticast mode [ 116.456609][ T9669] bridge_slave_1: entered promiscuous mode [ 116.495132][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.499092][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.507488][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.512845][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.544843][ T9669] team0: Port device team_slave_0 added [ 116.548370][ T9669] team0: Port device team_slave_1 added [ 116.578241][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.580442][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.588410][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.594264][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.596498][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.604710][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.652267][ T9669] hsr_slave_0: entered promiscuous mode [ 116.654233][ T60] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 116.655340][ T9669] hsr_slave_1: entered promiscuous mode [ 116.658705][ T9669] debugfs: 'hsr0' already exists in 'hsr' [ 116.660479][ T9669] Cannot create hsr debugfs directory [ 116.688855][ T1145] bridge_slave_1: left allmulticast mode [ 116.690727][ T1145] bridge_slave_1: left promiscuous mode [ 116.692504][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.696413][ T1145] bridge_slave_0: left allmulticast mode [ 116.698180][ T1145] bridge_slave_0: left promiscuous mode [ 116.699995][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.796075][ T1145] bond2 (unregistering): (slave geneve2): Releasing active interface [ 116.804767][ T60] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 116.807320][ T60] usb 7-1: config 0 has no interface number 0 [ 116.809262][ T60] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.812639][ T60] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 116.817738][ T60] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 116.821546][ T60] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 12408, setting to 8 [ 116.825679][ T60] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.829720][ T60] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 116.832516][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.838752][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 116.841536][ T60] usb 7-1: config 0 descriptor?? [ 116.844517][ T9680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.846859][ T9680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.852499][ T60] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 116.862758][ T5967] udevd[5967]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 116.898376][ T1145] bond1 (unregistering): (slave bridge1): Releasing active interface [ 117.003009][ T5975] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.143559][ T9691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9691 comm=syz.3.1367 [ 117.149703][ T9691] usb usb8: usbfs: process 9691 (syz.3.1367) did not claim interface 0 before use [ 117.192215][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.196558][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.200047][ T1145] bond0 (unregistering): Released all slaves [ 117.206423][ T1145] bond1 (unregistering): Released all slaves [ 117.258040][ T1145] bond2 (unregistering): Released all slaves [ 117.309959][ T1145] bond3 (unregistering): (slave veth3): Releasing active interface [ 117.312500][ T1145] batadv1: entered promiscuous mode [ 117.315919][ T1145] bond3 (unregistering): (slave batadv1): Releasing active interface [ 117.319477][ T1145] bond3 (unregistering): Released all slaves [ 117.365467][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 117.402206][ T9695] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1368'. [ 117.406252][ T9695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1368'. [ 117.409724][ T9695] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1368'. [ 117.438933][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 117.468445][ T9669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.472824][ T9669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.480798][ T9669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.498676][ T9669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.527194][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 117.549598][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.579063][ T8981] udevd[8981]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 117.589035][ T1145] hsr_slave_0: left promiscuous mode [ 117.592099][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.594631][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.597699][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.599005][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 117.600018][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.625065][ T1145] veth1_macvtap: left promiscuous mode [ 117.626854][ T1145] veth0_macvtap: left promiscuous mode [ 117.628890][ T1145] veth1_vlan: left promiscuous mode [ 117.685359][ T1145] pimreg3 (unregistering): left allmulticast mode [ 117.723063][ T5975] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.813340][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.863049][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 118.018857][ T10] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 118.022757][ T10] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.027242][ T10] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.032319][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.035478][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.044549][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.081788][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.082207][ T10] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 118.185803][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 118.237562][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 118.243377][ T10] usb 9-1: USB disconnect, device number 10 [ 118.285202][ T5975] Bluetooth: hci3: command tx timeout [ 118.580402][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.596081][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.598338][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.605979][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.608228][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.743760][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.882142][ T9669] veth0_vlan: entered promiscuous mode [ 118.889391][ T9669] veth1_vlan: entered promiscuous mode [ 118.917139][ T9669] veth0_macvtap: entered promiscuous mode [ 118.921703][ T9669] veth1_macvtap: entered promiscuous mode [ 118.930381][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.936137][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.941358][ T1083] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.944255][ T1083] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.958680][ T1083] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.963487][ T1083] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.979284][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 118.990301][ T9760] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 118.996749][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.999432][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.020329][ T1145] IPVS: stop unused estimator thread 0... [ 119.022582][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.023243][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 119.027178][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.104917][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 119.104926][ T40] audit: type=1400 audit(2000000002.689:453): avc: denied { connect } for pid=9770 comm="syz.5.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.113723][ T40] audit: type=1400 audit(2000000002.699:454): avc: denied { write } for pid=9770 comm="syz.5.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.119542][ T40] audit: type=1400 audit(2000000002.699:455): avc: denied { read } for pid=9770 comm="syz.5.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.286918][ T6777] usb 7-1: USB disconnect, device number 15 [ 119.292353][ T6777] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 119.349725][ T40] audit: type=1400 audit(2000000002.929:456): avc: denied { setopt } for pid=9793 comm="syz.2.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.350112][ T40] audit: type=1400 audit(2000000002.929:457): avc: denied { getopt } for pid=9793 comm="syz.2.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.350371][ T40] audit: type=1400 audit(2000000002.929:458): avc: denied { read } for pid=9793 comm="syz.2.1382" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.372109][ T40] audit: type=1400 audit(2000000002.929:459): avc: denied { open } for pid=9793 comm="syz.2.1382" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.384194][ T5975] Bluetooth: hci2: unexpected event for opcode 0x204e [ 119.384950][ T9801] __nla_validate_parse: 1 callbacks suppressed [ 119.384959][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 119.385693][ T40] audit: type=1400 audit(2000000002.969:460): avc: denied { write } for pid=9800 comm="syz.2.