last executing test programs: 1m5.570356917s ago: executing program 3 (id=526): r0 = msgget$private(0x0, 0x142) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xdb) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) msgrcv(r0, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4f23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="24000000000000002900000032000000ff050000003013479dbc191524ab5f5196"], 0x28, 0x7ffffff7}}], 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000008c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170, 0xa4d}, 0x0, 0x0, 0x800000800000000, 0xa, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef000000000000"], 0xe, 0x0) 1m5.381905251s ago: executing program 3 (id=531): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000002e0efc247520d20060f0"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000140)={0x3}) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x40) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r10 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x21, &(0x7f0000000440)=r9, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r11, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r12, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) openat$cgroup_ro(r9, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 1m4.91102674s ago: executing program 3 (id=535): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1, 0x9, 0x6, 0x1c) (async) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000800)='@', 0x1}], 0x1) (async) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) 1m4.907941798s ago: executing program 3 (id=536): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000180)=""/159, 0x9f}], 0x2) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xb, 0x2000) r3 = io_uring_setup(0x47bf, &(0x7f0000000140)={0x0, 0x6d70, 0x10, 0x1, 0x324}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/29, 0x1d}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x5, 0x4, 0x3001, 0x4, 0x0, 0x0, 0x2, 0x6}}) r4 = accept4(r0, 0x0, 0x0, 0x80800) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd60ad6aca00080000fe8000000000000000000000000000bb000000180000000000000000000000000000010300000000"], 0x0) recvmmsg(r4, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r6, 0x5406, &(0x7f00000000c0)={0xfe01, 0xff68, 0x80, 0x8002, 0x0, "0f001a00000400"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000340)=0x16) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xc6) r7 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000380)=0x2) mkdirat(r8, &(0x7f0000000000)='./file0\x00', 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="10002bbd7000ffdbdf250d00000030000580070000007564700008000100657468001c000280080002000180000008000200018000e60008000200000000000c0003800800010009000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x884) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x400c110}, 0x4) 1m4.761212542s ago: executing program 3 (id=537): unshare(0x2a020480) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x3}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000240)={{@any, 0x8}, 0x1, 0x2, 0x6}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040)={0x7, 0x2, 0x7, 0x4d942c23, 0x4, 0x3}) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001901674c0000000000000000ff0100000000000000000000000000000000000000af850000020000c000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100020000000000"], 0xb8}}, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 1m4.758354314s ago: executing program 3 (id=539): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x1}}, 0x18) splice(r2, 0x0, r4, 0x0, 0x1fffffffffff, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000180), 0x80c00) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000140)={r1, r1, 0x8000090001, 0x4000003}) (async, rerun: 32) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (rerun: 32) close_range(r5, 0xffffffffffffffff, 0x0) 49.716290762s ago: executing program 32 (id=539): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x1}}, 0x18) splice(r2, 0x0, r4, 0x0, 0x1fffffffffff, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000180), 0x80c00) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000140)={r1, r1, 0x8000090001, 0x4000003}) (async, rerun: 32) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (rerun: 32) close_range(r5, 0xffffffffffffffff, 0x0) 29.820542876s ago: executing program 4 (id=1045): r0 = socket(0x23, 0x80805, 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000100)={@remote, @remote, @loopback}, &(0x7f0000000140)=0xc) listen(r0, 0x0) accept$ax25(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="0f350df37f000066ba4300b838700000ef420f01990400000044c23f00b805000000b90b0000000f01c1440f22c4c4a1501612b9800000c0a335004000000f30c74424000ac70000c74424023b3ab5bec7442406000000000f011424", 0x5c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) landlock_restrict_self(r2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xa, &(0x7f0000000340)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0x2}, {0xe, 0xe}, {0xd, 0x8}}, ["", "", ""]}, 0x24}}, 0x4000040) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={r8, 0x1}, 0x8) r9 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f00000000c0), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff1}, @TCA_EGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 29.62143683s ago: executing program 4 (id=1053): syz_open_dev$sndpcmc(&(0x7f00000049c0), 0x0, 0x8000) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x1, 0x0, 0x80, 0x7, '\x00', 0x2}) 29.572006985s ago: executing program 4 (id=1055): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(r1, &(0x7f0000000c00)={@void, @void, @mpls={[{0xffff, 0x0, 0x1}, {0x26, 0x0, 0x1}], @ipv6=@generic={0x9, 0x6, "8be56b", 0x0, 0x62, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) syz_clone(0x498144eedbea24c9, 0x0, 0x1e, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) getpid() (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) write$tun(r1, &(0x7f0000000c00)={@void, @void, @mpls={[{0xffff, 0x0, 0x1}, {0x26, 0x0, 0x1}], @ipv6=@generic={0x9, 0x6, "8be56b", 0x0, 0x62, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x30) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) (async) syz_pidfd_open(r0, 0x0) (async) setns(r4, 0x24020000) (async) syz_clone(0x498144eedbea24c9, 0x0, 0x1e, 0x0, 0x0, 0x0) (async) 29.410168861s ago: executing program 4 (id=1059): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) shmget$private(0x0, 0x3000, 0x16001b20, &(0x7f0000ffd000/0x3000)=nil) socket(0x28, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r1, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0xfa0}}], 0x18}}], 0x1, 0x20020040) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 28.551359737s ago: executing program 4 (id=1072): r0 = socket$kcm(0x10, 0x2, 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001400)=ANY=[@ANYRESOCT]) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x2}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) io_setup(0x4, &(0x7f0000000300)) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) 28.432143372s ago: executing program 4 (id=1073): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) close(r0) 13.440912327s ago: executing program 33 (id=1073): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) close(r0) 3.391942366s ago: executing program 0 (id=1444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$sndseq(0xffffffffffffffff, &(0x7f0000000280)=[{0x9, 0x9, 0x8, 0x27, @tick=0x1, {0x0, 0x56}, {0xd, 0x1}, @raw8={"7e18193a43e87e4d64518936"}}, {0x5, 0xe6, 0x5, 0x0, @time={0x101, 0x5}, {0xff, 0x7}, {0x1, 0x9}, @ext={0x78, &(0x7f0000000040)="c96b1150bcec64e41fa21e7398438a9116bad8bc0c6e7325399d0d8e8feea84457fadc92b5c995e48786427b0b2ccb5ac22ff8191319038b74ed3c84b29eca90d86dc9a3c633a4f1ea8b59b7ffbd282885e0a43df19ee5b15946742d9ab0a62bae2ea0356e272c7f6f1446543e67be8f31cd3b79b96d5ecc"}}, {0x64, 0xbf, 0x0, 0x1, @tick=0xfffffffc, {0x5, 0x2}, {0x2, 0xf1}, @connect={{0x5, 0x1}, {0x4, 0x7}}}, {0x0, 0x3, 0x2, 0x4, @time={0x1, 0x100}, {0x9, 0x5}, {0x4, 0x6}, @raw8={"0dee6973dd2657700d0b41a5"}}, {0x2, 0x9, 0xfb, 0x6e, @time={0x57262d4, 0x8}, {0x21, 0x7}, {0xa3, 0x71}, @raw32={[0xffffffff, 0x1, 0x80000001]}}, {0xf, 0xe, 0x7, 0x4, @tick=0xb423, {0x50}, {0x1c, 0x3}, @ext={0xe7, &(0x7f0000000180)="18364ab9548ab5abbd767a73a410c92b4b1a8adce8b31cb53b9693df2ffe5bcec4338ff5fd03f0a1ab6ec17617710126f45eff0d1e0492a08ff1417544a2d1199fca5691c788cd948b81e3b1f37c4c8b6ba428849064a7cb3c7ee23c92885f702489ae7fd693b5144ab1bf0aa3bca8fe519f98048a22100f42108ce9a9f873a7de2f05fd9bf89fec5e8f4d63f3d4f755d7c4ff7aafa77434c1996385658eaca8b08333fb25ba31c5bc507b4158219185f943169a66ca7d2301c47b05d303926e360bf8a052848154d7327f12f7ca717e791cf0d5c9436b92fc751a6eae3e8b361315e89b79161c"}}, {0x8, 0x1, 0x4, 0x58, @time={0x7, 0xb}, {0xfe, 0x7}, {0xfc, 0x8}, @time=@time={0x9, 0x6}}, {0x9, 0x3, 0xf3, 0x8, @time, {0x6, 0x40}, {0x7f, 0x7}, @queue={0x3, {0x8, 0x7}}}], 0xe0) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000150a01"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) (async) sendfile(r0, r0, &(0x7f0000000000)=0xb066, 0xffffffffffffff91) 3.39148408s ago: executing program 0 (id=1446): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000b80)={0x5, 0x1, 0x2a, 0x5, 'syz1\x00', 0x5}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, {0xa, 0x0, 0x0, @remote}, r2, 0xfffffffc}}, 0x48) 3.311022175s ago: executing program 0 (id=1447): r0 = socket$packet(0x11, 0x4000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000036c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x9, 0x8, 0x3) 3.310705679s ago: executing program 0 (id=1448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$TUNSETOWNER(r0, 0x54e3, 0x0) mmap$snddsp(&(0x7f0000539000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0xb000) 3.001522674s ago: executing program 0 (id=1452): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x3a, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.741210879s ago: executing program 0 (id=1457): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301030000010400000004000840000800010001"], 0x1c}}, 0x0) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000000000001800168014000180100006"], 0x60}}, 0x88) 1.671530937s ago: executing program 1 (id=1479): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000600)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004008}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00'}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) write(r0, &(0x7f0000000040)="18000000010005", 0x7) 1.540680807s ago: executing program 1 (id=1484): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x9a, &(0x7f0000001ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6001010000641100fe8000000000000000000000000000bbfe800000000000000000000000000aaa4e204e21006490"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffbb0000019078ac1e0001ac14e0450000000000000000840000ac1414aaac1e0001341517c1000000000000000000000000000000000000821d27f10b3adbee87a7f59bbd1d09c04b3f24c630241a1f8ec480332d61e243ca7dc36e3420be72ba359c78d3dd47eba87e25aebe3d56cb2c59acaf82aef92b8adf95dd5955585cbd7df1d1695e475530bede1afb"], 0x0) 1.539619561s ago: executing program 1 (id=1486): r0 = socket(0x1e, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x48841, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x120000000}}, 0x18) fallocate(r2, 0x10, 0x0, 0x74000) openat(r2, &(0x7f0000000300)='./file1/file4/file6\x00', 0x20202, 0x4) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) brk(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @empty}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x804c840) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB, @ANYBLOB="010000000000000000003e00000008000300", @ANYRESHEX=r6], 0x30}}, 0x4008080) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="e4000000", @ANYRES32=r4, @ANYRESHEX=0x0, @ANYBLOB="000328bd7000b8dbdf251300000008000300708d0003b3eb6bd2876c45d1c79b8a7d0263bd1b00ff5d9524d629ceef3ed434879fa11b6ee8aef091e04e03bb81b299af8f822d2945c1b10466e6b65f4cd8a651fbdab0fb09a542ad09c6dd599c8fa781e6721e3f68fb0f6834b6c4797bee9681017b883d6acec6d0b2144b2452fd0383297f36080156de1b61b6", @ANYBLOB="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", @ANYBLOB="428c8bacdc5e8775d52505aea9ea87598b35df557674c80a0b0764196baee43971d1e739902a7db454cd431b959a900000fa82a0331fbf783bb943bd876f8aa7dc1a0e1488efedddff302e5875f4f18047c573baefc2ffb09db8ed84685dda2a7ee352acac3a3df7911afea29c06b687fa3145234201c52da6a4de4df02a0000"], 0xe4}, 0x1, 0x0, 0x0, 0x40800}, 0x20008051) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x34000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3, 0xff, 0xddff, 0xfffffffe, 0x0, 0x0, 0xc, 0x2}) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1, 0x70bd2d}, 0x1c}}, 0x0) 1.449309032s ago: executing program 1 (id=1487): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'wg0\x00', {0x4}, 0x1}) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000100)) 1.381032767s ago: executing program 1 (id=1489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, &(0x7f00000001c0)=[@cr4={0x1, 0x150424}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.179301474s ago: executing program 5 (id=1498): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x50}}, 0x0) (async) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.071528807s ago: executing program 2 (id=1499): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2400) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000040)={0xfd, 0x19, 0x3, 0x2, "a556cd4af618bc99f98844c808509a3249f47d7d26001d67fb3ef74f50cea716"}) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x0) 1.070016043s ago: executing program 2 (id=1500): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001280), 0x2100, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_AIE_OFF(r1, 0x7002) 1.068832856s ago: executing program 5 (id=1501): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000042800017f000000000400000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000042800017f000000000400000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) flock(r1, 0x2) (async) 1.063596219s ago: executing program 2 (id=1502): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x1) ioctl$CDROMVOLCTRL(r0, 0x5392, &(0x7f0000000000)={0xb, 0x2, 0x2, 0x9}) 1.053301177s ago: executing program 5 (id=1503): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000380)={0x0, 0x8, 0x5, 0xffff0001, 0x5, [], [0x200, 0x7fffffff, 0x6, 0xf2d0], [0xd01, 0x1, 0x6, 0x1], [0x8, 0x10001, 0x1000, 0x6]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000031ec8"]) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000000000000000000ea3d0b5c2a18452ba07a7ccd2754b2e048802794c92db93b56bef09dab312724e2af9a68bc2e73873bb751168dd0e8db6645e7e531b0a6d964c22e7e39bc872cdc627421e8773d5605a38198d110443ea49e5c267e90fbed70195ff4e16b6eb10000000000000007f6fe0877b3f33a0a0c5559cd9910610001b5aaaa7cd52bc3", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000006b887c2fafdc21ae07c82897d6072121aaaaaaaaaa00080045fc001c0068029078"], 0x0) 1.029084194s ago: executing program 2 (id=1504): add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, 0xfffffffffffffffe) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 1.001104233s ago: executing program 2 (id=1505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000140)={0x0, 0x0, 0x3b, {0x3b, 0xf, "30a4c423a9bedaf9634d31b1c1c35ff9331ea421c0359801f6fa4a7b519408dd3902b0bb25a33d4de5be726786704d5ea850481f8d025ca49e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000240)={0x0, 0x22, 0x4, {[@local=@item_012={0x2, 0x2, 0x3, "b6c6"}, @main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0xeab}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0xb, 0x2c, "f3f634f1832c6bbad2a4a598b86eac13e001875813785463ee6dcced1eb2339fbe8ba570389178730ce5cf78"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x1, 0xf0, "7e86af3cac6d865885af7e1e415375e7b085a76563db435e6efd50b117a9b89767d871881df5647457366110567dd791ccb26422bdfc221880869d8fc8b4d179d27bef5ba93cd52299e6d70670e545b77b6c99d1e437dc3265488e398211fb035d3b051c8cf8cb77b7546cf56bbff788ed877b00b7a185670f62372f66e0ccb818bb7fccd0a92ddf2d3d888c6e14253f951ec567a516d977063889603024131803c1a56b0f13cea6182b21f9313be33a673f4bf026d264376bccfb1b4fda485a90547e67f1a3b9e23c7995c5493d4cd5c6ad76e166d16417fc42fedd16b5aa1e6738eb85c9d3ade9e9ba14983cd22d54"}, &(0x7f0000000500)={0x20, 0x3, 0x1}}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500"], 0x5b0}, 0x20008001) sendmsg$inet6(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000044) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2092000000070005000000ebd6b5000000000000d6ecec07000004060007400003000004"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 98.826477ms ago: executing program 5 (id=1506): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x2}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup2(r1, r1) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000c00)) write(r0, &(0x7f00000000c0)="1b0000001e005f025145e9676a2cbf0dffffffff01000000000000", 0x1b) 95.104473ms ago: executing program 1 (id=1507): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) (async, rerun: 64) write(r0, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff807000000b8000000000000", 0x1b) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000005c0)) (async, rerun: 64) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 32) listen(r3, 0x3) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) (async, rerun: 64) syz_extract_tcp_res(&(0x7f0000000240), 0x101, 0x4c) (async, rerun: 64) syz_emit_ethernet(0x214, &(0x7f0000000700)={@local, @random="1f5d84b8342e", @void, {@ipv4={0x800, @dccp={{0x44, 0x4, 0x1, 0x3, 0x206, 0x67, 0x0, 0x5, 0x21, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0x85, 0x0, 0x1, [0x7fffffff, 0x6, 0x70000000, 0x80]}, @rr={0x7, 0x23, 0x10, [@remote, @multicast2, @empty, @empty, @rand_addr=0x64010101, @broadcast, @empty, @multicast1]}, @noop, @timestamp={0x44, 0x2c, 0x21, 0x0, 0xe, [0x5, 0x1, 0xb, 0x2, 0x3, 0x9, 0x7f, 0x3, 0x6, 0x0]}, @timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0x5, [{@broadcast, 0xa}, {@private=0xa010101, 0x4}, {@multicast1, 0x6}, {@multicast2, 0x4a8a}]}, @timestamp_prespec={0x44, 0x4c, 0x64, 0x3, 0x3, [{@private=0xa010102, 0x7}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x3}, {@broadcast, 0x1}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x75, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x34}, 0xfffffbff}, {@loopback, 0x7}, {@local, 0xffffff80}]}, @rr={0x7, 0xb, 0xb7, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x7, "0a54f7", 0x2, "d0f0ef"}, "ba381832979940350303672ef7cac4a44a5464fa39388833e0c2278e35aa4825c2de8c35828b6141bc74a17caad833ff94ef5de6076ca37261ae35a415d27301c71efa70c39197f71ea55dcb856c5cec59bb867628c1c0a495572b34425c9c74ab557a7bc274091367c023f87b27b013413dbae08bd76229c1855b49310c5d422f650176d9b893f03a1fa638aab0fda7e123729911790fa2ff8b468db11b960f3c12d2d261937a2f2f7ff7502c4d44d91424c7b8b54ab346ddf29d0ea9aca871a5a0ad542eed56a25a2027bb1673a58f3f7f83afeafbeb47127722253f3e1ebbe07b9fb50458"}}}}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x43, 0x4f]}, 0x2d) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async, rerun: 64) add_key$user(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)="0c9e1822e10869c1ff6afc981650b80041093779b26236c7c74b93a87060dde3deaae6facb49dab5bacf1cd949bde396ae547a377d6fae38f61a5920b593cc254c8d6cbee907ef174d73d8ff2d2361b8061bc53dd5171996e1b39c6b1a2dbab3143f29091774e12d675ec61f6d277fec5f4dc831bd28e4d45e3ca00696e3e531cbae5dcad56a241be86cd31267f55f", 0x8f, 0xfffffffffffffffd) (async) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) (async) eventfd(0xb) ioctl$SG_IO(r7, 0x541b, 0x0) (async, rerun: 64) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (rerun: 64) 94.116509ms ago: executing program 2 (id=1508): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0xfe01, 0xff68, 0x80, 0x8002, 0x0, "0f001a00000400"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000340)=0x16) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xc6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x39f}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c014}, 0x4008800) sendto$inet(r3, 0x0, 0x0, 0x200040c0, &(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "455a936e29dce970f9495ce7c5993abb4736e49865037714c0dde0c23a7f5e32", 0x6, 0x24, 0xffffffff}, 0x3c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800110117000000000000000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x0) unshare(0x68040200) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'raw\x00', 0x0, [0x8, 0x7ffb, 0x153, 0x8000000c, 0x6]}, &(0x7f0000000240)=0x54) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES8=r1, @ANYRES16=r7, @ANYRESOCT=r2, @ANYRES32=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 93.748471ms ago: executing program 5 (id=1509): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = semget$private(0x0, 0x3, 0x0) semctl$SETVAL(r0, 0x4, 0x10, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x80d42, 0x30) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)="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"/361, 0x169}], 0x1) 0s ago: executing program 5 (id=1510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x258, 0x1398, 0x1398, 0x258, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0x0, 0x0, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x5, 0x2b}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xba6c457bf941dca5, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xff000000], 'gre0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x89, 0x10, 0x2, 0x43}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x8001, 0x6, 0x1, [0x900, 0x1, 0x6, 0x0, 0x8, 0x6, 0xb366, 0x2, 0xfffe, 0x3, 0x0, 0x1, 0x1, 0x64, 0x9, 0x9], 0xe}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x258, 0x1398, 0x1398, 0x258, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0x0, 0x0, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x5, 0x2b}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xba6c457bf941dca5, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xff000000], 'gre0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x89, 0x10, 0x2, 0x43}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x8001, 0x6, 0x1, [0x900, 0x1, 0x6, 0x0, 0x8, 0x6, 0xb366, 0x2, 0xfffe, 0x3, 0x0, 0x1, 0x1, 0x64, 0x9, 0x9], 0xe}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) kernel console output (not intermixed with test programs): 99.740437][ T834] usb 5-1: Product: ဌ [ 99.741813][ T834] usb 5-1: Manufacturer: Г [ 99.791097][ T7958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.544'. [ 99.940278][ T7967] ieee802154 phy1 wpan1: encryption failed: -22 [ 99.948360][ T5939] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 99.996327][ T7966] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 100.005032][ T834] usbhid 5-1:1.0: can't add hid device: -71 [ 100.007459][ T834] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 100.013668][ T834] usb 5-1: USB disconnect, device number 5 [ 100.076534][ T7974] netlink: 'syz.2.549': attribute type 7 has an invalid length. [ 100.727919][ T7987] team_slave_0: entered allmulticast mode [ 100.791325][ T5994] IPVS: starting estimator thread 0... [ 100.836549][ T7998] batman_adv: batadv0: Adding interface: bond0 [ 100.838570][ T7998] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.847301][ T7998] batman_adv: batadv0: Interface activated: bond0 [ 100.883482][ T7996] IPVS: using max 42 ests per chain, 100800 per kthread [ 100.913309][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 100.916349][ T8002] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 100.918897][ T8002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.016818][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 101.047773][ T8016] netlink: 'syz.1.563': attribute type 32 has an invalid length. [ 101.343431][ T29] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 101.403310][ T5994] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 101.451090][ T8034] kvm: user requested TSC rate below hardware speed [ 101.460241][ T8034] kvm: user requested TSC rate below hardware speed [ 101.515675][ T29] usb 7-1: config 1 interface 0 has no altsetting 0 [ 101.519495][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 101.522466][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.525230][ T29] usb 7-1: Product: syz [ 101.526576][ T29] usb 7-1: Manufacturer: syz [ 101.528102][ T29] usb 7-1: SerialNumber: syz [ 101.555121][ T5994] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.558640][ T5994] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.562610][ T5994] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.565673][ T5994] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 101.569069][ T5994] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 101.574652][ T5994] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.577467][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.579972][ T5994] usb 6-1: Product: syz [ 101.581303][ T5994] usb 6-1: Manufacturer: syz [ 101.586196][ T5994] cdc_wdm 6-1:1.0: skipping garbage [ 101.587908][ T5994] cdc_wdm 6-1:1.0: skipping garbage [ 101.592291][ T5994] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 101.594575][ T5994] cdc_wdm 6-1:1.0: Unknown control protocol [ 101.937594][ T29] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 102.289442][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.293788][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.338681][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 102.338694][ T40] audit: type=1400 audit(102.211:33733): avc: denied { name_bind } for pid=8029 comm="syz.1.568" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 102.419513][ T8073] input: syz1 as /devices/virtual/input/input8 [ 102.424286][ T40] audit: type=1400 audit(102.301:33734): avc: denied { read } for pid=5331 comm="acpid" name="event4" dev="devtmpfs" ino=3051 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.429267][ T8073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=8073 comm=syz.0.578 [ 102.431253][ T40] audit: type=1400 audit(102.301:33735): avc: denied { open } for pid=5331 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3051 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.445421][ T40] audit: type=1400 audit(102.301:33736): avc: denied { ioctl } for pid=5331 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3051 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.454448][ T40] audit: type=1400 audit(102.311:33737): avc: denied { mounton } for pid=8029 comm="syz.1.568" path="/138/file0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.505047][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 102.507286][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 102.509401][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 102.511471][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 102.513693][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 102.515772][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 102.517863][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 102.519915][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 102.522075][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 102.524268][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 102.526427][ T5994] usb 6-1: USB disconnect, device number 3 [ 102.528318][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 102.528328][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 102.528346][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 102.933766][ T834] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.115074][ T834] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.118922][ T834] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.121951][ T834] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.125003][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.130625][ T8091] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.134753][ T834] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.382374][ T40] audit: type=1400 audit(103.251:33738): avc: denied { accept } for pid=8090 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.383449][ T29] usb 5-1: USB disconnect, device number 6 [ 103.533390][ T5742] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 103.683337][ T5742] usb 6-1: Using ep0 maxpacket: 32 [ 103.686818][ T5742] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 103.690127][ T5742] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.695972][ T5742] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 103.698875][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.701502][ T5742] usb 6-1: Product: syz [ 103.702854][ T5742] usb 6-1: Manufacturer: syz [ 103.704560][ T5742] usb 6-1: SerialNumber: syz [ 103.712449][ T8106] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 103.783415][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 103.930559][ T8109] 9pnet_fd: Insufficient options for proto=fd [ 104.023433][ T5939] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 104.026614][ T5939] Bluetooth: hci0: Injecting HCI hardware error event [ 104.030709][ T5945] Bluetooth: hci0: hardware error 0x00 [ 104.090583][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf7f0 [ 104.093519][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xb7f0 [ 104.120982][ T8106] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 104.123747][ T8106] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 104.127280][ T8106] vhci_hcd vhci_hcd.0: Device attached [ 104.128283][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x40f0 [ 104.130245][ T8114] vhci_hcd: connection closed [ 104.132497][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xf0 [ 104.134169][ T6661] vhci_hcd: stop threads [ 104.135567][ T5742] usb 6-1: USB disconnect, device number 4 [ 104.140858][ T6661] vhci_hcd: release socket [ 104.142445][ T6661] vhci_hcd: disconnect device [ 104.145210][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xccf0 [ 104.148054][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8cf0 [ 104.148707][ T5994] usb 7-1: USB disconnect, device number 8 [ 104.157934][ T5994] usblp1: removed [ 104.182917][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x40f0 [ 104.185983][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xf0 [ 104.197314][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xccf0 [ 104.200140][ T8111] kvm: kvm [8110]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8cf0 [ 104.207333][ T40] audit: type=1400 audit(104.081:33739): avc: denied { create } for pid=8116 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.208331][ T8117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.592'. [ 104.215226][ T40] audit: type=1400 audit(104.081:33740): avc: denied { write } for pid=8116 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.229072][ T8117] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 104.231787][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 104.237993][ T8117] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 104.540944][ T8126] fuse: Bad value for 'group_id' [ 104.542773][ T8127] fuse: Bad value for 'group_id' [ 104.544552][ T8126] fuse: Bad value for 'group_id' [ 104.545557][ T8127] fuse: Bad value for 'group_id' [ 104.714635][ T40] audit: type=1400 audit(104.591:33741): avc: denied { mounton } for pid=8131 comm="syz.1.597" path="/144/file0" dev="hugetlbfs" ino=22034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 104.973922][ T40] audit: type=1400 audit(104.841:33742): avc: denied { execute } for pid=8136 comm="syz.2.599" name="file2" dev="ramfs" ino=22986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 105.018487][ T8150] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 105.022325][ T8150] hsr0: entered promiscuous mode [ 105.029397][ T8150] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 105.036394][ T8150] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 105.043971][ T8150] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 105.086075][ T8158] bio_check_eod: 4 callbacks suppressed [ 105.086093][ T8158] syz.0.602: attempt to access beyond end of device [ 105.086093][ T8158] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 105.094205][ T8158] EXT4-fs (nbd0): unable to read superblock [ 105.381534][ T8185] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 105.384164][ T8185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.612'. [ 105.397462][ T8185] team0: Port device geneve0 added [ 105.557095][ T8196] xt_l2tp: missing protocol rule (udp|l2tpip) [ 105.562895][ T8198] netlink: 256 bytes leftover after parsing attributes in process `syz.0.617'. [ 105.591191][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 