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.404838][ T5975] Bluetooth: hci2: unexpected event for opcode 0x204e [ 119.460468][ T9810] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 119.463805][ T40] audit: type=1400 audit(2000000003.049:461): avc: denied { checkpoint_restore } for pid=9809 comm="syz.4.1385" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.520664][ T40] audit: type=1400 audit(2000000003.099:462): avc: denied { name_bind } for pid=9809 comm="syz.4.1385" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 119.522797][ T9818] netlink: 'syz.2.1387': attribute type 10 has an invalid length. [ 119.531466][ T9818] openvswitch: netlink: Flow key attr not present in new flow. [ 119.671015][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1388'. [ 119.899903][ T9862] openvswitch: netlink: IPv4 tunnel dst address is zero [ 119.964856][ T9870] vlan2: entered promiscuous mode [ 119.966627][ T9870] vlan2: entered allmulticast mode [ 119.968325][ T9870] hsr_slave_1: entered allmulticast mode [ 119.979434][ T9870] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=9870 comm=syz.5.1400 [ 120.061560][ T9873] ubi31: attaching mtd0 [ 120.065173][ T9873] ubi31: scanning is finished [ 120.066744][ T9873] ubi31: empty MTD device detected [ 120.187637][ T9873] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 120.190112][ T9873] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 120.192427][ T9873] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 120.195719][ T9873] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 120.198117][ T9873] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 120.200417][ T9873] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 120.202992][ T9873] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1908214959 [ 120.206101][ T9873] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 120.209643][ T9877] ubi31: background thread "ubi_bgt31d" started, PID 9877 [ 120.363098][ T63] Bluetooth: hci3: command tx timeout [ 120.636245][ T9898] netlink: 'syz.5.1407': attribute type 2 has an invalid length. [ 120.727461][ T9907] netlink: 'syz.3.1411': attribute type 10 has an invalid length. [ 120.733303][ T9907] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.856781][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.012993][ T9875] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 121.174467][ T9875] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 121.177735][ T9875] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.181128][ T9875] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.185345][ T9875] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.188139][ T9875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.193914][ T9875] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.196418][ T9875] usb 10-1: invalid MIDI out EP 0 [ 121.224459][ T9875] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 121.395352][ T9875] usb 10-1: USB disconnect, device number 2 [ 121.813007][ T5975] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.813028][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 121.997050][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 122.082083][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 122.085727][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 122.189776][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 122.208220][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 122.208375][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'. [ 122.255680][ T8981] udevd[8981]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 122.281016][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 122.443037][ T5975] Bluetooth: hci3: command tx timeout [ 122.706262][ T9989] Bluetooth: MGMT ver 1.23 [ 122.796251][ T9986] kvm: kvm [9985]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 122.810183][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 122.871229][ T9996] random: crng reseeded on system resumption [ 122.880639][ T9996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1439'. [ 123.147215][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1442'. [ 123.150640][T10004] veth1_vlan: left promiscuous mode [ 123.268023][T10006] overlayfs: failed to resolve '/3]gXFGikH`O5;Qo*se1Nq)I': -2 [ 123.308019][T10008] block device autoloading is deprecated and will be removed. [ 123.311295][T10008] syz.5.1444: attempt to access beyond end of device [ 123.311295][T10008] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 123.317745][T10008] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 123.464956][T10015] program syz.5.1447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.492155][T10017] sctp: [Deprecated]: syz.5.1448 (pid 10017) Use of int in maxseg socket option. [ 123.492155][T10017] Use struct sctp_assoc_value instead [ 123.708277][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 123.732164][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 124.373958][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1453'. [ 124.394689][T10032] bridge2: entered promiscuous mode [ 124.396428][T10032] bridge2: entered allmulticast mode [ 124.523136][ T63] Bluetooth: hci3: command tx timeout [ 124.588111][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 124.762984][ T5975] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 124.763043][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.532250][T10063] can0: slcan on ttyS3. [ 125.564869][ T63] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 125.576678][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 125.576689][ T40] audit: type=1400 audit(2000000009.159:473): avc: denied { unmount } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 125.604038][T10063] can0 (unregistered): slcan off ttyS3. [ 125.651683][T10077] can0: slcan on ttyS3. [ 125.707764][T10086] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 125.711135][T10086] overlayfs: overlapping lowerdir path [ 125.715083][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 125.737021][T10077] can0 (unregistered): slcan off ttyS3. [ 125.760132][T10093] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 125.774877][T10093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.780870][ T40] audit: type=1400 audit(2000000009.359:474): avc: denied { append } for pid=10092 comm="syz.3.1469" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 125.790914][ T40] audit: type=1400 audit(2000000009.359:475): avc: denied { map } for pid=10092 comm="syz.3.1469" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 125.798446][ T40] audit: type=1400 audit(2000000009.359:476): avc: denied { write execute } for pid=10092 comm="syz.3.1469" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 125.830678][ T40] audit: type=1400 audit(2000000009.409:477): avc: denied { mounton } for pid=10099 comm="syz.3.1471" path="/364/file0" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.838043][T10101] overlay: ./file0 is not a directory [ 126.305401][ T40] audit: type=1400 audit(2000000009.889:478): avc: denied { create } for pid=10116 comm="syz.3.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.311517][ T40] audit: type=1400 audit(2000000009.889:479): avc: denied { ioctl } for pid=10116 comm="syz.3.1474" path="socket:[26940]" dev="sockfs" ino=26940 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.591647][T10130] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1477'. [ 126.727891][ T40] audit: type=1400 audit(2000000010.309:480): avc: denied { ioctl } for pid=10135 comm="syz.5.1480" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 126.737200][T10137] bridge_slave_0: left allmulticast mode [ 126.738994][T10137] bridge_slave_0: left promiscuous mode [ 126.740804][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.745046][T10137] bridge_slave_1: left allmulticast mode [ 126.747159][T10137] bridge_slave_1: left promiscuous mode [ 126.749196][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.758817][T10137] bond0: (slave bond_slave_0): Releasing backup interface [ 126.765232][T10137] bond0: (slave bond_slave_1): Releasing backup interface [ 126.771451][T10137] team0: Port device team_slave_0 removed [ 126.776186][T10137] team0: Port device team_slave_1 removed [ 126.778351][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.780651][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.785605][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.787186][T10140] netlink: 'syz.5.1480': attribute type 10 has an invalid length. [ 126.787952][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.802126][T10140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.804400][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 126.808769][T10140] team0: Port device bond0 added [ 126.810341][T10151] cgroup: Name too long [ 126.821449][T10151] macsec0: entered promiscuous mode [ 126.824479][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 126.826212][T10151] macsec0: entered allmulticast mode [ 126.828915][T10151] veth1_macvtap: entered allmulticast mode [ 126.896966][T10137] team0 (unregistering): Port device bond0 removed [ 126.907659][T10158] batman_adv: batadv0: Adding interface: ipvlan3 [ 126.909592][T10158] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.917534][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.920720][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.924437][T10158] batman_adv: batadv0: Interface activated: ipvlan3 [ 127.003457][ T40] audit: type=1400 audit(2000000010.589:481): avc: denied { append } for pid=10168 comm="syz.4.1492" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.006998][T10170] program syz.4.1492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.014861][T10172] netlink: 'syz.4.1492': attribute type 4 has an invalid length. [ 127.036223][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 127.127859][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 127.222215][T10187] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 127.225149][T10187] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 127.227973][T10187] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 127.230330][T10187] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 127.236197][T10187] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1498'. [ 127.243419][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 127.260736][ T40] audit: type=1400 audit(2000000010.839:482): avc: denied { module_request } for pid=10193 comm="syz.5.1500" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 127.268039][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 127.272127][T10197] syzkaller0: entered promiscuous mode [ 127.274797][T10197] syzkaller0: entered allmulticast mode [ 127.336336][T10194] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 127.443575][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 127.479175][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 