105.777213][ T6660] Bluetooth: (null): Invalid header checksum [ 105.779349][ T6660] Bluetooth: (null): Invalid header checksum [ 105.843840][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 105.895097][ T6656] Bluetooth: (null): Invalid header checksum [ 105.975474][ T8217] sctp: [Deprecated]: syz.2.625 (pid 8217) Use of int in maxseg socket option. [ 105.975474][ T8217] Use struct sctp_assoc_value instead [ 106.016895][ T6660] Bluetooth: (null): Invalid header checksum [ 106.037016][ T8229] openvswitch: netlink: Duplicate key (type 0). [ 106.104017][ T5945] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 106.127112][ T6660] Bluetooth: (null): Invalid header checksum [ 106.154362][ C0] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 106.157629][ C0] sr 2:0:0:0: [sr0] tag#22 CDB: Pre-fetch(16) 90 a6 14 b8 5e 96 bc 59 55 c7 c4 37 [ 106.199801][ T8242] netlink: 'syz.1.633': attribute type 2 has an invalid length. [ 106.202300][ T8242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.633'. [ 106.234879][ T6661] Bluetooth: (null): Invalid header checksum [ 106.354210][ T6651] Bluetooth: (null): Invalid header checksum [ 106.567282][ T8260] netlink: 'syz.0.640': attribute type 2 has an invalid length. [ 106.655510][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.641'. [ 106.733474][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.642'. [ 106.758524][ T8275] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 107.697767][ T8295] Invalid logical block size (2) [ 107.762476][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 107.762488][ T40] audit: type=1400 audit(107.631:33752): avc: denied { mount } for pid=8297 comm="syz.2.646" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 107.773505][ T40] audit: type=1400 audit(107.641:33753): avc: denied { search } for pid=8297 comm="syz.2.646" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 107.798574][ T40] audit: type=1400 audit(107.671:33754): avc: denied { shutdown } for pid=8299 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.828130][ T40] audit: type=1400 audit(107.701:33755): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 107.849611][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 107.912748][ T8320] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 108.139183][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.656'. [ 108.147502][ T40] audit: type=1400 audit(108.021:33756): avc: denied { bind } for pid=8340 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.155660][ T8335] kvm: MONITOR instruction emulated as NOP! [ 108.165889][ T40] audit: type=1400 audit(108.041:33757): avc: denied { write } for pid=8342 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.202800][ T40] audit: type=1400 audit(108.071:33758): avc: denied { setopt } for pid=8346 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 108.205032][ T8347] sctp: [Deprecated]: syz.1.658 (pid 8347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.205032][ T8347] Use struct sctp_sack_info instead [ 108.273835][ T8359] [U] 1WT`8H$09\ [ 108.275689][ T8359] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 108.280620][ T8358] [U]  [ 108.317616][ T8364] netlink: 52 bytes leftover after parsing attributes in process `syz.1.664'. [ 108.369282][ T40] audit: type=1400 audit(108.241:33759): avc: denied { bind } for pid=8367 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.372231][ T8368] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 108.376212][ T40] audit: type=1400 audit(108.241:33760): avc: denied { bind } for pid=8367 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 108.376238][ T40] audit: type=1400 audit(108.241:33761): avc: denied { write } for pid=8367 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 108.401177][ T8368] team0: Port device geneve0 added [ 108.428571][ T8369] tipc: Started in network mode [ 108.430311][ T8369] tipc: Node identity 7ec04bd4df62, cluster identity 4711 [ 108.432680][ T8369] tipc: Enabled bearer , priority 0 [ 108.438378][ T8369] tipc: Resetting bearer [ 108.515165][ T8367] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 108.547184][ T8371] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 108.618694][ T8363] tipc: Disabling bearer [ 108.838655][ T8385] program syz.1.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.842061][ T8385] program syz.1.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.953399][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.123409][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 109.129098][ T29] usb 5-1: config index 0 descriptor too short (expected 5138, got 18) [ 109.131778][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.135259][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 109.139702][ T29] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 109.142559][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.145626][ T29] usb 5-1: Product: syz [ 109.147003][ T29] usb 5-1: Manufacturer: syz [ 109.148475][ T29] usb 5-1: SerialNumber: syz [ 109.151476][ T29] usb 5-1: config 0 descriptor?? [ 109.223525][ T8408] fuse: Bad value for 'fd' [ 109.254429][ T8398] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 109.323516][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.327265][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.359578][ T1343] usb 5-1: USB disconnect, device number 7 [ 109.418720][ T8417] Invalid ELF header magic: != ELF [ 109.459212][ T8419] netlink: 'syz.1.683': attribute type 7 has an invalid length. [ 109.471934][ T8419] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.474709][ T8419] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 109.477717][ T8419] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.480172][ T8419] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 109.511372][ T8421] netlink: zone id is out of range [ 109.514201][ T8421] netlink: zone id is out of range [ 109.515862][ T8421] netlink: zone id is out of range [ 109.517511][ T8421] netlink: zone id is out of range [ 109.971327][ T8442] trusted_key: encrypted_key: keylen parameter is missing [ 110.031833][ T8452] block nbd1: not configured, cannot reconfigure [ 110.125524][ T8463] ipt_REJECT: ECHOREPLY no longer supported. [ 110.151918][ T8465] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.158731][ T8465] overlayfs: invalid origin (0000) [ 110.220868][ T8475] 8021q: VLANs not supported on xfrm0 [ 110.276335][ T8483] syz_tun: entered allmulticast mode [ 110.280996][ T8482] syz_tun: left allmulticast mode [ 110.659378][ T8510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8510 comm=syz.1.711 [ 111.009487][ T8537] __nla_validate_parse: 5 callbacks suppressed [ 111.009498][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 111.097752][ T8546] xt_HMARK: spi-set and port-set can't be combined [ 111.192311][ T8550] binder: 8543:8550 ioctl c0306201 200000000640 returned -22 [ 111.373358][ T5742] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 111.456707][ T8556] IPVS: Unknown mcast interface: syzkaller0 [ 111.543381][ T5742] usb 7-1: Using ep0 maxpacket: 32 [ 111.548502][ T5742] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.551161][ T5742] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.553962][ T5742] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.556766][ T5742] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.559868][ T5742] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.562899][ T5742] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.567021][ T5742] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.569999][ T5742] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.574364][ T5742] usb 7-1: config 0 descriptor?? [ 111.782339][ T5742] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 111.787589][ T5742] usb 7-1: USB disconnect, device number 9 [ 111.791490][ T5742] usblp0: removed [ 111.949225][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 112.233755][ T1343] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 112.393996][ T1343] usb 7-1: Using ep0 maxpacket: 32 [ 112.398507][ T1343] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.401800][ T1343] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.405677][ T1343] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.409310][ T1343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.413065][ T1343] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.416407][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 112.417682][ T1343] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.426439][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 112.426791][ T1343] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.429679][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 112.432759][ T1343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.436148][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 112.440803][ T1343] usb 7-1: config 0 descriptor?? [ 112.650664][ T1343] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.749873][ T8604] overlayfs: upper fs does not support tmpfile. [ 113.205611][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 113.205622][ T40] audit: type=1400 audit(113.081:33787): avc: denied { create } for pid=8547 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 113.325716][ T8618] netlink: 'syz.1.744': attribute type 25 has an invalid length. [ 113.570568][ T8641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.610303][ T8641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.851064][ T40] audit: type=1400 audit(113.721:33788): avc: denied { bind } for pid=8652 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.861249][ T40] audit: type=1400 audit(113.721:33789): avc: denied { listen } for pid=8652 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.868172][ T40] audit: type=1400 audit(113.721:33790): avc: denied { accept } for pid=8652 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.903642][ T40] audit: type=1400 audit(113.781:33791): avc: denied { call } for pid=8652 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.260691][ T40] audit: type=1400 audit(114.131:33792): avc: denied { read write } for pid=8663 comm="syz.0.755" name="lp0" dev="devtmpfs" ino=3218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 114.269268][ T40] audit: type=1400 audit(114.131:33793): avc: denied { open } for pid=8663 comm="syz.0.755" path="/dev/usb/lp0" dev="devtmpfs" ino=3218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 114.273815][ T1343] usb 7-1: USB disconnect, device number 10 [ 114.282712][ T1343] usblp0: removed [ 114.460799][ T8672] netlink: 168 bytes leftover after parsing attributes in process `syz.2.758'. [ 114.512338][ T40] audit: type=1400 audit(114.381:33794): avc: denied { execute } for pid=8679 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 114.519578][ T40] audit: type=1400 audit(114.381:33795): avc: denied { execute_no_trans } for pid=8679 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 114.649443][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.653578][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.656811][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.660735][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.664121][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.670486][ T40] audit: type=1400 audit(114.541:33796): avc: denied { mounton } for pid=8681 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 114.784649][ T8681] chnl_net:caif_netlink_parms(): no params data found [ 114.889681][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.891740][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.894064][ T8681] bridge_slave_0: entered allmulticast mode [ 114.896633][ T8681] bridge_slave_0: entered promiscuous mode [ 114.901190][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.903620][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.906009][ T8681] bridge_slave_1: entered allmulticast mode [ 114.908901][ T8681] bridge_slave_1: entered promiscuous mode [ 114.964452][ T8681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.977252][ T8681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.024763][ T8681] team0: Port device team_slave_0 added [ 115.028743][ T8681] team0: Port device team_slave_1 added [ 115.059316][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.061317][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.068848][ T8681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.072900][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.076507][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.085191][ T8681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.130102][ T8681] hsr_slave_0: entered promiscuous mode [ 115.133021][ T8681] hsr_slave_1: entered promiscuous mode [ 115.135342][ T8681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.138581][ T8681] Cannot create hsr debugfs directory [ 115.261460][ T8681] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.266517][ T8681] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.270785][ T8681] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.274718][ T8681] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.288858][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.290969][ T8681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.294218][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.296263][ T8681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.326118][ T8681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.337003][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.340711][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.357940][ T8681] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.373974][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.376447][ T6659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.382469][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.384858][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.527888][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.677180][ T8681] veth0_vlan: entered promiscuous mode [ 115.684719][ T8681] veth1_vlan: entered promiscuous mode [ 115.702777][ T8681] veth0_macvtap: entered promiscuous mode [ 115.711243][ T8681] veth1_macvtap: entered promiscuous mode [ 115.721842][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.725850][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.728882][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.732161][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.735996][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.739351][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.742443][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.745880][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.750326][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.760617][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.765990][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.770261][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.775153][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.779246][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.783721][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.788799][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.795764][ T8681] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.798618][ T8681] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.801809][ T8681] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.805387][ T8681] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.843925][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.844756][ T8735] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 115.846559][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.863364][ T6661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.866000][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.868957][ T8739] fuse: Bad value for 'fd' [ 115.945294][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 115.948992][ T8752] netlink: 'syz.2.779': attribute type 7 has an invalid length. [ 115.951495][ T8752] netlink: 'syz.2.779': attribute type 8 has an invalid length. [ 115.955441][ T8754] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 115.955509][ T8754] ref_ctr increment failed for inode: 0x12 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880381f1e00 [ 115.963170][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 115.969241][ T8752] syz_tun: entered promiscuous mode [ 115.971795][ T8752] syz_tun: left promiscuous mode [ 116.154357][ T8762] syz.4.782: attempt to access beyond end of device [ 116.154357][ T8762] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 116.161037][ T8762] FAT-fs (nbd4): unable to read boot sector [ 116.173457][ T834] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 116.231602][ T8769] veth1_to_batadv: entered promiscuous mode [ 116.234679][ T8769] macsec1: entered promiscuous mode [ 116.263372][ T8771] 9pnet_fd: Insufficient options for proto=fd [ 116.301490][ T8776] IPv6: Can't replace route, no match found [ 116.303806][ T834] usb 6-1: device descriptor read/64, error -71 [ 116.353396][ T5742] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 116.447699][ T8779] netlink: 108 bytes leftover after parsing attributes in process `syz.4.787'. [ 116.454420][ T8779] netlink: 108 bytes leftover after parsing attributes in process `syz.4.787'. [ 116.457805][ T8779] netlink: 84 bytes leftover after parsing attributes in process `syz.4.787'. [ 116.516837][ T8780] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 116.520065][ T8780] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 116.523208][ T8780] netlink: 610 bytes leftover after parsing attributes in process `syz.4.787'. [ 116.528289][ T5742] usb 7-1: not running at top speed; connect to a high speed hub [ 116.532583][ T5742] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 116.536901][ T5742] usb 7-1: config 1 interface 0 has no altsetting 0 [ 116.541301][ T5742] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.545179][ T5742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.548401][ T5742] usb 7-1: Product: 퉜ꉲ恱ʨὈꞚ恅 [ 116.550763][ T5742] usb 7-1: Manufacturer: ࠓ [ 116.552651][ T5742] usb 7-1: SerialNumber: ࠬ [ 116.557790][ T8757] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.563622][ T834] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.693383][ T834] usb 6-1: device descriptor read/64, error -71 [ 116.753723][ T5939] Bluetooth: hci4: command tx timeout [ 116.803617][ T834] usb usb6-port1: attempt power cycle [ 117.173394][ T834] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 117.194091][ T834] usb 6-1: device descriptor read/8, error -71 [ 117.361134][ T8785] netlink: 68 bytes leftover after parsing attributes in process `syz.4.789'. [ 117.389857][ T8785] fuseblk: Unknown parameter '00000000000000000013' [ 117.395828][ T8785] netlink: 52 bytes leftover after parsing attributes in process `syz.4.789'. [ 117.454084][ T834] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 117.474638][ T834] usb 6-1: device descriptor read/8, error -71 [ 117.584385][ T834] usb usb6-port1: unable to enumerate USB device [ 117.721483][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 118.236228][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 118.236244][ T40] audit: type=1326 audit(118.101:33810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.249047][ T40] audit: type=1326 audit(118.101:33811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.263020][ T40] audit: type=1326 audit(118.101:33812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.280083][ T40] audit: type=1326 audit(118.101:33813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.289984][ T40] audit: type=1326 audit(118.101:33814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.297544][ T40] audit: type=1326 audit(118.101:33815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.307027][ T40] audit: type=1326 audit(118.101:33816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.316138][ T40] audit: type=1326 audit(118.101:33817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.325441][ T40] audit: type=1326 audit(118.101:33818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.332773][ T40] audit: type=1326 audit(118.101:33819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.0.793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8158e969 code=0x50000 [ 118.833400][ T5939] Bluetooth: hci4: command tx timeout [ 119.076147][ T5742] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 119.088667][ T5742] usb 7-1: USB disconnect, device number 11 [ 119.498084][ T8818] overlay: Bad value for 'workdir' [ 119.513374][ T5742] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 119.664538][ T5742] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 119.667374][ T5742] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.671074][ T5742] usb 7-1: config 0 descriptor?? [ 119.675895][ T5742] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 119.678728][ T5742] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 119.793447][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 119.833379][ T65] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 119.874331][ T8808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8808 comm=syz.2.797 [ 119.878771][ T8808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8808 comm=syz.2.797 [ 119.884953][ T1343] usb 7-1: USB disconnect, device number 12 [ 119.984524][ T65] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.989444][ T65] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 119.994240][ T65] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 28782, setting to 64 [ 120.003350][ T65] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.009214][ T65] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 120.012116][ T65] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.014841][ T65] usb 9-1: Product: syz [ 120.016266][ T65] usb 9-1: Manufacturer: syz [ 120.017849][ T65] usb 9-1: SerialNumber: syz [ 120.020839][ T65] usb 9-1: config 0 descriptor?? [ 120.023084][ T8820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 120.030204][ T65] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input10 [ 120.285020][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 120.311094][ T8821] qnx4: no qnx4 filesystem (no root dir). [ 120.325720][ T8823] mkiss: ax0: crc mode is auto. [ 120.367007][ T8821] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 120.374888][ T1343] usb 9-1: USB disconnect, device number 2 [ 120.386724][ T8824] xt_hashlimit: size too large, truncated to 1048576 [ 120.554965][ T8831] support for cryptoloop has been removed. Use dm-crypt instead. [ 120.913616][ T5939] Bluetooth: hci4: command tx timeout [ 121.012659][ T8864] netlink: 814 bytes leftover after parsing attributes in process `syz.4.813'. [ 121.014622][ T8841] syz.2.806: attempt to access beyond end of device [ 121.014622][ T8841] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 121.019570][ T8841] MINIX-fs: unable to read superblock [ 121.161673][ T8876] overlayfs: missing 'lowerdir' [ 121.455637][ T8888] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 121.476771][ T8903] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.825'. [ 121.517190][ T8910] bpf: Bad value for 'mode' [ 121.618708][ T8929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.834'. [ 121.622402][ T8929] netlink: 830 bytes leftover after parsing attributes in process `syz.4.834'. [ 121.663143][ T8937] ptrace attach of "/syz-executor exec"[5933] was attempted by "/syz-executor exec"[8937] [ 121.699744][ T8944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=8944 comm=syz.0.837 [ 121.736935][ T8947] xt_hashlimit: size too large, truncated to 1048576 [ 121.761386][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 121.964241][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 121.971391][ T8966] vlan2: entered promiscuous mode [ 121.973080][ T8966] bridge0: entered promiscuous mode [ 121.976279][ T8966] vlan2: entered allmulticast mode [ 121.977934][ T8966] bridge0: entered allmulticast mode [ 122.081223][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 122.088025][ T8993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.147805][ T8996] netlink: 64 bytes leftover after parsing attributes in process `syz.0.851'. [ 122.368618][ T9001] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 122.682885][ T5945] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 122.716325][ T9010] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 122.828591][ T8975] syz.1.847 (8975): drop_caches: 2 [ 122.983437][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.985473][ T5945] Bluetooth: hci4: command tx timeout [ 122.987187][ T67] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 123.155973][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 123.159066][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 123.216044][ T9036] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 123.261290][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 123.429215][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 123.433208][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.436720][ T10] usb 7-1: config 0 has no interface number 0 [ 123.438817][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.442235][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.453331][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.457678][ T10] usb 7-1: config 0 descriptor?? [ 123.469347][ T10] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 123.700489][ T40] kauditd_printk_skb: 43738 callbacks suppressed [ 123.700501][ T40] audit: type=1400 audit(123.571:77558): avc: denied { map } for pid=9060 comm="syz.1.873" path="pipe:[6375]" dev="pipefs" ino=6375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 123.817098][ T9065] binder: 9064:9065 ioctl c0306201 2000000003c0 returned -14 [ 123.914050][ T40] audit: type=1400 audit(123.791:77559): avc: denied { ioctl } for pid=9074 comm="syz.1.877" path="socket:[26279]" dev="sockfs" ino=26279 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.159124][ T6661] Bluetooth: hci5: Frame reassembly failed (-84) [ 124.246067][ T9094] omfs: Invalid superblock (0) [ 124.444914][ T9105] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 124.480261][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 124.608560][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.715282][ T9126] random: crng reseeded on system resumption [ 124.752412][ T10] usb 7-1: USB disconnect, device number 13 [ 124.913810][ T9137] can0: slcan on ptm1. [ 125.154635][ T9140] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 125.233454][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 125.403457][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 125.408203][ T29] usb 9-1: config 0 has no interfaces? [ 125.413584][ T29] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 125.417045][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.420672][ T29] usb 9-1: Product: syz [ 125.422373][ T29] usb 9-1: Manufacturer: syz [ 125.424513][ T29] usb 9-1: SerialNumber: syz [ 125.428614][ T29] usb 9-1: config 0 descriptor?? [ 125.478533][ T9167] openvswitch: netlink: Duplicate or invalid key (type 0). [ 125.480962][ T9167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.595194][ T9171] NILFS (nullb0): couldn't find nilfs on the device [ 125.599297][ T9173] NILFS (nullb0): couldn't find nilfs on the device [ 125.638105][ T29] usb 9-1: USB disconnect, device number 3 [ 125.710458][ T9184] Illegal XDP return value 4294967294 on prog (id 218) dev N/A, expect packet loss! [ 125.725857][ T9135] can0 (unregistered): slcan off ptm1. [ 125.919958][ T9203] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 125.940693][ T9203] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 125.945271][ T9203] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.058946][ T834] IPVS: starting estimator thread 0... [ 126.067507][ T9210] pim6reg1: entered promiscuous mode [ 126.069270][ T9210] pim6reg1: entered allmulticast mode [ 126.072707][ T9213] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 126.173365][ T9211] IPVS: using max 42 ests per chain, 100800 per kthread [ 126.183410][ T67] Bluetooth: hci5: command 0x1003 tx timeout [ 126.184534][ T5939] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 126.217227][ T40] audit: type=1400 audit(126.091:77560): avc: denied { getopt } for pid=9217 comm="syz.0.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.287100][ T9220] bridge1: entered promiscuous mode [ 126.294439][ T9222] openvswitch: netlink: Key 19 has unexpected len 0 expected 4 [ 126.329365][ T9224] netlink: 'syz.1.917': attribute type 2 has an invalid length. [ 126.331773][ T9224] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 126.435622][ T9243] tipc: Started in network mode [ 126.436002][ T40] audit: type=1400 audit(126.311:77561): avc: denied { nlmsg_tty_audit } for pid=9240 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 126.437205][ T9243] tipc: Node identity 4, cluster identity 4711 [ 126.447776][ T9243] tipc: Node number set to 4 [ 126.457907][ T9243] vlan3: entered promiscuous mode [ 126.459650][ T9243] vlan3: entered allmulticast mode [ 126.461292][ T9243] hsr_slave_1: entered allmulticast mode [ 126.526096][ T40] audit: type=1326 audit(126.401:77562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 126.535767][ T40] audit: type=1326 audit(126.401:77563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 126.546789][ T40] audit: type=1326 audit(126.401:77564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 126.555675][ T40] audit: type=1326 audit(126.401:77565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 126.563534][ T40] audit: type=1326 audit(126.401:77566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 126.570448][ T40] audit: type=1326 audit(126.401:77567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 126.628253][ T9257] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2507232104 (160462854656 ns) > initial count (93482674304 ns). Using initial count to start timer. [ 126.995631][ T9283] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 127.016029][ T9290] netlink: 'syz.4.937': attribute type 29 has an invalid length. [ 127.019966][ T9291] netlink: 'syz.4.937': attribute type 29 has an invalid length. [ 127.023134][ T9291] __nla_validate_parse: 7 callbacks suppressed [ 127.023143][ T9291] netlink: 500 bytes leftover after parsing attributes in process `syz.4.937'. [ 127.147154][ T9287] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 127.676691][ T9305] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 127.790554][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 128.037874][ T9328] [U] 1WT`8H$09\ [ 128.039568][ T9328] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 128.063608][ T9328] IPVS: Unknown mcast interface: vcan0 [ 128.075720][ T9327] [U]  [ 128.155705][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.954'. [ 128.265277][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 128.289846][ T9348] ip_vti0: entered promiscuous mode [ 128.291515][ T9348] ip_vti0: entered allmulticast mode [ 128.304771][ T9348] netlink: 'syz.0.955': attribute type 13 has an invalid length. [ 128.318543][ T9348] gretap0: refused to change device tx_queue_len [ 128.320561][ T9348] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 128.403425][ T834] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 128.573647][ T834] usb 9-1: Using ep0 maxpacket: 8 [ 128.580439][ T834] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.583987][ T834] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.587881][ T834] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.591119][ T834] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.604123][ T834] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.607399][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.703441][ T40] kauditd_printk_skb: 18657 callbacks suppressed [ 128.703456][ T40] audit: type=1326 audit(128.571:96225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 128.715605][ T40] audit: type=1326 audit(128.581:96226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 128.736111][ T40] audit: type=1326 audit(128.581:96227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 128.739099][ T9369] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.746368][ T40] audit: type=1326 audit(128.581:96228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 128.748931][ T9369] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 128.754352][ T40] audit: type=1326 audit(128.591:96229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 128.754378][ T40] audit: type=1326 audit(128.591:96230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 128.754399][ T40] audit: type=1326 audit(128.591:96231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 128.754420][ T40] audit: type=1326 audit(128.591:96232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.2.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c1f8e969 code=0x50000 [ 128.829978][ T834] usb 9-1: GET_CAPABILITIES returned 0 [ 128.832069][ T834] usbtmc 9-1:16.0: can't read capabilities [ 129.034253][ T29] usb 9-1: USB disconnect, device number 4 [ 129.615990][ T9390] pimreg: entered allmulticast mode [ 129.623735][ T9392] pimreg: left allmulticast mode [ 129.745354][ T9395] XFS (nbd4): no-recovery mounts must be read-only. [ 129.841814][ T9386] netlink: 220 bytes leftover after parsing attributes in process `syz.2.967'. [ 129.962752][ T9414] netlink: 96 bytes leftover after parsing attributes in process `syz.1.974'. [ 130.017016][ T9419] tmpfs: Unknown parameter 'usrquota0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.017016][ T9419] 0 [ 130.082213][ T9429] netlink: 'syz.1.980': attribute type 8 has an invalid length. [ 130.086752][ T9429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.980'. [ 130.120273][ T9431] SELinux: ebitmap start bit (7) is not a multiple of the map unit size (64) [ 130.123058][ T9431] SELinux: failed to load policy [ 130.140137][ T9428] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 130.184476][ T9445] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 130.209780][ T9450] befs: (nullb0): No write support. Marking filesystem read-only [ 130.212797][ T9450] befs: (nullb0): invalid magic header [ 130.218285][ T34] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 130.218954][ T9450] netlink: 'syz.0.986': attribute type 7 has an invalid length. [ 130.223766][ T9450] netlink: 'syz.0.986': attribute type 8 has an invalid length. [ 130.255072][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 130.261929][ T9456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.298592][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'. [ 130.395974][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 64 [ 130.400094][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.406888][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.409610][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.551605][ T9493] No source specified [ 130.619030][ T34] usb 9-1: usb_control_msg returned -32 [ 130.620846][ T34] usbtmc 9-1:16.0: can't read capabilities [ 130.626167][ T34] usb 9-1: USB disconnect, device number 5 [ 130.653379][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 130.660625][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.664213][ T9497] binder: BINDER_SET_CONTEXT_MGR already set [ 130.664237][ T9497] binder: 9495:9497 ioctl 4018620d 200000000040 returned -16 [ 130.664297][ T9497] binder: BINDER_SET_CONTEXT_MGR already set [ 130.664302][ T9497] binder: 9495:9497 ioctl 4018620d 200000000040 returned -16 [ 130.664341][ T9497] binder: BINDER_SET_CONTEXT_MGR already set [ 130.664346][ T9497] binder: 9495:9497 ioctl 4018620d 200000000040 returned -16 [ 130.664384][ T9497] binder: BINDER_SET_CONTEXT_MGR already set [ 130.666539][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.668558][ T9497] binder: 9495:9497 ioctl 4018620d 200000000040 returned -16 [ 130.670338][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.673146][ T9497] binder: BINDER_SET_CONTEXT_MGR already set [ 130.676102][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.679778][ T9497] binder: 9495:9497 ioctl 4018620d 200000000040 returned -16 [ 130.683157][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.686001][ T9497] binder: BINDER_SET_CONTEXT_MGR already set [ 130.688729][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.690505][ T9497] binder: 9495:9497 ioctl 4018620d 200000000040 returned -16 [ 130.693981][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.696837][ T9497] binder: BINDER_SET_CONTEXT_MGR already set [ 130.699261][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.701697][ T9497] binder: 9495:9497 ioctl 4018620d 200000000040 returned -16 [ 130.704869][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.707154][ T9497] binder: BINDER_SET_CONTEXT_MGR already set [ 130.710182][ T9496] binder_alloc: binder_alloc_mmap_handler: 9495 200000ffd000-200001000000 already mapped failed -16 [ 130.711984][ T9497] binder: 9495:9497 ioctl 4018620d 200000000040 returned -16 [ 130.772879][ T9501] tmpfs: Unknown parameter 'iv2?^Od' [ 130.826123][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 130.828766][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.831169][ T9] usb 7-1: Product: syz [ 130.832405][ T9] usb 7-1: Manufacturer: syz [ 130.833909][ T9] usb 7-1: SerialNumber: syz [ 130.838806][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 130.859390][ T834] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.072872][ T9] usb 7-1: USB disconnect, device number 14 [ 131.483957][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.487744][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.500198][ T9531] binder: 9530:9531 ioctl c0306201 200000000640 returned -22 [ 131.535340][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 131.538857][ T9535] netlink: 'syz.0.1010': attribute type 13 has an invalid length. [ 131.587231][ T9539] kernel read not supported for file /policy (pid: 9539 comm: syz.4.1013) [ 131.673039][ T9545] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 131.755975][ C0] hrtimer: interrupt took 100178 ns [ 131.933502][ T1343] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.954778][ T834] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 131.957209][ T834] ath9k_htc: Failed to initialize the device [ 131.961345][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 132.073442][ T1343] usb 5-1: device descriptor read/64, error -71 [ 132.313358][ T1343] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.443360][ T1343] usb 5-1: device descriptor read/64, error -71 [ 132.564892][ T1343] usb usb5-port1: attempt power cycle [ 132.591405][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.734174][ T9578] __nla_validate_parse: 2 callbacks suppressed [ 132.734191][ T9578] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1026'. [ 132.847629][ T9588] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 132.924398][ T1343] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.939652][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 132.973896][ T1343] usb 5-1: device descriptor read/8, error -71 [ 133.226340][ T1343] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.245922][ T1343] usb 5-1: device descriptor read/8, error -71 [ 133.303240][ T9613] netlink: 'syz.1.1034': attribute type 32 has an invalid length. [ 133.317858][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 133.329870][ T9619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1035'. [ 133.354160][ T1343] usb usb5-port1: unable to enumerate USB device [ 134.052992][ T9609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.056594][ T9609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.058532][ T9609] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.060519][ T9609] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.073376][ T9609] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.115470][ T9627] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 134.275594][ T9632] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1040'. [ 134.286789][ T9634] macvlan2: entered promiscuous mode [ 134.288515][ T9634] bridge0: entered promiscuous mode [ 134.290678][ T9634] bridge0: port 3(macvlan2) entered blocking state [ 134.292787][ T9634] bridge0: port 3(macvlan2) entered disabled state [ 134.295468][ T9634] macvlan2: entered allmulticast mode [ 134.297218][ T9634] bridge0: entered allmulticast mode [ 134.299841][ T9634] macvlan2: left allmulticast mode [ 134.301479][ T9634] bridge0: left allmulticast mode [ 134.304649][ T9634] bridge0: left promiscuous mode [ 134.320094][ T9636] pim6reg: entered allmulticast mode [ 134.456970][ T40] kauditd_printk_skb: 8745 callbacks suppressed [ 134.456981][ T40] audit: type=1800 audit(134.331:104977): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1046" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 134.602661][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'. [ 134.659292][ T9673] xt_cgroup: invalid path, errno=-2 [ 134.684362][ T40] audit: type=1400 audit(134.602:104978): avc: denied { mounton } for pid=9681 comm="syz.1.1056" path="/296/file0/file0" dev="9p" ino=35913920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.693884][ T40] audit: type=1400 audit(134.602:104979): avc: denied { mount } for pid=9681 comm="syz.1.1056" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 134.810211][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 134.832863][ T9699] netlink: 'syz.2.1060': attribute type 10 has an invalid length. [ 134.843038][ T9699] hsr_slave_0: left promiscuous mode [ 134.881918][ T40] audit: type=1400 audit(134.792:104980): avc: denied { setattr } for pid=9701 comm="syz.0.1061" name="/" dev="9p" ino=35913825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.944191][ T9694] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 134.989101][ T9712] tipc: Started in network mode [ 134.991227][ T9712] tipc: Node identity c2b89fffdd9, cluster identity 4711 [ 134.994393][ T9712] tipc: Enabled bearer , priority 0 [ 135.000622][ T9711] tipc: Disabling bearer [ 135.313415][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.383337][ T835] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 135.543382][ T835] usb 5-1: Invalid ep0 maxpacket: 32 [ 135.675010][ T40] audit: type=1400 audit(135.592:104981): avc: denied { mounton } for pid=9735 comm="syz.4.1072" path="/86/file1/file0" dev="autofs" ino=30368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 135.683690][ T835] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 135.833405][ T835] usb 5-1: Invalid ep0 maxpacket: 32 [ 135.835610][ T835] usb usb5-port1: attempt power cycle [ 136.113409][ T67] Bluetooth: hci4: command 0x0c1a tx timeout [ 136.113438][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.173508][ T835] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 136.194553][ T835] usb 5-1: Invalid ep0 maxpacket: 32 [ 136.257245][ T40] audit: type=1400 audit(136.172:104982): avc: denied { map } for pid=9754 comm="syz.1.1080" path="/305/file0/blkio.bfq.io_merged_recursive" dev="9p" ino=35913958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.325766][ T835] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 136.344238][ T835] usb 5-1: Invalid ep0 maxpacket: 32 [ 136.346807][ T835] usb usb5-port1: unable to enumerate USB device [ 136.473354][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 136.582538][ T40] audit: type=1326 audit(136.492:104983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.1.1084" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c32f8e969 code=0x0 [ 136.606257][ T9] usb 7-1: device descriptor read/64, error -71 [ 136.853360][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 136.983528][ T9] usb 7-1: device descriptor read/64, error -71 [ 137.093673][ T9] usb usb7-port1: attempt power cycle [ 137.442103][ T9774] can0: slcan on ptm0. [ 137.443402][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 137.474193][ T9] usb 7-1: device descriptor read/8, error -71 [ 137.494682][ T9773] can0 (unregistered): slcan off ptm0. [ 137.713489][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 137.734047][ T9] usb 7-1: device descriptor read/8, error -71 [ 137.843561][ T9] usb usb7-port1: unable to enumerate USB device [ 138.023453][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 138.175923][ T29] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 138.179447][ T29] usb 6-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.183678][ T29] usb 6-1: config 1 interface 0 has no altsetting 0 [ 138.187320][ T29] usb 6-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 138.190200][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.192694][ T29] usb 6-1: Product: syz [ 138.194439][ T5939] Bluetooth: hci4: command 0x0c1a tx timeout [ 138.194792][ T29] usb 6-1: Manufacturer: syz [ 138.199730][ T29] usb 6-1: SerialNumber: syz [ 138.419072][ T9778] Invalid ELF header magic: != ELF [ 138.434583][ T29] usbhid 6-1:1.0: can't add hid device: -71 [ 138.436609][ T29] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 138.440378][ T29] usb 6-1: USB disconnect, device number 9 [ 138.981836][ T9784] ipvlan2: entered allmulticast mode [ 138.984491][ T9784] macvlan0: entered allmulticast mode [ 138.986695][ T9784] veth1_vlan: entered allmulticast mode [ 139.020720][ T40] audit: type=1400 audit(138.932:104984): avc: denied { setopt } for pid=9787 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.103302][ T40] audit: type=1400 audit(139.012:104985): avc: denied { listen } for pid=9789 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 139.109233][ T40] audit: type=1400 audit(139.012:104986): avc: denied { accept } for pid=9789 comm="syz.0.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 139.200074][ T9802] ERROR: device name not specified. [ 139.210762][ T9807] netlink: 'syz.0.1091': attribute type 11 has an invalid length. [ 139.213613][ T9807] netlink: 'syz.0.1091': attribute type 11 has an invalid length. [ 139.216079][ T9807] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1091'. [ 139.263423][ T835] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 139.424679][ T835] usb 6-1: Using ep0 maxpacket: 8 [ 139.428560][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.432644][ T835] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.436133][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.442283][ T835] usb 6-1: config 0 descriptor?? [ 139.596466][ T6659] tipc: Subscription rejected, illegal request [ 139.651840][ T835] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 139.942048][ T9845] usb usb8: usbfs: process 9845 (syz.0.1100) did not claim interface 0 before use [ 139.947269][ T9845] virtio-fs: tag not found [ 139.987254][ T9847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1101'. [ 140.065077][ T9788] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 140.071454][ T34] usb 6-1: USB disconnect, device number 10 [ 140.073921][ T9787] delete_channel: no stack [ 140.273566][ T5939] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.586954][ T9863] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 140.589840][ T9863] overlayfs: conflicting options: nfs_export=on,index=off [ 140.933452][ T835] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 141.049867][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 141.049881][ T40] audit: type=1400 audit(140.962:104988): avc: denied { write } for pid=9886 comm="syz.0.