127.607595][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 127.634624][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 127.676584][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 127.708876][T10234] netlink: 'syz.5.1512': attribute type 10 has an invalid length. [ 127.796081][T10242] comedi: valid board names for 8255 driver are: [ 127.798901][T10242] 8255 [ 127.799761][T10242] comedi: valid board names for vmk80xx driver are: [ 127.801860][T10242] vmk80xx [ 127.802847][T10242] comedi: valid board names for usbduxsigma driver are: [ 127.805461][T10242] usbduxsigma [ 127.806648][T10242] comedi: valid board names for usbduxfast driver are: [ 127.808828][T10242] usbduxfast [ 127.809957][T10242] comedi: valid board names for usbdux driver are: [ 127.812033][T10242] usbdux [ 127.813053][T10242] comedi: valid board names for ni6501 driver are: [ 127.815125][T10242] ni6501 [ 127.816133][T10242] comedi: valid board names for dt9812 driver are: [ 127.818210][T10242] dt9812 [ 127.819153][T10242] comedi: valid board names for ni_labpc_cs driver are: [ 127.821333][T10242] ni_labpc_cs [ 127.822440][T10242] comedi: valid board names for ni_daq_700 driver are: [ 127.824607][T10242] ni_daq_700 [ 127.825684][T10242] comedi: valid board names for labpc_pci driver are: [ 127.827786][T10242] labpc_pci [ 127.828774][T10242] comedi: valid board names for adl_pci9118 driver are: [ 127.830907][T10242] pci9118dg [ 127.831907][T10242] pci9118hg [ 127.833016][T10242] pci9118hr [ 127.834027][T10242] comedi: valid board names for 8255_pci driver are: [ 127.836018][T10242] 8255_pci [ 127.836991][T10242] comedi: valid board names for s526 driver are: [ 127.838932][T10242] s526 [ 127.839822][T10242] comedi: valid board names for multiq3 driver are: [ 127.841863][T10242] multiq3 [ 127.842849][T10242] comedi: valid board names for pcmuio driver are: [ 127.844892][T10242] pcmuio48 [ 127.845875][T10242] pcmuio96 [ 127.846887][T10242] comedi: valid board names for pcmmio driver are: [ 127.848900][T10242] pcmmio [ 127.849915][T10242] comedi: valid board names for pcmda12 driver are: [ 127.851962][T10242] pcmda12 [ 127.853020][T10242] comedi: valid board names for pcmad driver are: [ 127.855014][T10242] pcmad12 [ 127.856000][T10242] pcmad16 [ 127.856984][T10242] comedi: valid board names for ni_labpc driver are: [ 127.859052][T10242] lab-pc-1200 [ 127.860204][T10242] lab-pc-1200ai [ 127.861341][T10242] lab-pc+ [ 127.862341][T10242] comedi: valid board names for atmio16 driver are: [ 127.864462][T10242] atmio16 [ 127.865455][T10242] atmio16d [ 127.866479][T10242] comedi: valid board names for ni_at_ao driver are: [ 127.868549][T10242] at-ao-6 [ 127.869564][T10242] at-ao-10 [ 127.870638][T10242] comedi: valid board names for ni_at_a2150 driver are: [ 127.872783][T10242] ni_at_a2150 [ 127.873940][T10242] comedi: valid board names for adq12b driver are: [ 127.875956][T10242] adq12b [ 127.876905][T10242] comedi: valid board names for mpc624 driver are: [ 127.878929][T10242] mpc624 [ 127.879873][T10242] comedi: valid board names for c6xdigio driver are: [ 127.882826][T10242] c6xdigio [ 127.883965][T10242] comedi: valid board names for aio_iiro_16 driver are: [ 127.886117][T10242] aio_iiro_16 [ 127.887218][T10242] comedi: valid board names for aio_aio12_8 driver are: [ 127.889360][T10242] aio_aio12_8 [ 127.890447][T10242] aio_ai12_8 [ 127.891536][T10242] aio_ao12_4 [ 127.892597][T10242] comedi: valid board names for fl512 driver are: [ 127.894745][T10242] fl512 [ 127.895667][T10242] comedi: valid board names for dmm32at driver are: [ 127.895850][T10243] kvm: vcpu 0: requested 11120 ns lapic timer period limited to 200000 ns [ 127.897708][T10242] dmm32at [ 127.897728][T10242] comedi: valid board names for dt282x driver are: [ 127.897734][T10242] dt2821 [ 127.897738][T10242] dt2821-f [ 127.897742][T10242] dt2821-g [ 127.897746][T10242] dt2823 [ 127.897751][T10242] dt2824-pgh [ 127.897755][T10242] dt2824-pgl [ 127.897759][T10242] dt2825 [ 127.910834][T10242] dt2827 [ 127.911807][T10242] dt2828 [ 127.912795][T10242] dt2829 [ 127.913860][T10242] dt21-ez [ 127.914859][T10242] dt23-ez [ 127.915853][T10242] dt24-ez [ 127.916906][T10242] dt24-ez-pgl [ 127.918025][T10242] comedi: valid board names for dt2817 driver are: [ 127.920056][T10242] dt2817 [ 127.921003][T10242] comedi: valid board names for dt2815 driver are: [ 127.923194][T10242] dt2815 [ 127.924143][T10242] comedi: valid board names for dt2814 driver are: [ 127.926171][T10242] dt2814 [ 127.927184][T10242] comedi: valid board names for dt2811 driver are: [ 127.929233][T10242] dt2811-pgh [ 127.930305][T10242] dt2811-pgl [ 127.931367][T10242] comedi: valid board names for dt2801 driver are: [ 127.933442][T10242] dt2801 [ 127.934405][T10242] comedi: valid board names for das6402 driver are: [ 127.936451][T10242] das6402-12 [ 127.937588][T10242] das6402-16 [ 127.938679][T10242] comedi: valid board names for das1800 driver are: [ 127.940717][T10242] das-1701st [ 127.941790][T10242] das-1701st-da [ 127.942986][T10242] das-1702st [ 127.944053][T10242] das-1702st-da [ 127.945188][T10242] das-1702hr [ 127.946255][T10242] das-1702hr-da [ 127.947405][T10242] das-1701ao [ 127.948551][T10242] das-1702ao [ 127.949623][T10242] das-1801st [ 127.950684][T10242] das-1801st-da [ 127.951823][T10242] das-1802st [ 127.952886][T10242] das-1802st-da [ 127.954308][T10242] das-1802hr [ 127.955427][T10242] das-1802hr-da [ 127.956564][T10242] das-1801hc [ 127.957638][T10242] das-1802hc [ 127.958916][T10242] das-1801ao [ 127.959994][T10242] das-1802ao [ 127.961058][T10242] comedi: valid board names for das800 driver are: [ 127.963186][T10242] das-800 [ 127.964221][T10242] cio-das800 [ 127.965328][T10242] das-801 [ 127.966337][T10242] cio-das801 [ 127.967411][T10242] das-802 [ 127.968421][T10242] cio-das802 [ 127.969579][T10242] cio-das802/16 [ 127.970726][T10242] comedi: valid board names for isa-das08 driver are: [ 127.972837][T10242] isa-das08 [ 127.973962][T10242] das08-pgm [ 127.975005][T10242] das08-pgh [ 127.976045][T10242] das08-pgl [ 127.977085][T10242] das08-aoh [ 127.978144][T10242] das08-aol [ 127.979198][T10242] das08-aom [ 127.980301][T10242] das08/jr-ao [ 127.981395][T10242] das08jr-16-ao [ 127.982737][T10242] pc104-das08 [ 127.983924][T10242] das08jr/16 [ 127.985007][T10242] comedi: valid board names for das16m1 driver are: [ 127.987087][T10242] das16m1 [ 127.988103][T10242] comedi: valid board names for dac02 driver are: [ 127.990144][T10242] dac02 [ 127.991131][T10242] comedi: valid board names for rti802 driver are: [ 127.993276][T10242] rti802 [ 127.994238][T10242] comedi: valid board names for rti800 driver are: [ 127.996262][T10242] rti800 [ 127.997211][T10242] rti815 [ 127.998176][T10242] comedi: valid board names for pcm3724 driver are: [ 128.000241][T10242] pcm3724 [ 128.001299][T10242] comedi: valid board names for pcl818 driver are: [ 128.003486][T10242] pcl818l [ 128.004513][T10242] pcl818h [ 128.005510][T10242] pcl818hd [ 128.006540][T10242] pcl818hg [ 128.007568][T10242] pcl818 [ 128.008669][T10242] pcl718 [ 128.009640][T10242] pcm3718 [ 128.010639][T10242] comedi: valid board names for pcl816 driver are: [ 128.012674][T10242] pcl816 [ 128.013698][T10242] pcl814b [ 128.014663][T10242] comedi: valid board names for pcl812 driver are: [ 128.016631][T10242] pcl812 [ 128.017571][T10242] pcl812pg [ 128.018573][T10242] acl8112pg [ 128.019595][T10242] acl8112dg [ 128.020590][T10242] acl8112hg [ 128.021644][T10242] a821pgl [ 128.022646][T10242] a821pglnda [ 128.023794][T10242] a821pgh [ 128.024755][T10242] a822pgl [ 128.025727][T10242] a822pgh [ 128.026694][T10242] a823pgl [ 128.027660][T10242] a823pgh [ 128.028650][T10242] pcl813 [ 128.029610][T10242] pcl813b [ 128.030604][T10242] acl8113 [ 128.031605][T10242] iso813 [ 128.032561][T10242] acl8216 [ 128.033617][T10242] a826pg [ 128.034538][T10242] comedi: valid board names for pcl730 driver are: [ 128.036493][T10242] pcl730 [ 128.037419][T10242] iso730 [ 128.038375][T10242] acl7130 [ 128.039349][T10242] pcm3730 [ 128.040316][T10242] pcl725 [ 128.041241][T10242] p8r8dio [ 128.042231][T10242] acl7225b [ 128.043408][T10242] p16r16dio [ 128.044425][T10242] pcl733 [ 128.045343][T10242] pcl734 [ 128.046269][T10242] opmm-1616-xt [ 128.047370][T10242] pearl-mm-p [ 128.048411][T10242] ir104-pbf [ 128.049418][T10242] comedi: valid board names for pcl726 driver are: [ 128.051395][T10242] pcl726 [ 128.052315][T10242] pcl727 [ 128.053295][T10242] pcl728 [ 128.054223][T10242] acl6126 [ 128.055183][T10242] acl6128 [ 128.056145][T10242] comedi: valid board names for pcl724 driver are: [ 128.058095][T10242] pcl724 [ 128.059018][T10242] pcl722 [ 128.059932][T10242] pcl731 [ 128.060845][T10242] acl7122 [ 128.061821][T10242] acl7124 [ 128.062802][T10242] pet48dio [ 128.063885][T10242] pcmio48 [ 128.064839][T10242] onyx-mm-dio [ 128.065933][T10242] comedi: valid board names for pcl711 driver are: [ 128.067931][T10242] pcl711 [ 128.068853][T10242] pcl711b [ 128.069822][T10242] acl8112hg [ 128.070820][T10242] acl8112dg [ 128.071827][T10242] comedi: valid board names for amplc_pc263 driver are: [ 128.073992][T10242] pc263 [ 128.074896][T10242] comedi: valid board names for amplc_pc236 driver are: [ 128.076966][T10242] pc36at [ 128.077886][T10242] comedi: valid board names for amplc_dio200 driver are: [ 128.080039][T10242] pc212e [ 128.080986][T10242] pc214e [ 128.081942][T10242] pc215e [ 128.082967][T10242] pc218e [ 128.083916][T10242] pc272e [ 128.084865][T10242] comedi: valid board names for comedi_parport driver are: [ 128.087039][T10242] comedi_parport [ 128.088177][T10242] comedi: valid board names for comedi_test driver are: [ 128.090294][T10242] comedi_test [ 128.091519][T10242] comedi: valid board names for comedi_bond driver are: [ 128.093804][T10242] comedi_bond [ 128.142985][ T839] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 128.296245][ T839] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.299090][ T839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.301514][ T839] usb 7-1: Product: syz [ 128.302838][ T839] usb 7-1: Manufacturer: syz [ 128.304686][ T839] usb 