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 141.087706][ T835] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.090698][ T835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.093214][ T835] usb 6-1: Product: syz [ 141.094948][ T835] usb 6-1: Manufacturer: syz [ 141.096423][ T835] usb 6-1: SerialNumber: syz [ 141.106147][ T835] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 141.106795][ T9893] Bluetooth: hci5: Frame reassembly failed (-84) [ 141.111028][ T6662] Bluetooth: hci5: Frame reassembly failed (-84) [ 141.117703][ T5975] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.366258][ T835] usb 6-1: USB disconnect, device number 11 [ 141.909194][ T9899] ALSA: mixer_oss: invalid index 40000 [ 141.913445][ T9899] overlayfs: failed to resolve './file1': -2 [ 141.926104][ T40] audit: type=1400 audit(141.842:104989): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.183880][ T5975] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 142.186185][ T5975] ath9k_htc: Failed to initialize the device [ 142.189763][ T835] usb 6-1: ath9k_htc: USB layer deinitialized [ 142.483498][ T835] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 142.635422][ T835] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 142.638265][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.642045][ T835] usb 6-1: config 0 descriptor?? [ 142.647564][ T835] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 142.650766][ T835] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 142.989980][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1120'. [ 142.992858][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1120'. [ 142.997120][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1120'. [ 142.999962][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1120'. [ 143.143494][ T5939] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 143.143501][ T67] Bluetooth: hci5: command 0x1003 tx timeout [ 143.292879][ T9916] netlink: 'syz.2.1123': attribute type 10 has an invalid length. [ 143.300865][ T9916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.306462][ T9916] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 143.342335][ T9918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1124'. [ 143.347040][ T9918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1124'. [ 143.674484][ T9929] 9pnet_rdma: rdma_create_trans (9929): problem binding to privport: 13 [ 143.715107][ T40] audit: type=1400 audit(143.632:104990): avc: denied { setattr } for pid=9930 comm="syz.2.1128" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.716532][ T9931] fuse: Bad value for 'fd' [ 143.727759][ T9931] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 144.144613][ T9948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1133'. [ 144.344900][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 144.372465][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 144.378698][ T9960] /dev/sg0: Can't lookup blockdev [ 144.411574][ T9962] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 144.414232][ T9962] netlink: 'syz.0.1139': attribute type 2 has an invalid length. [ 144.416696][ T9962] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.1139'. [ 144.418621][ T5939] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 144.424749][ T9962] input: syz1 as /devices/virtual/input/input13 [ 144.474108][ T40] audit: type=1400 audit(144.392:104991): avc: denied { read } for pid=9961 comm="syz.0.1139" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.483464][ T40] audit: type=1400 audit(144.402:104992): avc: denied { create } for pid=9967 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.489711][ T40] audit: type=1400 audit(144.402:104993): avc: denied { write } for pid=9967 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.496171][ T40] audit: type=1400 audit(144.402:104994): avc: denied { read } for pid=9967 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.502348][ T40] audit: type=1400 audit(144.402:104995): avc: denied { ioctl } for pid=9967 comm="syz.2.1141" path="socket:[33021]" dev="sockfs" ino=33021 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.531672][ T40] audit: type=1400 audit(144.442:104996): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.545128][ T40] audit: type=1400 audit(144.442:104997): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.619159][ T9987] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 144.665798][ T9995] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1150'. [ 144.670114][ T9995] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1150'. [ 144.814545][T10009] xt_ecn: cannot match TCP bits for non-tcp packets [ 144.840102][T10011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10011 comm=syz.2.1155 [ 144.931962][ T5939] Bluetooth: hci2: unexpected event for opcode 0x080e [ 144.982507][T10025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1159'. [ 144.985455][T10025] netlink: 'syz.2.1159': attribute type 7 has an invalid length. [ 144.987816][T10025] netlink: 'syz.2.1159': attribute type 8 has an invalid length. [ 144.990273][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 144.996677][T10025] ip6gretap0: entered promiscuous mode [ 144.999702][T10025] gretap0: entered promiscuous mode [ 145.004995][T10025] ip6t_srh: unknown srh match flags B153 [ 145.187713][ T5993] usb 6-1: USB disconnect, device number 12 [ 145.285301][T10042] lo speed is unknown, defaulting to 1000 [ 145.287365][T10042] lo speed is unknown, defaulting to 1000 [ 145.290555][T10042] lo speed is unknown, defaulting to 1000 [ 145.308094][T10042] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.314904][T10042] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 145.322131][T10046] sg_write: process 963 (syz.1.1163) changed security contexts after opening file descriptor, this is not allowed. [ 145.346612][T10042] lo speed is unknown, defaulting to 1000 [ 145.355427][T10042] lo speed is unknown, defaulting to 1000 [ 145.358418][T10042] lo speed is unknown, defaulting to 1000 [ 145.364279][T10042] lo speed is unknown, defaulting to 1000 [ 145.367301][T10042] lo speed is unknown, defaulting to 1000 [ 145.394467][T10050] input: syz1 as /devices/virtual/input/input14 [ 145.416973][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 145.470274][T10054] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.526392][T10060] xt_hashlimit: size too large, truncated to 1048576 [ 145.597065][T10064] o2cb: This node has not been configured. [ 145.599379][T10064] o2cb: Cluster check failed. Fix errors before retrying. [ 145.603492][T10064] (syz.0.1173,10064,3):user_dlm_register:674 ERROR: status = -22 [ 145.606004][T10064] (syz.0.1173,10064,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 145.899754][T10090] netlink: 'syz.2.1180': attribute type 11 has an invalid length. [ 145.904565][T10090] netlink: 'syz.2.1180': attribute type 29 has an invalid length. [ 145.931480][T10094] netlink: 'syz.2.1181': attribute type 4 has an invalid length. [ 145.934533][T10094] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1181'. [ 145.941770][T10094] : renamed from bond0 (while UP) [ 145.972397][ T5939] Bluetooth: hci2: unexpected event for opcode 0x0406 [ 145.998594][T10098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.047817][T10092] cdrom: dropping to single frame dma [ 146.143966][T10111] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1186'. [ 146.156959][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 146.156970][ T40] audit: type=1400 audit(146.072:105098): avc: denied { execmem } for pid=10112 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.210949][ T40] audit: type=1400 audit(146.122:105099): avc: denied { setopt } for pid=10112 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.219485][T10102] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 146.256910][T10113] tipc: Cannot configure node identity twice [ 146.260326][ T40] audit: type=1400 audit(146.172:105100): avc: denied { write } for pid=10112 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.273684][ T40] audit: type=1400 audit(146.192:105101): avc: denied { write } for pid=10130 comm="syz.2.1192" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 146.283235][ T40] audit: type=1400 audit(146.192:105102): avc: denied { unlink } for pid=10133 comm="syz.0.1193" name="#2f" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 146.287775][T10134] overlay: Unknown parameter 'euid' [ 146.290129][ T40] audit: type=1400 audit(146.202:105103): avc: denied { mount } for pid=10133 comm="syz.0.1193" name="/" dev="overlay" ino=1764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 146.316695][ T40] audit: type=1400 audit(146.232:105104): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 146.322652][ T40] audit: type=1400 audit(146.232:105105): avc: denied { execute_no_trans } for pid=10137 comm="syz.2.1194" path="/333/file1" dev="tmpfs" ino=1804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.343205][ T40] audit: type=1400 audit(146.232:105106): avc: denied { create } for pid=10137 comm="syz.2.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.349527][ T40] audit: type=1400 audit(146.232:105107): avc: denied { bind } for pid=10137 comm="syz.2.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.417114][T10153] netlink: 'syz.0.1198': attribute type 21 has an invalid length. [ 146.518246][T10161] qnx6: unable to set blocksize [ 146.583913][T10161] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 146.681433][T10178] tmpfs: Bad value for 'mpol' [ 147.052682][T10222] can0: slcan on ptm0. [ 147.060920][T10222] pimreg: entered allmulticast mode [ 147.071108][T10222] pimreg: left allmulticast mode [ 147.217265][T10221] can0 (unregistered): slcan off ptm0. [ 147.329206][T10268] Unsupported ieee802154 address type: 0 [ 147.373394][T10272] mkiss: ax0: crc mode is auto. [ 147.436709][T10276] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 147.439370][T10276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.704640][T10284] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.763142][ T5939] block nbd0: Receive control failed (result -32) [ 148.019732][T10313] random: crng reseeded on system resumption [ 148.125179][T10321] fuse: Bad value for 'fd' [ 148.173420][ T834] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 148.189032][T10304] netlink: 'syz.1.1242': attribute type 2 has an invalid length. [ 148.277236][T10323] netlink: 'syz.1.1246': attribute type 10 has an invalid length. [ 148.279707][T10323] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 148.283010][T10323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.683628][T10341] Cannot find del_set index 4 as target [ 148.946248][T10359] fuse: Unknown parameter 'fd}0x0000000000000008' [ 149.008538][T10362] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 149.197742][T10371] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 149.200533][T10371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.853190][T10373] lo speed is unknown, defaulting to 1000 [ 149.863571][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.963240][T10384] __nla_validate_parse: 7 callbacks suppressed [ 149.966397][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 149.969906][T10384] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1262'. [ 150.107005][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 150.126118][T10394] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.130108][T10394] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.134101][T10394] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.137686][T10394] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.144852][T10394] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.148574][T10394] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.151543][T10394] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.154486][T10394] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.308318][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 150.314626][T10399] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1266'. [ 150.319397][T10399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1266'. [ 150.483733][T10427] fuse: Bad value for 'fd' [ 150.608429][T10440] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 150.625901][T10440] xt_l2tp: v2 doesn't support IP mode [ 150.688423][T10445] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1280'. [ 150.802692][T10458] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 150.897544][T10461] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.1286'. [ 150.967365][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 150.970637][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 150.989115][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.995915][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.001303][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.005657][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.009386][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.031570][T10464] lo speed is unknown, defaulting to 1000 [ 151.120428][T10482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.123244][T10482] IPv6: NLM_F_CREATE should be set when creating new route [ 151.133794][T10464] chnl_net:caif_netlink_parms(): no params data found [ 151.171024][ T6651] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.206593][T10486] xt_ipcomp: unknown flags 12 [ 151.214436][T10487] ipvlan1: entered allmulticast mode [ 151.216367][T10487] veth0_to_team: entered allmulticast mode [ 151.267641][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.269928][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.272381][T10464] bridge_slave_0: entered allmulticast mode [ 151.275869][T10464] bridge_slave_0: entered promiscuous mode [ 151.280745][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 151.280755][ T40] audit: type=1400 audit(151.194:105206): avc: denied { listen } for pid=10491 comm="syz.2.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.283184][T10492] 9pnet_fd: p9_fd_create_unix (10492): problem connecting socket: ./file2: -2 [ 151.285122][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.285164][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.285235][T10464] bridge_slave_1: entered allmulticast mode [ 151.285986][T10464] bridge_slave_1: entered promiscuous mode [ 151.354280][ T6651] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.366196][T10464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.371128][T10464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.438141][ T6651] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.451678][T10464] team0: Port device team_slave_0 added [ 151.457816][T10464] team0: Port device team_slave_1 added [ 151.500523][T10464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.502716][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.510901][T10464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.529943][ T6651] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.533172][ T40] audit: type=1400 audit(151.444:105207): avc: denied { create } for pid=10509 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 151.540083][T10510] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 151.541173][ T40] audit: type=1400 audit(151.444:105208): avc: denied { write } for pid=10509 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 151.545341][T10464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.551778][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.554050][ T40] audit: type=1400 audit(151.454:105209): avc: denied { ioctl } for pid=10509 comm="syz.1.1301" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.561796][T10464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.617321][T10464] hsr_slave_0: entered promiscuous mode [ 151.619843][T10464] hsr_slave_1: entered promiscuous mode [ 151.621995][T10464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.624642][T10464] Cannot create hsr debugfs directory [ 151.689047][ T40] audit: type=1400 audit(151.604:105210): avc: denied { setopt } for pid=10514 comm="syz.1.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.722215][T10518] mkiss: ax0: crc mode is auto. [ 151.788463][ T6651] bridge_slave_1: left allmulticast mode [ 151.790567][ T6651] bridge_slave_1: left promiscuous mode [ 151.794448][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.799645][ T6651] bridge_slave_0: left allmulticast mode [ 151.801495][ T6651] bridge_slave_0: left promiscuous mode [ 151.806021][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.230749][ T6651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.237419][ T6651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.241135][ T6651] bond0 (unregistering): Released all slaves [ 152.247413][ T6651] bond1 (unregistering): Released all slaves [ 152.299263][ T40] audit: type=1400 audit(152.214:105211): avc: denied { setopt } for pid=10519 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.313454][T10464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.317689][T10464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.322537][T10464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.329876][T10464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.349840][T10523] fuse: Unknown parameter 'rmotmode' [ 152.398778][T10464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.402009][ T67] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 152.411840][ T40] audit: type=1400 audit(152.324:105212): avc: denied { read } for pid=10530 comm="syz.1.1305" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.418896][T10464] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.422742][ T40] audit: type=1400 audit(152.334:105213): avc: denied { open } for pid=10530 comm="syz.1.1305" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.433499][ T40] audit: type=1400 audit(152.334:105214): avc: denied { ioctl } for pid=10530 comm="syz.1.1305" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.505939][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.508293][ T6659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.515385][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.517685][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.526475][T10542] netlink: 'syz.1.1309': attribute type 10 has an invalid length. [ 152.534953][T10542] hsr_slave_0: left promiscuous mode [ 152.538129][T10542] hsr_slave_1: left promiscuous mode [ 152.689649][ T40] audit: type=1400 audit(152.604:105215): avc: denied { bind } for pid=10552 comm="syz.0.