7-1: SerialNumber: syz [ 128.309557][ T839] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.327701][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.344743][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1516'. [ 128.523892][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 128.537514][ T61] usb 7-1: USB disconnect, device number 16 [ 129.194655][T10263] syzkaller0: entered promiscuous mode [ 129.196331][T10263] syzkaller0: entered allmulticast mode [ 129.201121][T10263] netlink: 'syz.2.1520': attribute type 25 has an invalid length. [ 129.402967][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 129.405330][ T9] ath9k_htc: Failed to initialize the device [ 129.407838][ T61] usb 7-1: ath9k_htc: USB layer deinitialized [ 130.814197][T10257] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 130.842391][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 130.842400][ T40] audit: type=1400 audit(2000000014.419:491): avc: denied { listen } for pid=10292 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.850918][ T40] audit: type=1400 audit(2000000014.429:492): avc: denied { accept } for pid=10292 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.901383][T10307] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 131.074999][T10308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10308 comm=syz.2.1527 [ 131.100965][T10329] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 131.120360][T10329] bond3: (slave geneve3): making interface the new active one [ 131.124906][T10329] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 131.127777][ T1251] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.129420][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1532'. [ 131.130528][ T1251] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.130549][ T1251] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.139483][T10324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.141886][ T1251] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.163142][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.661582][ T40] audit: type=1400 audit(2000000015.239:493): avc: denied { connect } for pid=10352 comm="syz.4.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.960628][T10297] Set syz1 is full, maxelem 65536 reached [ 131.989490][T10378] IPVS: Unknown mcast interface: pimreg1 [ 132.154688][T10389] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 132.245611][T10393] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 132.248628][T10393] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 132.252806][T10393] vhci_hcd vhci_hcd.0: Device attached [ 132.256142][T10394] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 132.259474][ T1083] vhci_hcd: stop threads [ 132.260780][ T1083] vhci_hcd: release socket [ 132.262221][ T1083] vhci_hcd: disconnect device [ 132.534825][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.536972][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.702651][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 132.942989][ T5776] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 132.974039][T10408] tipc: Started in network mode [ 132.975630][T10408] tipc: Node identity c, cluster identity 4711 [ 132.978197][T10408] tipc: Node number set to 12 [ 133.095637][ T5776] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.099152][ T5776] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 133.102266][ T5776] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 133.105455][ T5776] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.108155][ T5776] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.117025][ T5776] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.151438][ T5776] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 133.314960][ T10] usb 9-1: USB disconnect, device number 11 [ 133.826549][ T40] audit: type=1400 audit(2000000017.409:494): avc: denied { ioctl } for pid=10418 comm="syz.3.1551" path="/388/file0" dev="tmpfs" ino=2042 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.836415][T10419] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 134.036201][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 134.060392][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 134.081954][ T5967] udevd[5967]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 134.113352][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 134.136255][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 134.171481][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 134.189846][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 134.231558][ T40] audit: type=1400 audit(2000000017.809:495): avc: denied { map } for pid=10453 comm="syz.5.1563" path="socket:[28267]" dev="sockfs" ino=28267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.238946][ T40] audit: type=1400 audit(2000000017.809:496): avc: denied { read } for pid=10453 comm="syz.5.1563" path="socket:[28267]" dev="sockfs" ino=28267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.287264][ T5967] udevd[5967]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 134.294435][T10461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.468377][T10476] gretap1: entered promiscuous mode [ 134.626927][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1570'. [ 134.680512][ T40] audit: type=1400 audit(2000000018.259:497): avc: denied { ioctl } for pid=10482 comm="syz.5.1572" path="socket:[27511]" dev="sockfs" ino=27511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.689037][ T40] audit: type=1400 audit(2000000018.259:498): avc: denied { ioctl } for pid=10482 comm="syz.5.1572" path="socket:[27511]" dev="sockfs" ino=27511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.828557][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 134.840598][T10503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1573'. [ 134.872730][ T40] audit: type=1400 audit(2000000018.449:499): avc: denied { bind } for pid=10482 comm="syz.5.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.952306][T10521] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 134.971923][T10523] vlan4: entered promiscuous mode [ 134.973898][T10523] bridge0: entered promiscuous mode [ 134.975883][T10523] vlan4: entered allmulticast mode [ 134.977573][T10523] bridge0: entered allmulticast mode [ 135.033500][T10532] FAULT_INJECTION: forcing a failure. [ 135.033500][T10532] name failslab, interval 1, probability 0, space 0, times 0 [ 135.036391][ T40] audit: type=1400 audit(2000000018.619:500): avc: denied { write } for pid=10522 comm="syz.5.1579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 135.037588][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.3.1582 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 135.037683][T10532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.037692][T10532] Call Trace: [ 135.037697][T10532] [ 135.037702][T10532] dump_stack_lvl+0x16c/0x1f0 [ 135.037752][T10532] should_fail_ex+0x512/0x640 [ 135.037775][T10532] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 135.037794][T10532] should_failslab+0xc2/0x120 [ 135.037811][T10532] __kmalloc_cache_noprof+0x6a/0x3e0 [ 135.037834][T10532] ? syslog_print+0xf6/0x620 [ 135.037866][T10532] syslog_print+0xf6/0x620 [ 135.037894][T10532] ? __pfx_syslog_print+0x10/0x10 [ 135.037922][T10532] ? avc_has_perm_noaudit+0x149/0x3b0 [ 135.037958][T10532] ? avc_has_perm+0x144/0x1f0 [ 135.038029][T10532] do_syslog+0x3dc/0x6c0 [ 135.038046][T10532] ? __pfx_do_syslog+0x10/0x10 [ 135.038060][T10532] ? __fget_files+0x20e/0x3c0 [ 135.038085][T10532] ? ksys_write+0x1ac/0x250 [ 135.038099][T10532] ? __pfx_ksys_write+0x10/0x10 [ 135.038117][T10532] __x64_sys_syslog+0x74/0xb0 [ 135.038131][T10532] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.038151][T10532] do_syscall_64+0xcd/0x4c0 [ 135.038178][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.038193][T10532] RIP: 0033:0x7fc03038eb69 [ 135.038206][T10532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.038221][T10532] RSP: 002b:00007fc0312d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 135.038235][T10532] RAX: ffffffffffffffda RBX: 00007fc0305b5fa0 RCX: 00007fc03038eb69 [ 135.038244][T10532] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000002 [ 135.038252][T10532] RBP: 00007fc0312d1090 R08: 0000000000000000 R09: 0000000000000000 [ 135.038260][T10532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.038268][T10532] R13: 0000000000000001 R14: 00007fc0305b5fa0 R15: 00007ffe06feeef8 [ 135.038289][T10532] [ 135.933563][T10546] vlan0: entered promiscuous mode [ 135.935740][T10546] bridge0: entered promiscuous mode [ 135.963426][ T40] audit: type=1400 audit(2000000019.549:501): avc: denied { bind } for pid=10553 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.970724][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 135.974350][T10554] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1590'. [ 136.000829][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1591'. [ 136.139890][T10573] netlink: 'syz.3.1595': attribute type 4 has an invalid length. [ 136.157727][T10574] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1596'. [ 136.162965][T10572] FAULT_INJECTION: forcing a failure. [ 136.162965][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.167595][T10572] CPU: 2 UID: 0 PID: 10572 Comm: syz.4.1592 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 136.167610][T10572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.167618][T10572] Call Trace: [ 136.167622][T10572] [ 136.167626][T10572] dump_stack_lvl+0x16c/0x1f0 [ 136.167645][T10572] should_fail_ex+0x512/0x640 [ 136.167670][T10572] _copy_to_user+0x32/0xd0 [ 136.167683][T10572] syslog_print+0x35e/0x620 [ 136.167702][T10572] ? __pfx_syslog_print+0x10/0x10 [ 136.167720][T10572] ? avc_has_perm_noaudit+0x149/0x3b0 [ 136.167739][T10572] ? __pfx_autoremove_wake_function+0x10/0x10 [ 136.167765][T10572] do_syslog+0x3dc/0x6c0 [ 136.167777][T10572] ? __pfx_do_syslog+0x10/0x10 [ 136.167787][T10572] ? __fget_files+0x20e/0x3c0 [ 136.167803][T10572] ? ksys_write+0x1ac/0x250 [ 136.167814][T10572] ? __pfx_ksys_write+0x10/0x10 [ 136.167827][T10572] __x64_sys_syslog+0x74/0xb0 [ 136.167838][T10572] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.167854][T10572] do_syscall_64+0xcd/0x4c0 [ 136.167871][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.167882][T10572] RIP: 0033:0x7f9d9e98eb69 [ 136.167891][T10572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.167902][T10572] RSP: 002b:00007f9d9f878038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 136.167915][T10572] RAX: ffffffffffffffda RBX: 00007f9d9ebb5fa0 RCX: 00007f9d9e98eb69 [ 136.167922][T10572] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000002 [ 136.167928][T10572] RBP: 00007f9d9f878090 R08: 0000000000000000 R09: 0000000000000000 [ 136.167934][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.167941][T10572] R13: 0000000000000001 R14: 00007f9d9ebb5fa0 R15: 00007fff7216aca8 [ 136.167954][T10572] [ 136.175231][ T40] audit: type=1400 audit(2000000019.759:502): avc: denied { bind } for pid=10567 comm="syz.3.