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.692737][T10553] binder: 10552:10553 ioctl c0306201 0 returned -14 [ 152.761865][ T6651] hsr_slave_0: left promiscuous mode [ 152.767861][ T6651] hsr_slave_1: left promiscuous mode [ 152.769916][ T6651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.772285][ T6651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.780472][ T6651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.783767][ T6651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.796112][T10560] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 152.823886][ T6651] veth1_to_batadv: left promiscuous mode [ 152.826461][ T6651] veth1_macvtap: left promiscuous mode [ 152.828285][ T6651] veth0_macvtap: left promiscuous mode [ 152.830065][ T6651] veth1_vlan: left promiscuous mode [ 152.831888][ T6651] veth0_vlan: left promiscuous mode [ 152.834855][T10570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.838532][T10570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.842206][T10570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.847691][T10570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.851435][T10570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.856882][T10570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.860649][T10570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.879412][T10570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.075377][ T67] Bluetooth: hci4: command tx timeout [ 153.170545][T10589] xt_hashlimit: size too large, truncated to 1048576 [ 153.266988][T10593] binder: 10592:10593 ioctl ae01 0 returned -22 [ 153.606217][ T6651] team0 (unregistering): Port device team_slave_1 removed [ 153.678434][ T6651] team0 (unregistering): Port device team_slave_0 removed [ 154.210085][T10572] IPv6: Can't replace route, no match found [ 154.240850][T10464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.468539][T10464] veth0_vlan: entered promiscuous mode [ 154.477174][T10464] veth1_vlan: entered promiscuous mode [ 154.498173][T10464] veth0_macvtap: entered promiscuous mode [ 154.502062][T10464] veth1_macvtap: entered promiscuous mode [ 154.510928][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.520706][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.526647][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.529963][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.533060][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.538224][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.541955][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.546742][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.556303][T10464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.574053][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.577393][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.580544][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.590217][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.593545][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.596821][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.598054][T10464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.605446][T10464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.605925][T10636] syz.0.1330: attempt to access beyond end of device [ 154.605925][T10636] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 154.608344][T10464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.608364][T10464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.608384][T10464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.615374][T10636] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 154.650655][ T835] IPVS: starting estimator thread 0... [ 154.697870][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.700585][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.719136][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.721661][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.733446][T10639] IPVS: using max 42 ests per chain, 100800 per kthread [ 154.911436][T10675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=10675 comm=syz.1.1341 [ 154.976703][T10690] __nla_validate_parse: 15 callbacks suppressed [ 154.976714][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 154.981545][T10690] bridge_slave_1: left allmulticast mode [ 154.984803][T10690] bridge_slave_1: left promiscuous mode [ 154.986957][T10690] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.995323][T10690] bridge_slave_0: left allmulticast mode [ 154.997142][T10690] bridge_slave_0: left promiscuous mode [ 154.999116][T10690] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.153371][ T67] Bluetooth: hci4: command tx timeout [ 155.770993][T10766] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.778923][T10767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9488 sclass=netlink_route_socket pid=10767 comm=syz.0.1368 [ 155.860868][T10779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10779 comm=syz.0.1371 [ 155.869362][T10779] io-wq is not configured for unbound workers [ 155.922460][T10784] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1371'. [ 155.927432][T10784] 0XD: renamed from macvtap0 (while UP) [ 155.931229][T10784] 0XD: entered allmulticast mode [ 155.932960][T10784] veth0_macvtap: entered allmulticast mode [ 155.935426][T10784] net_ratelimit: 57 callbacks suppressed [ 155.935434][T10784] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 155.936623][T10781] fuse: Bad value for 'fd' [ 155.939612][T10784] netlink: 'syz.0.1371': attribute type 4 has an invalid length. [ 155.946054][T10784] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1371'. [ 156.101442][T10795] IPv6: syztnl0: Disabled Multicast RS [ 156.162665][T10799] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:2000:0000 with DS=0x1 [ 156.213479][ T9] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 156.352659][ T40] kauditd_printk_skb: 322 callbacks suppressed [ 156.352671][ T40] audit: type=1400 audit(156.264:105538): avc: denied { map_create } for pid=10814 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.359543][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 156.363425][ T9] usb 6-1: device descriptor read/64, error -71 [ 156.363867][ T40] audit: type=1400 audit(156.264:105539): avc: denied { map_read map_write } for pid=10814 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.413381][ T40] audit: type=1400 audit(156.324:105540): avc: denied { create } for pid=10819 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.420155][ T40] audit: type=1400 audit(156.334:105541): avc: denied { bind } for pid=10819 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.426445][ T40] audit: type=1400 audit(156.334:105542): avc: denied { setopt } for pid=10819 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.455390][ T40] audit: type=1400 audit(156.374:105543): avc: denied { mount } for pid=10828 comm="syz.2.1387" name="/" dev="autofs" ino=37426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 156.462396][ T40] audit: type=1400 audit(156.374:105544): avc: denied { execmem } for pid=10828 comm="syz.2.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 156.613346][ T9] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 156.619336][ T40] audit: type=1400 audit(156.534:105545): avc: denied { execute } for pid=10830 comm="syz.2.1388" name="file2" dev="tmpfs" ino=2201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.627461][ T40] audit: type=1400 audit(156.534:105546): avc: denied { execute_no_trans } for pid=10830 comm="syz.2.1388" path="/407/file2" dev="tmpfs" ino=2201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.634601][ T40] audit: type=1400 audit(156.534:105547): avc: denied { create } for pid=10830 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.657069][T10835] xt_hashlimit: size too large, truncated to 1048576 [ 156.771012][ T9] usb 6-1: device descriptor read/64, error -71 [ 156.875168][ T9] usb usb6-port1: attempt power cycle [ 156.881499][T10864] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=10864 comm=syz.0.1397 [ 156.881499][T10863] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=10863 comm=syz.0.1397 [ 157.003724][T10869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1399'. [ 157.074192][T10877] fuse: Invalid rootmode [ 157.233406][ T9] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 157.233530][ T67] Bluetooth: hci4: command tx timeout [ 157.243340][ T5975] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 157.254411][T10884] nvme_fabrics: unknown parameter or missing value 'system_u:object_r:modem_device_t:s0 /usr/sbin/ntpd 00000000000000000003' in ctrl creation request [ 157.264574][ T9] usb 6-1: device descriptor read/8, error -71 [ 157.373954][ T5975] usb 5-1: device descriptor read/64, error -71 [ 157.503491][ T9] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 157.523794][ T9] usb 6-1: device descriptor read/8, error -71 [ 157.633438][ T5975] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 157.633641][ T9] usb usb6-port1: unable to enumerate USB device [ 157.763440][ T5975] usb 5-1: device descriptor read/64, error -71 [ 157.837479][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 157.875125][ T5975] usb usb5-port1: attempt power cycle [ 158.215823][ T5975] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 158.244508][ T5975] usb 5-1: device descriptor read/8, error -71 [ 158.435469][T10898] netlink: 'syz.2.1407': attribute type 1 has an invalid length. [ 158.446261][T10898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.493332][ T5975] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 158.514567][ T5975] usb 5-1: device descriptor read/8, error -71 [ 158.611756][T10917] mmap: syz.2.1411 (10917): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 158.623578][ T5975] usb usb5-port1: unable to enumerate USB device [ 158.919340][T10933] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1416'. [ 159.108965][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.111513][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.114690][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.117517][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.120049][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.122518][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.125223][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.127703][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.130198][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.132697][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.135875][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.139051][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.141536][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.144559][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.147147][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.150051][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.152508][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.156096][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.158696][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.161170][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.163952][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.166553][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.169120][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.171677][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.174469][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.177048][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.179613][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.182163][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.184827][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.187374][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.189924][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.192453][T10944] 9pnet_virtio: no channels available for device asymmetric [ 159.303403][ T5939] Bluetooth: hci4: command tx timeout [ 159.364955][T10960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1424'. [ 159.463545][ T5939] Bluetooth: hci5: command 0x1003 tx timeout [ 159.468086][ T67] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.664066][T10971] netlink: 'syz.5.1428': attribute type 10 has an invalid length. [ 159.994352][T10979] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1430'. [ 159.997335][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1430'. [ 160.128556][T10981] netlink: 'syz.0.1431': attribute type 23 has an invalid length. [ 160.556524][T11015] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 909 [ 160.560920][T11015] netlink: 'syz.0.1441': attribute type 10 has an invalid length. [ 160.576096][T11015] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.579042][T11015] team0: entered promiscuous mode [ 160.580585][T11015] team_slave_0: entered promiscuous mode [ 160.582415][T11015] team_slave_1: entered promiscuous mode [ 160.587307][T11015] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.835414][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1444'. [ 161.057807][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1449'. [ 161.162349][T11048] overlayfs: failed to clone upperpath [ 161.205903][T11052] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 161.208907][T11052] ip6erspan0: left promiscuous mode [ 161.210881][T11052] vlan2: left promiscuous mode [ 161.212814][T11052] vlan3: left promiscuous mode [ 161.215225][T11052] hsr_slave_1: left promiscuous mode [ 161.219746][ T1343] lo speed is unknown, defaulting to 1000 [ 161.259492][T11057] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1453'. [ 161.477044][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 161.477061][ T40] audit: type=1400 audit(161.394:105627): avc: denied { mounton } for pid=11062 comm="syz.1.1456" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 161.488405][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 161.499452][T11064] (syz.1.1456,11064,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 161.502639][T11064] (syz.1.1456,11064,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 161.568345][T11064] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 161.586068][ T40] audit: type=1400 audit(161.504:105628): avc: denied { execute } for pid=11065 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 161.593599][ T40] audit: type=1400 audit(161.504:105629): avc: denied { execute_no_trans } for pid=11065 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 161.611019][T11067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1458'. [ 161.678615][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 161.705700][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 161.714506][ T40] audit: type=1400 audit(161.634:105630): avc: denied { read } for pid=11080 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 161.721939][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.722483][ T40] audit: type=1400 audit(161.634:105631): avc: denied { open } for pid=11080 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 161.727022][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.731575][ T40] audit: type=1400 audit(161.634:105632): avc: denied { ioctl } for pid=11080 comm="syz-executor" path="socket:[37654]" dev="sockfs" ino=37654 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.739186][T11077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11077 comm=syz.1.1461 [ 161.744171][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.754877][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.757999][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.769281][ T40] audit: type=1400 audit(161.684:105633): avc: denied { mounton } for pid=11080 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 161.777574][T11080] Failed to initialize the IGMP autojoin socket (err -2) [ 161.840446][T11088] overlayfs: failed to clone upperpath [ 161.843040][T11089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11089 