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 136.219297][T10573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=10573 comm=syz.3.1595 [ 136.275731][T10573] efs: device does not support 512 byte blocks [ 136.278223][T10573] device does not support 512 byte blocks [ 136.278223][T10573] [ 136.300109][ T63] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 136.562638][T10580] sctp: [Deprecated]: syz.2.1598 (pid 10580) Use of int in max_burst socket option. [ 136.562638][T10580] Use struct sctp_assoc_value instead [ 136.569711][ T40] audit: type=1400 audit(2000000020.149:503): avc: denied { mounton } for pid=10579 comm="syz.2.1598" path="/446/file0" dev="gadgetfs" ino=6822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 136.635559][ T40] audit: type=1400 audit(2000000020.219:504): avc: denied { unmount } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 136.661522][T10587] bond0: entered promiscuous mode [ 136.665247][T10587] batadv0: entered promiscuous mode [ 136.668012][T10589] fuse: Bad value for 'user_id' [ 136.668131][T10587] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 136.669802][T10589] fuse: Bad value for 'user_id' [ 136.673928][T10587] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 136.679626][T10587] bond0: left promiscuous mode [ 136.681996][T10587] batadv0: left promiscuous mode [ 136.838650][ T40] audit: type=1400 audit(2000000020.419:505): avc: denied { associate } for pid=10596 comm="syz.2.1604" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 136.895338][T10604] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 136.898632][T10604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.902137][T10604] IPv6: NLM_F_CREATE should be set when creating new route [ 136.905338][T10604] IPv6: NLM_F_CREATE should be set when creating new route [ 136.910864][T10604] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 136.914372][T10604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.098544][ T40] audit: type=1400 audit(2000000020.679:506): avc: denied { execmem } for pid=10618 comm="syz.5.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 137.603008][ T6028] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 137.606033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 137.760393][T10638] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.762476][T10638] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.765971][ T6028] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.767416][T10638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.769391][ T6028] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.773098][T10638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.774615][ T6028] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.776746][T10638] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 137.779153][ T6028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.785633][T10638] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 137.789938][T10633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.795206][ T6028] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.992511][ T40] audit: type=1400 audit(2000000021.569:507): avc: denied { read } for pid=10640 comm="syz.5.1619" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.000691][ T40] audit: type=1400 audit(2000000021.569:508): avc: denied { open } for pid=10640 comm="syz.5.1619" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.003753][ T6028] usb 7-1: USB disconnect, device number 17 [ 138.080082][ T40] audit: type=1400 audit(2000000021.659:509): avc: denied { ioctl } for pid=10640 comm="syz.5.1619" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.395752][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 138.402155][T10654] syzkaller1: entered promiscuous mode [ 138.404056][T10654] syzkaller1: entered allmulticast mode [ 138.532278][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 138.730557][T10660] fuse: Bad value for 'fd' [ 138.832049][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 138.866258][T10665] Can't find ip_set type bitmap:ip [ 138.891396][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 139.278154][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1631'. [ 139.723018][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.788541][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 139.788614][T10690] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1636'. [ 139.813190][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.814253][ T5975] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.815100][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.823004][ T5776] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 139.971903][ T63] Bluetooth: hci1: unexpected event for opcode 0x762f [ 139.975582][ T5776] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.978978][ T5776] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.982059][ T5776] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.984917][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.989265][T10684] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 139.994018][ T5776] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.195828][ T10] usb 7-1: USB disconnect, device number 18 [ 140.655392][T10708] fuse: Bad value for 'fd' [ 140.664704][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 140.666881][ T40] audit: type=1400 audit(2000000024.249:510): avc: denied { create } for pid=10711 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.669487][T10712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1643'. [ 140.688975][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 141.052671][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 141.052686][ T40] audit: type=1400 audit(2000000024.629:514): avc: denied { read write } for pid=10731 comm="syz.2.1648" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.066900][ T40] audit: type=1400 audit(2000000024.629:515): avc: denied { open } for pid=10731 comm="syz.2.1648" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.077042][ T40] audit: type=1400 audit(2000000024.649:516): avc: denied { map } for pid=10731 comm="syz.2.1648" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.586407][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 141.679620][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 141.681520][ T40] audit: type=1400 audit(2000000025.259:517): avc: denied { ioctl } for pid=10753 comm="syz.4.1653" path="socket:[31754]" dev="sockfs" ino=31754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.692177][ T40] audit: type=1400 audit(2000000025.269:518): avc: denied { getopt } for pid=10753 comm="syz.4.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.705366][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 141.706488][ T40] audit: type=1400 audit(2000000025.289:519): avc: denied { nlmsg_read } for pid=10756 comm="syz.4.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.718834][ T40] audit: type=1400 audit(2000000025.299:520): avc: denied { listen } for pid=10756 comm="syz.4.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.779608][T10766] fuse: Bad value for 'fd' [ 141.883004][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.887095][ T40] audit: type=1326 audit(2000000025.469:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.2.1648" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0f58eb69 code=0x7fc00000 [ 141.894735][ T40] audit: type=1326 audit(2000000025.469:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.2.1648" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b0f58eb69 code=0x7fc00000 [ 141.901678][ T40] audit: type=1326 audit(2000000025.469:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.2.1648" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0f58eb69 code=0x7fc00000 [ 141.913121][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 141.961588][T10769] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=10769 comm=syz.2.1658 [ 142.064205][ T10] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.067812][ T10] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.071054][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.074300][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.079129][T10754] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 142.084539][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.285840][ T60] usb 10-1: USB disconnect, device number 3 [ 142.490762][T10797] dlm: no locking on control device [ 143.325618][T10828] fuse: Bad value for 'fd' [ 143.515663][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 143.528490][T10834] bond1 (unregistering): Released all slaves [ 143.621490][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 143.633173][ T9875] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 143.644817][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 143.784668][ T9875] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.789372][ T9875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.794152][ T9875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 143.797840][ T9875] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.801825][ T9875] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.807454][ T9875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.811140][ T9875] usb 7-1: config 0 descriptor?? [ 143.882968][ T60] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 143.963113][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.017087][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.020218][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.022564][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.025133][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.027421][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.029714][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.032797][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.034546][ T60] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.036067][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.040325][ T60] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.043523][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.047308][ T60] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.050414][ T9875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 144.054526][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.057496][T10843] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 144.066016][ T60] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.068063][ T9875] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 144.215919][ T10] usb 7-1: USB disconnect, device number 19 [ 144.269088][ T9] usb 9-1: USB disconnect, device number 12 [ 144.271934][T10850] could not allocate digest TFM handle cryptd(sha3-256-generic) [ 144.281243][T10855] could not allocate digest TFM handle sha224-avx [ 144.444391][T10865] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 144.585328][T10868] openvswitch: netlink: Missing valid actions attribute. [ 144.588324][T10868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.719887][T10879] fuse: Bad value for 'fd' [ 144.767835][T10884] tmpfs: Invalid gid '0x00000000ffffffff' [ 144.889317][T10889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1693'. [ 144.933195][ T60] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 144.994256][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 145.015285][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 145.041963][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 145.066478][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 145.110071][ T60] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.111055][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 145.115168][ T60] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.120687][ T60] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.123593][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.127934][T10877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 145.133037][ T60] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.163414][ T5967] udevd[5967]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 145.312965][ T6777] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 145.332816][ T9875] usb 10-1: USB disconnect, device number 4 [ 145.463013][ T6777] usb 7-1: Using ep0 maxpacket: 8 [ 145.465833][ T6777] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 145.468442][ T6777] usb 7-1: config 179 has no interface number 0 [ 145.470538][ T6777] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 145.474239][ T6777] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 145.477922][ T6777] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.481374][ T6777] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 145.485636][ T6777] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 145.488667][ T6777] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.492793][T10907] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 145.620328][T10922] 9pnet_fd: p9_fd_create_tcp (10922): problem connecting socket to 127.0.0.1 [ 145.699062][ T9875] usb 7-1: USB disconnect, device number 20 [ 145.699175][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 145.705527][ C2] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 146.018149][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 146.021987][T10930] gretap1: entered allmulticast mode [ 146.025734][T10930] bridge0: port 3(gretap1) entered blocking state [ 146.027842][T10930] bridge0: port 3(gretap1) entered disabled state [ 146.030642][T10930] gretap1: entered promiscuous mode [ 146.064807][ T63] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 146.101103][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1709'. [ 146.104859][T10935] netlink: 'syz.5.1709': attribute type 4 has an invalid length. [ 146.107438][T10935] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1709'. [ 146.110794][T10935] : renamed from bond0 [ 146.136112][ T40] kauditd_printk_skb: 359 callbacks suppressed [ 146.136124][ T40] audit: type=1400 audit(2000000029.719:883): avc: denied { mounton } for pid=10939 comm="syz.5.1710" path="/107/bus" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 146.137104][T10941] ntfs3(nbd5): try to read out of volume at offset 0x0 [ 146.254471][T10954] random: crng reseeded on system resumption [ 146.260873][T10953] fuseblk: Bad value for 'user_id' [ 146.262540][T10953] fuseblk: Bad value for 'user_id' [ 146.263265][ T40] audit: type=1400 audit(2000000029.839:884): avc: denied { load_policy } for pid=10945 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 146.264578][T10954] SELinux: failed to load policy [ 146.289419][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1715'. [ 146.379932][T10969] nfs4: Bad value for 'source' [ 146.406380][ T40] audit: type=1400 audit(2000000029.989:885): avc: denied { write } for pid=10971 comm="syz.5.1718" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 146.494500][T10977] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 146.498058][T10977] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 146.542990][ T9875] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 146.686331][ T40] audit: type=1400 audit(2000000030.269:886): avc: denied { append } for pid=10987 comm="syz.5.1723" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.694535][ T40] audit: type=1400 audit(2000000030.269:887): avc: denied { ioctl } for pid=10987 comm="syz.5.1723" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.703220][ T9875] usb 7-1: Using ep0 maxpacket: 32 [ 146.706464][ T9875] usb 7-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 1023 [ 146.710499][ T9875] usb 7-1: config 1 interface 0 has no altsetting 0 [ 146.714151][ T9875] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 146.717078][ T9875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.719642][ T9875] usb 7-1: Product: э [ 146.720991][ T9875] usb 7-1: Manufacturer: 䀊 [ 146.722701][ T9875] usb 7-1: SerialNumber: ᰉ [ 146.726571][T10958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.935296][ T9875] usb 7-1: USB disconnect, device number 21 [ 146.984811][ T40] audit: type=1800 audit(2000000030.569:888): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1729" name="bus" dev="overlay" ino=1238 res=0 errno=0 [ 147.105635][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 147.117198][T11020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11020 comm=syz.4.1732 [ 147.122444][T11020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11020 comm=syz.4.1732 [ 147.304025][ T40] audit: type=1400 audit(2000000030.889:889): avc: denied { append } for pid=11031 comm="syz.4.1737" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 147.328084][T11034] omfs: Invalid superblock (0) [ 147.336932][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'. [ 147.468475][T11043] SELinux: failed to load policy [ 147.677672][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1744'. [ 147.681064][T11051] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 147.691949][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1744'. [ 147.717016][ T7699] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 147.864421][ T7699] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.868661][ T7699] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.872409][ T7699] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.876902][ T7699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.882366][T11045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.887393][ T7699] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.921920][T11066] ntfs3(nbd5): try to read out of volume at offset 0x0 [ 148.026870][T11072] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 148.052623][T11072] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 148.059961][T11072] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 148.064039][T11072] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 148.067398][T11072] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 148.070699][T11072] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 148.077317][T11072] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 148.082568][T11073] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 148.088390][T11073] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 148.101917][ T40] audit: type=1400 audit(2000000031.679:890): avc: denied { connect } for pid=11069 comm="syz.5.