comm=syz.2.1464 [ 161.848048][T11088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11088 comm=syz.2.1464 [ 161.861792][ T40] audit: type=1400 audit(161.774:105634): avc: denied { read } for pid=5648 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 161.915259][ T40] audit: type=1400 audit(161.834:105635): avc: denied { search } for pid=5648 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.926172][ T40] audit: type=1400 audit(161.834:105636): avc: denied { read } for pid=5648 comm="dhcpcd" name="n128" dev="tmpfs" ino=7281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.958309][T11080] chnl_net:caif_netlink_parms(): no params data found [ 162.107204][T11105] overlayfs: failed to clone upperpath [ 162.157385][T11121] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1470'. [ 162.208325][T11112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11112 comm=syz.2.1468 [ 162.280036][T11080] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.282811][T11080] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.285710][T11080] bridge_slave_0: entered allmulticast mode [ 162.288372][T11080] bridge_slave_0: entered promiscuous mode [ 162.291526][T11080] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.293915][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.297714][T11080] bridge_slave_1: entered allmulticast mode [ 162.301922][T11080] bridge_slave_1: entered promiscuous mode [ 162.407189][T11139] Failed to initialize the IGMP autojoin socket (err -2) [ 162.419320][T11080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.436120][T11080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.542367][T11080] team0: Port device team_slave_0 added [ 162.556905][T11080] team0: Port device team_slave_1 added [ 162.636668][T11080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.638874][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.648009][T11080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.653188][T11150] Bluetooth: MGMT ver 1.23 [ 162.662372][T11080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.666136][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.677129][T11080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.801366][T11080] hsr_slave_0: entered promiscuous mode [ 162.804252][T11080] hsr_slave_1: entered promiscuous mode [ 162.806334][T11080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.808872][T11080] Cannot create hsr debugfs directory [ 162.810652][T11170] 8021q: VLANs not supported on wg0 [ 162.848807][T11175] relay: one or more items not logged [item size (56) > sub-buffer size (13)] [ 162.995755][T11187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11187 comm=syz.2.1493 [ 163.180765][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 163.216169][T11215] netlink: 'syz.5.1503': attribute type 1 has an invalid length. [ 163.218617][T11080] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.305422][T11080] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.386994][T11080] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.463017][T11080] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.605569][T11080] netdevsim netdevsim0 netdevsim0: renamed from eth6 [ 163.620901][T11080] netdevsim netdevsim0 netdevsim1: renamed from eth7 [ 163.631583][T11080] netdevsim netdevsim0 netdevsim2: renamed from eth8 [ 163.644746][T11080] netdevsim netdevsim0 netdevsim3: renamed from eth9 [ 163.760237][T11080] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.770156][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.772402][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.783910][ T5939] Bluetooth: hci0: command tx timeout [ 163.790945][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.793497][ T6651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.971591][T11080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.057581][T11080] veth0_vlan: entered promiscuous mode [ 164.067589][T11080] veth1_vlan: entered promiscuous mode [ 164.117785][T11080] veth0_macvtap: entered promiscuous mode [ 164.128701][T11080] veth1_macvtap: entered promiscuous mode [ 164.154819][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.158316][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.168664][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.171922][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.176177][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.179551][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.182682][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.186284][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.189376][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.192671][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.201014][T11080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.214347][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.217594][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.220584][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.224467][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.227727][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.231036][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.234396][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.237572][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.250627][T11080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.259077][T11232] Failed to initialize the IGMP autojoin socket (err -2) [ 164.261919][T11080] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 164.268961][T11080] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 164.275752][T11080] wireguard: wg0: Could not create IPv4 socket [ 164.279740][T11080] wireguard: wg1: Could not create IPv4 socket [ 164.283706][T11080] wireguard: wg2: Could not create IPv4 socket [ 164.338286][T11219] ------------[ cut here ]------------ [ 164.340806][T11219] refcount_t: underflow; use-after-free. [ 164.343612][T11219] WARNING: CPU: 0 PID: 11219 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 164.347618][T11219] Modules linked in: [ 164.349192][T11219] CPU: 0 UID: 0 PID: 11219 Comm: kbnepd Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 164.354698][T11219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.358025][T11219] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 164.359963][T11219] Code: ff 89 de e8 38 3d ea fc 84 db 0f 85 66 ff ff ff e8 4b 42 ea fc c6 05 c8 6a 9c 0b 01 90 48 c7 c7 20 35 f4 8b e8 a7 cf a9 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 42 ea fc 0f b6 1d a3 6a 9c 0b 31 [ 164.366109][T11219] RSP: 0018:ffffc900060d7948 EFLAGS: 00010282 [ 164.368036][T11219] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ad548 [ 164.370503][T11219] RDX: ffff888030b12440 RSI: ffffffff817ad555 RDI: 0000000000000001 [ 164.373139][T11219] RBP: ffff888031546c78 R08: 0000000000000001 R09: 0000000000000000 [ 164.376201][T11219] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880331d7400 [ 164.379152][T11219] R13: ffff888031546c78 R14: ffffffff85fd8fe0 R15: 0000000000000000 [ 164.381653][T11219] FS: 0000000000000000(0000) GS:ffff8880d69df000(0000) knlGS:0000000000000000 [ 164.384582][T11219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.386660][T11219] CR2: 000055aa7dc2df38 CR3: 0000000056739000 CR4: 0000000000352ef0 [ 164.389181][T11219] Call Trace: [ 164.390253][T11219] [ 164.391195][T11219] klist_put+0x11b/0x1b0 [ 164.392625][T11219] device_del+0x1d8/0x9f0 [ 164.394091][T11219] ? __pfx_device_del+0x10/0x10 [ 164.395632][T11219] ? netdev_unregister_kobject+0x2da/0x540 [ 164.397508][T11219] unregister_netdevice_many_notify+0x1904/0x26f0 [ 164.399428][T11219] ? rcu_is_watching+0x12/0xc0 [ 164.400946][T11219] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 164.403044][T11219] ? rtnl_net_dev_lock+0x146/0x360 [ 164.404783][T11219] ? __pfx___mutex_lock+0x10/0x10 [ 164.406391][T11219] unregister_netdevice_queue+0x305/0x3f0 [ 164.408190][T11219] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 164.410144][T11219] ? rtnl_net_dev_lock+0x28/0x360 [ 164.411730][T11219] ? rtnl_net_dev_lock+0x146/0x360 [ 164.413459][T11219] ? rtnl_lock+0x9/0x20 [ 164.414789][T11219] ? rtnl_net_dev_lock+0x146/0x360 [ 164.416411][T11219] unregister_netdev+0x1f/0x60 [ 164.417922][T11219] bnep_session+0x224e/0x2d80 [ 164.419416][T11219] ? __pfx_bnep_session+0x10/0x10 [ 164.421011][T11219] ? do_raw_spin_lock+0x12c/0x2b0 [ 164.422651][T11219] ? __pfx_woken_wake_function+0x10/0x10 [ 164.424569][T11219] ? rcu_is_watching+0x12/0xc0 [ 164.426138][T11219] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 164.427982][T11219] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.429552][T11219] ? __kthread_parkme+0x19e/0x250 [ 164.431139][T11219] ? __pfx_bnep_session+0x10/0x10 [ 164.432688][T11219] kthread+0x3c2/0x780 [ 164.434036][T11219] ? __pfx_kthread+0x10/0x10 [ 164.435477][T11219] ? __pfx_kthread+0x10/0x10 [ 164.436943][T11219] ? __pfx_kthread+0x10/0x10 [ 164.438410][T11219] ? __pfx_kthread+0x10/0x10 [ 164.439882][T11219] ? rcu_is_watching+0x12/0xc0 [ 164.441404][T11219] ? __pfx_kthread+0x10/0x10 [ 164.442866][T11219] ret_from_fork+0x45/0x80 [ 164.444380][T11219] ? __pfx_kthread+0x10/0x10 [ 164.445856][T11219] ret_from_fork_asm+0x1a/0x30 [ 164.447387][T11219] [ 164.448399][T11219] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.450637][T11219] CPU: 0 UID: 0 PID: 11219 Comm: kbnepd Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 164.454108][T11219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.457257][T11219] Call Trace: [ 164.458292][T11219] [ 164.459222][T11219] dump_stack_lvl+0x3d/0x1f0 [ 164.460678][T11219] panic+0x71c/0x800 [ 164.461938][T11219] ? __pfx_panic+0x10/0x10 [ 164.463359][T11219] ? show_trace_log_lvl+0x29b/0x3e0 [ 164.465015][T11219] ? check_panic_on_warn+0x1f/0xb0 [ 164.466584][T11219] ? refcount_warn_saturate+0x14a/0x210 [ 164.468260][T11219] check_panic_on_warn+0xab/0xb0 [ 164.469821][T11219] __warn+0xf6/0x3c0 [ 164.471016][T11219] ? refcount_warn_saturate+0x14a/0x210 [ 164.472687][T11219] report_bug+0x3c3/0x580 [ 164.474033][T11219] ? refcount_warn_saturate+0x14a/0x210 [ 164.475771][T11219] handle_bug+0x184/0x210 [ 164.477097][T11219] exc_invalid_op+0x17/0x50 [ 164.478484][T11219] asm_exc_invalid_op+0x1a/0x20 [ 164.479981][T11219] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 164.481837][T11219] Code: ff 89 de e8 38 3d ea fc 84 db 0f 85 66 ff ff ff e8 4b 42 ea fc c6 05 c8 6a 9c 0b 01 90 48 c7 c7 20 35 f4 8b e8 a7 cf a9 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 28 42 ea fc 0f b6 1d a3 6a 9c 0b 31 [ 164.487785][T11219] RSP: 0018:ffffc900060d7948 EFLAGS: 00010282 [ 164.489679][T11219] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ad548 [ 164.492136][T11219] RDX: ffff888030b12440 RSI: ffffffff817ad555 RDI: 0000000000000001 [ 164.494615][T11219] RBP: ffff888031546c78 R08: 0000000000000001 R09: 0000000000000000 [ 164.497072][T11219] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880331d7400 [ 164.499515][T11219] R13: ffff888031546c78 R14: ffffffff85fd8fe0 R15: 0000000000000000 [ 164.501958][T11219] ? __pfx_klist_children_put+0x10/0x10 [ 164.503711][T11219] ? __warn_printk+0x198/0x350 [ 164.505237][T11219] ? __warn_printk+0x1a5/0x350 [ 164.506758][T11219] ? refcount_warn_saturate+0x149/0x210 [ 164.508501][T11219] klist_put+0x11b/0x1b0 [ 164.509841][T11219] device_del+0x1d8/0x9f0 [ 164.511206][T11219] ? __pfx_device_del+0x10/0x10 [ 164.512707][T11219] ? netdev_unregister_kobject+0x2da/0x540 [ 164.514517][T11219] unregister_netdevice_many_notify+0x1904/0x26f0 [ 164.516486][T11219] ? rcu_is_watching+0x12/0xc0 [ 164.517966][T11219] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 164.520002][T11219] ? rtnl_net_dev_lock+0x146/0x360 [ 164.521585][T11219] ? __pfx___mutex_lock+0x10/0x10 [ 164.523123][T11219] unregister_netdevice_queue+0x305/0x3f0 [ 164.524873][T11219] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 164.526801][T11219] ? rtnl_net_dev_lock+0x28/0x360 [ 164.528369][T11219] ? rtnl_net_dev_lock+0x146/0x360 [ 164.529860][T11219] ? rtnl_lock+0x9/0x20 [ 164.531127][T11219] ? rtnl_net_dev_lock+0x146/0x360 [ 164.532732][T11219] unregister_netdev+0x1f/0x60 [ 164.534239][T11219] bnep_session+0x224e/0x2d80 [ 164.535675][T11219] ? __pfx_bnep_session+0x10/0x10 [ 164.537248][T11219] ? do_raw_spin_lock+0x12c/0x2b0 [ 164.538832][T11219] ? __pfx_woken_wake_function+0x10/0x10 [ 164.540600][T11219] ? rcu_is_watching+0x12/0xc0 [ 164.542110][T11219] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 164.543961][T11219] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.545605][T11219] ? __kthread_parkme+0x19e/0x250 [ 164.547185][T11219] ? __pfx_bnep_session+0x10/0x10 [ 164.548780][T11219] kthread+0x3c2/0x780 [ 164.550072][T11219] ? __pfx_kthread+0x10/0x10 [ 164.551530][T11219] ? __pfx_kthread+0x10/0x10 [ 164.552996][T11219] ? __pfx_kthread+0x10/0x10 [ 164.554459][T11219] ? __pfx_kthread+0x10/0x10 [ 164.555917][T11219] ? rcu_is_watching+0x12/0xc0 [ 164.557421][T11219] ? __pfx_kthread+0x10/0x10 [ 164.558872][T11219] ret_from_fork+0x45/0x80 [ 164.560282][T11219] ? __pfx_kthread+0x10/0x10 [ 164.561735][T11219] ret_from_fork_asm+0x1a/0x30 [ 164.563252][T11219] [ 165.635460][T11219] Shutting down cpus with NMI [ 165.637650][T11219] Kernel Offset: disabled [ 165.639018][T11219] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:58:16 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854f78f0 RDI=ffffffff9adf9560 RBP=ffffffff9adf9520 RSP=ffffc900060d7258 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35bf2fe R15=dffffc0000000000 RIP=ffffffff854f7917 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055aa7dc2df38 CR3=0000000056739000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd96463b40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff816934f6 RDX=ffff88803817c880 RSI=ffffffff8169654c RDI=0000000000000000 RBP=ffff8880331d7400 RSP=ffffc9000452f818 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a53ad00 R15=ffffed100663ae80 RIP=ffffffff8169654d RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcd46b6e68 CR3=0000000031a5f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000004c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040002 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2d6abf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84c2011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000019b723 RBX=0000000000000002 RCX=ffffffff8b6d0419 RDX=0000000000000000 RSI=ffffffff8dbe2848 RDI=ffffffff8bf48920 RBP=ffffed1003ada910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6d4880 R14=ffffffff9084ff10 R15=0000000000000000 RIP=ffffffff8b6cecaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2d71bc CR3=000000004d038000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee6ce7da0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c33011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c33011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c33011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c33011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c33011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c33011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000054 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000129e6b RBX=0000000000000003 RCX=ffffffff8b6d0419 RDX=0000000000000000 RSI=ffffffff8dbe2848 RDI=ffffffff8bf48920 RBP=ffffed1003b5d000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dae8000 R14=ffffffff9084ff10 R15=0000000000000000 RIP=ffffffff8b6cecaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3210fe CR3=000000002a4ef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefff200 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557467161f60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18559f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f18559f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e754f4645425d05 1a474f475a054149 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 454648051a041a4f 494b5a594f474b44 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c82f74656e2f3030 323a306963682f30 6963682f68746f6f 7465756c622f6c61 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a430502560002 0540494c43055600 0541405144405746 000a56001f47000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c6f736e6f6320 6164732f7665642f 3d746f6f7220313d 6e7261775f6e6f5f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63696e6170203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000