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.154414][ T7699] usb 7-1: USB disconnect, device number 22 [ 148.218420][ T40] audit: type=1400 audit(2000000031.799:891): avc: denied { bind } for pid=11080 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 148.271750][T11082] tipc: Enabling of bearer rejected, already enabled [ 148.358020][ T40] audit: type=1400 audit(2000000031.939:892): avc: denied { map } for pid=11044 comm="syz.2.1742" path="socket:[32160]" dev="sockfs" ino=32160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 148.690590][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1755'. [ 148.726343][T11090] fuse: Invalid rootmode [ 148.762664][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 148.776669][T11092] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 148.825044][ T5970] udevd[5970]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 148.905696][ T8981] printk: udevd: 87 output lines suppressed due to ratelimiting [ 148.933947][T11104] dlm: no locking on control device [ 148.972826][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1762'. [ 149.019130][T11111] program syz.5.1764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.072332][T11118] Bluetooth: MGMT ver 1.23 [ 149.080163][T11118] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.082527][T11118] overlayfs: failed to set xattr on upper [ 149.084888][T11118] overlayfs: ...falling back to redirect_dir=nofollow. [ 149.087269][T11118] overlayfs: ...falling back to index=off. [ 149.089153][T11118] overlayfs: ...falling back to uuid=null. [ 149.363034][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 149.514564][ T10] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 149.517640][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 149.521294][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 149.524711][ T10] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 149.527287][ T10] usb 10-1: Product: syz [ 149.528622][ T10] usb 10-1: Manufacturer: syz [ 149.530092][ T10] usb 10-1: SerialNumber: syz [ 149.532601][ T10] usb 10-1: config 0 descriptor?? [ 149.536606][ T10] usb 10-1: selecting invalid altsetting 0 [ 149.611281][T11146] netlink: 'syz.3.1773': attribute type 1 has an invalid length. [ 149.737584][ T7699] usb 10-1: USB disconnect, device number 5 [ 151.752694][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 151.752709][ T40] audit: type=1400 audit(2000000035.329:897): avc: denied { mount } for pid=11170 comm="syz.2.1781" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 151.762388][ T40] audit: type=1400 audit(2000000035.339:898): avc: denied { mounton } for pid=11170 comm="syz.2.1781" path="/486/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 152.123187][ T40] audit: type=1400 audit(2000000035.699:899): avc: denied { unmount } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 152.138872][T11174] __nla_validate_parse: 6 callbacks suppressed [ 152.138882][T11174] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1782'. [ 152.143673][T11177] fuse: Invalid rootmode [ 152.156536][T11180] ptrace attach of "/syz-executor exec"[9669] was attempted by ""[11180] [ 152.185991][T11183] validate_nla: 1 callbacks suppressed [ 152.186001][T11183] netlink: 'syz.2.1785': attribute type 1 has an invalid length. [ 152.200824][T11183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.209812][T11183] bond5: (slave geneve2): making interface the new active one [ 152.214260][T11183] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 152.257552][ T40] audit: type=1326 audit(2000000035.839:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11191 comm="syz.2.1788" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b0f58eb69 code=0x0 [ 152.300591][T11201] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1792'. [ 152.338131][ T40] audit: type=1400 audit(2000000035.919:901): avc: denied { setopt } for pid=11206 comm="syz.5.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.343052][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1794'. [ 152.382247][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 152.386044][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 152.396285][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1794'. [ 152.998529][ T60] IPVS: starting estimator thread 0... [ 153.094922][T11234] IPVS: using max 44 ests per chain, 105600 per kthread [ 153.127467][T11249] macvlan2: entered allmulticast mode [ 153.129428][T11249] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 153.180880][ T40] audit: type=1400 audit(2000000036.759:902): avc: denied { ioctl } for pid=11263 comm="syz.2.1807" path="socket:[33279]" dev="sockfs" ino=33279 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 153.354997][ T40] audit: type=1400 audit(2000000036.939:903): avc: denied { create } for pid=11277 comm="syz.3.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 153.416107][ T40] audit: type=1400 audit(2000000036.999:904): avc: denied { getopt } for pid=11281 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.465629][ T40] audit: type=1400 audit(2000000037.049:905): avc: denied { create } for pid=11285 comm="syz.5.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 153.471753][ T40] audit: type=1400 audit(2000000037.049:906): avc: denied { write } for pid=11285 comm="syz.5.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 153.473092][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 153.624255][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.627758][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.635205][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 153.638069][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.641686][ T9] usb 7-1: config 0 descriptor?? [ 154.051275][ T9] hid_parser_main: 5 callbacks suppressed [ 154.051287][ T9] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 154.056406][ T9] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 154.061049][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0003/input/input7 [ 154.068088][ T9] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 154.250945][ T60] usb 7-1: USB disconnect, device number 23 [ 154.274268][ T7699] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 154.412982][ T7699] usb 9-1: device descriptor read/64, error -71 [ 154.663030][ T7699] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 154.804932][ T7699] usb 9-1: device descriptor read/64, error -71 [ 154.913257][ T7699] usb usb9-port1: attempt power cycle [ 155.064634][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'. [ 155.252960][ T7699] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 155.273604][ T7699] usb 9-1: device descriptor read/8, error -71 [ 155.522996][ T7699] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 155.543380][ T7699] usb 9-1: device descriptor read/8, error -71 [ 155.610621][T11312] bond_slave_0: entered promiscuous mode [ 155.612937][T11312] bond_slave_1: entered promiscuous mode [ 155.614788][T11312] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 155.621510][T11312] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 155.626004][T11312] bond_slave_0: left promiscuous mode [ 155.627989][T11312] bond_slave_1: left promiscuous mode [ 155.629850][T11312] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 155.654679][ T7699] usb usb9-port1: unable to enumerate USB device [ 155.841757][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 155.874364][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 156.111498][ T63] Bluetooth: hci2: adv larger than maximum supported [ 156.111534][ T63] Bluetooth: hci2: Malformed LE Event: 0x0d [ 156.166187][T11349] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 156.168773][T11349] overlayfs: missing 'lowerdir' [ 156.171128][T11349] ALSA: seq fatal error: cannot create timer (-22) [ 156.172309][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 156.256731][T11351] nbd: device at index 64 is going down [ 156.315740][T11361] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 156.318806][T11362] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 156.699666][T11377] dlm: no locking on control device [ 156.742279][T11379] tmpfs: Bad value for 'mpol' [ 156.905963][ T63] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 157.249852][T11427] __nla_validate_parse: 7 callbacks suppressed [ 157.249868][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1862'. [ 157.258267][T11429] netlink: 'syz.3.1863': attribute type 3 has an invalid length. [ 157.668339][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1870'. [ 157.760444][T11462] policy can only be matched on NF_INET_PRE_ROUTING [ 157.760455][T11462] unable to load match [ 157.806369][T11479] comedi comedi2: dt2817: I/O port conflict (0x9,5) [ 157.834362][T11483] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 157.861383][T11483] veth3: entered promiscuous mode [ 157.887211][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1877'. [ 157.956186][T11490] netlink: 'syz.4.1879': attribute type 12 has an invalid length. [ 157.958385][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 157.958394][ T40] audit: type=1400 audit(2000000041.539:919): avc: denied { lock } for pid=11487 comm="syz.2.1878" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 158.006699][ T40] audit: type=1400 audit(2000000041.589:920): avc: denied { read } for pid=11489 comm="syz.4.1879" name="file0" dev="tmpfs" ino=1457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 158.088736][ T40] audit: type=1400 audit(2000000041.669:921): avc: denied { read } for pid=11493 comm="syz.4.1880" path="socket:[34163]" dev="sockfs" ino=34163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.165860][T11497] IPv6: Can't replace route, no match found [ 158.167924][T11497] IPv6: Can't replace route, no match found [ 158.169955][T11497] IPv6: Can't replace route, no match found [ 158.170338][ T40] audit: type=1400 audit(2000000041.749:922): avc: denied { ioctl } for pid=11496 comm="syz.3.1881" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 158.180290][T11498] ================================================================== [ 158.180298][T11498] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 158.180315][T11498] Write of size 8 at addr ffffc900054f1000 by task syz.3.1881/11498 [ 158.180324][T11498] [ 158.180330][T11498] CPU: 3 UID: 0 PID: 11498 Comm: syz.3.1881 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 158.180343][T11498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.180350][T11498] Call Trace: [ 158.180354][T11498] [ 158.180358][T11498] dump_stack_lvl+0x116/0x1f0 [ 158.180375][T11498] print_report+0xcd/0x630 [ 158.180388][T11498] ? __virt_addr_valid+0x81/0x610 [ 158.180404][T11498] ? sys_fillrect+0x15d4/0x17b0 [ 158.180415][T11498] kasan_report+0xe0/0x110 [ 158.180427][T11498] ? sys_fillrect+0x15d4/0x17b0 [ 158.180440][T11498] sys_fillrect+0x15d4/0x17b0 [ 158.180453][T11498] ? __pfx_sys_fillrect+0x10/0x10 [ 158.180467][T11498] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 158.180485][T11498] bit_clear_margins+0x2f7/0x4c0 [ 158.180503][T11498] ? __pfx_bit_clear_margins+0x10/0x10 [ 158.180521][T11498] ? fb_get_color_depth+0x120/0x250 [ 158.180538][T11498] fbcon_clear_margins.constprop.0+0x1d3/0x290 [ 158.180554][T11498] fbcon_switch+0xa01/0x14c0 [ 158.180570][T11498] ? __pfx_fbcon_switch+0x10/0x10 [ 158.180588][T11498] ? __pfx_bit_cursor+0x10/0x10 [ 158.180604][T11498] ? fbcon_cursor+0x409/0x5f0 [ 158.180619][T11498] ? is_console_locked+0x9/0x20 [ 158.180635][T11498] ? con_is_visible+0x65/0x150 [ 158.180649][T11498] redraw_screen+0x2c1/0x760 [ 158.180663][T11498] ? __pfx_vc_do_resize+0x10/0x10 [ 158.180678][T11498] ? __pfx_redraw_screen+0x10/0x10 [ 158.180694][T11498] fbcon_set_disp+0x7d4/0xe40 [ 158.180709][T11498] set_con2fb_map+0x703/0x1060 [ 158.180726][T11498] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 158.180743][T11498] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 158.180766][T11498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.180779][T11498] do_fb_ioctl+0x328/0x7e0 [ 158.180790][T11498] ? __pfx_do_fb_ioctl+0x10/0x10 [ 158.180804][T11498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.180821][T11498] ? selinux_file_ioctl+0x180/0x270 [ 158.180836][T11498] fb_ioctl+0xe5/0x150 [ 158.180845][T11498] ? __pfx_fb_ioctl+0x10/0x10 [ 158.180856][T11498] __x64_sys_ioctl+0x18b/0x210 [ 158.180872][T11498] do_syscall_64+0xcd/0x4c0 [ 158.180890][T11498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.180901][T11498] RIP: 0033:0x7fc03038eb69 [ 158.180909][T11498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.180921][T11498] RSP: 002b:00007fc0312b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.180931][T11498] RAX: ffffffffffffffda RBX: 00007fc0305b6080 RCX: 00007fc03038eb69 [ 158.180938][T11498] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000004 [ 158.180945][T11498] RBP: 00007fc030411df1 R08: 0000000000000000 R09: 0000000000000000 [ 158.180951][T11498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.180957][T11498] R13: 0000000000000000 R14: 00007fc0305b6080 R15: 00007ffe06feeef8 [ 158.180967][T11498] [ 158.180971][T11498] [ 158.180973][T11498] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc900051f1000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 158.180997][T11498] Memory state around the buggy address: [ 158.181002][T11498] ffffc900054f0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.181010][T11498] ffffc900054f0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.181017][T11498] >ffffc900054f1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 158.181023][T11498] ^ [ 158.181028][T11498] ffffc900054f1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 158.181035][T11498] ffffc900054f1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 158.181041][T11498] ================================================================== [ 158.181047][T11498] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.181054][T11498] CPU: 3 UID: 0 PID: 11498 Comm: syz.3.1881 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 158.181067][T11498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.181073][T11498] Call Trace: [ 158.181076][T11498] [ 158.181080][T11498] dump_stack_lvl+0x3d/0x1f0 [ 158.181096][T11498] vpanic+0x6a3/0x780 [ 158.181113][T11498] ? __pfx_vpanic+0x10/0x10 [ 158.181129][T11498] ? __pfx_vprintk_emit+0x10/0x10 [ 158.181144][T11498] ? sys_fillrect+0x15d4/0x17b0 [ 158.181155][T11498] panic+0xca/0xd0 [ 158.181171][T11498] ? __pfx_panic+0x10/0x10 [ 158.181189][T11498] ? check_panic_on_warn+0x1f/0xb0 [ 158.181199][T11498] check_panic_on_warn+0xab/0xb0 [ 158.181209][T11498] end_report+0x107/0x170 [ 158.181220][T11498] kasan_report+0xee/0x110 [ 158.181232][T11498] ? sys_fillrect+0x15d4/0x17b0 [ 158.181245][T11498] sys_fillrect+0x15d4/0x17b0 [ 158.181258][T11498] ? __pfx_sys_fillrect+0x10/0x10 [ 158.181306][T11498] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 158.181327][T11498] bit_clear_margins+0x2f7/0x4c0 [ 158.181344][T11498] ? __pfx_bit_clear_margins+0x10/0x10 [ 158.181362][T11498] ? fb_get_color_depth+0x120/0x250 [ 158.181378][T11498] fbcon_clear_margins.constprop.0+0x1d3/0x290 [ 158.181394][T11498] fbcon_switch+0xa01/0x14c0 [ 158.181411][T11498] ? __pfx_fbcon_switch+0x10/0x10 [ 158.181430][T11498] ? __pfx_bit_cursor+0x10/0x10 [ 158.181446][T11498] ? fbcon_cursor+0x409/0x5f0 [ 158.181461][T11498] ? is_console_locked+0x9/0x20 [ 158.181476][T11498] ? con_is_visible+0x65/0x150 [ 158.181490][T11498] redraw_screen+0x2c1/0x760 [ 158.181504][T11498] ? __pfx_vc_do_resize+0x10/0x10 [ 158.181519][T11498] ? __pfx_redraw_screen+0x10/0x10 [ 158.181535][T11498] fbcon_set_disp+0x7d4/0xe40 [ 158.181550][T11498] set_con2fb_map+0x703/0x1060 [ 158.181567][T11498] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 158.181585][T11498] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 158.181603][T11498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.181615][T11498] do_fb_ioctl+0x328/0x7e0 [ 158.181626][T11498] ? __pfx_do_fb_ioctl+0x10/0x10 [ 158.181639][T11498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.181656][T11498] ? selinux_file_ioctl+0x180/0x270 [ 158.181670][T11498] fb_ioctl+0xe5/0x150 [ 158.181680][T11498] ? __pfx_fb_ioctl+0x10/0x10 [ 158.181691][T11498] __x64_sys_ioctl+0x18b/0x210 [ 158.181707][T11498] do_syscall_64+0xcd/0x4c0 [ 158.181724][T11498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.181735][T11498] RIP: 0033:0x7fc03038eb69 [ 158.181743][T11498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.181757][T11498] RSP: 002b:00007fc0312b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.181768][T11498] RAX: ffffffffffffffda RBX: 00007fc0305b6080 RCX: 00007fc03038eb69 [ 158.181775][T11498] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000004 [ 158.181782][T11498] RBP: 00007fc030411df1 R08: 0000000000000000 R09: 0000000000000000 [ 158.181788][T11498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.181795][T11498] R13: 0000000000000000 R14: 00007fc0305b6080 R15: 00007ffe06feeef8 [ 158.181804][T11498] [ 158.182320][T11498] Kernel Offset: disabled VM DIAGNOSIS: 13:35:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bd0 RDX=ffffffff8e297780 RSI=ffffffff81608c18 RDI=ffffffff93da9fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b53fc R10=ffffffff93da9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c19 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66c8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000061d05000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7216b1b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7216b1b6 00007fff7216b1bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d743e38b7acdfeb b0e454a48e9fd065 524ea27c2b9253e2 b877679de5b0bbcf ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000004000000 224e0000224e0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 7890064900006300 3c00be450008003d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bd0 RDX=ffff88801de8a440 RSI=ffffffff81608c18 RDI=ffffffff93da9fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b53fc R10=ffffffff93da9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c19 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67c8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc0312d0f98 CR3=000000002b76e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7216b1b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7216b1b6 00007fff7216b1bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d9ea12f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d743e38b7acdfeb b0e454a48e9fd065 524ea27c2b9253e2 b877679de5b0bbcf ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000004000000 224e0000224e0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 7890064900006300 3c00be450008003d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bd0 RDX=ffff888027d88000 RSI=ffffffff81608c18 RDI=ffffffff93da9fe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b53fc R10=ffffffff93da9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c19 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560976500 ffffffff 00c00000 GS =0000 ffff8880d68c8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9d9f856f98 CR3=0000000050e84000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaefa3450 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaefa46c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaefa46c6 00007ffcaefa46cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff5a412e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff5a412e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff5a412e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff5a412e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff5a412eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff5a412f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85634155 RDI=ffffffff9b1120e0 RBP=ffffffff9b1120a0 RSP=ffffc90004d2f100 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b1120a0 R15=ffffffff9b112360 RIP=ffffffff8563417f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc0312b06c0 ffffffff 00c00000 GS =0000 ffff8880d69c8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc0312aff98 CR3=000000002b76e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000080000006 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe06fef280 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe06fef406 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe06fef406 00007ffe06fef40c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc030412e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc030412e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc030412e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc030412e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc030412eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc030412f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000