last executing test programs: 55.915404236s ago: executing program 1 (id=463): r0 = socket(0x10, 0x3, 0x9) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000c7f8c9c4d0e991e3fedbdf251d010000001000000000000015000100020000e0080000001a0b6e8c6211c9db15000000"], 0x34}, 0x1, 0x0, 0x0, 0x24004884}, 0x0) 55.913233746s ago: executing program 1 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x140}}, 0x0) 55.904758579s ago: executing program 1 (id=467): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="76e7cfbb3f818e1b10c89774baf2aa6d17f76caa515ef077b4a41e32350beab3de4c281a61aed89490e4f9b681a7f0bcbad01ecb8425078b4badf6ef87798111eac35c3e5edf5f7adda9337e878c6a431d64d861fdf96dc800bd69c861f5713b27edb9c38d38139f09a4ad91e13d99de921253cffb38daac3168722e61636629192fb34b6a9aec9396e2ec8ac740d67d11c7bbfd1b9eb5bcb3944895dabd05214208341103042a429b84ca6b0a2473ba22bb416f26981a0200"/197, 0xc5}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0xc, 0x2) write(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getqdisc={0x34, 0x26, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x18, 0xa}, {0x3, 0x4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x7800, 0x7800, 0x2, 0xff, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x64, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, {[@generic={0x94, 0x4, '_\f'}, @rr={0x7, 0x13, 0x59, [@multicast1, @multicast1, @rand_addr=0x64010101, @loopback]}]}}}}}) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000700), 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="2800000013000008259f7000f9dbdf2500000000de688da81645a09aa17a2d949ab46886e26b64714775baf0bc43962e76e813e912d682fc75c070ab7082e5edcdc8b1391670cf8ef567c9f9070f339bbd1039ba2fe12c296d45b02f590dc8a404279532b674d7a819729ca97344df921b4b0ea760b7", @ANYRES32=r8, @ANYBLOB="024002000180020008001b0080000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x178, 0x24, 0x20, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_MAX_P={0x8}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0xf12, 0x8, 0xa, 0x2, 0x101, 0x1a11, 0x5, 0x400, 0x101, 0x0, 0x6, 0xd, 0x95, 0xe, 0x4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x178}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r13 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi4\x00', 0x1, 0x0) ioctl$COMEDI_BUFINFO(r13, 0xc02c640e, &(0x7f0000000580)={0xffffffff, 0x1000, 0xc, 0x7, 0x4, 0x4, 0x1ff}) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000000a40)={"1c410337ed60919e459e6f071e00616a", 0x0, 0x0, {0xb, 0x8}, {0x5, 0x40}, 0x1, [0x5, 0x8, 0x4, 0x602c, 0x6, 0x7, 0x6, 0xffffffffffffff80, 0x7, 0x40, 0x7, 0x8, 0x7, 0x3ffc00, 0x5, 0xffff]}) getsockopt$inet6_tcp_int(r14, 0x6, 0x19, 0xfffffffffffffffd, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, [0x80, 0x9, 0x8, 0x2, 0x7, 0xff, 0xd, 0x401, 0x4803, 0x6, 0x3, 0xb, 0x1, 0x3, 0x40]}, &(0x7f00000006c0)=0x100) 55.017254931s ago: executing program 1 (id=483): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}}, 0x4000040) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000340)={0x0, 0x0, 0x94, 0x74, ""/116}, &(0x7f0000000100)=0x94, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x24, 0x0, &(0x7f0000000340)) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) rmdir(&(0x7f0000000080)='./file0/../file0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44084) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@multicast2, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="98000000550010002bbd7000fddbdf2507000000", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="00000300fc0100000000000000000000000000010000000020000100", @ANYRES32=r9, @ANYBLOB="00010000fc0100000000000000000000000000000800000020000100", @ANYRES32=r9, @ANYBLOB="00010300640101000000000000000000000000000000000020000100", @ANYRES32=r10, @ANYBLOB="000301007f0000010000000000000000000000008edd0000"], 0x98}, 0x1, 0x0, 0x0, 0x20000090}, 0x8004) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x18, r1}, 0x18) 54.926583854s ago: executing program 1 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = userfaultfd(0x801) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x181000, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x101}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xdb8d}, &(0x7f0000c57000), 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2045) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000340)=0x6) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40810, 0x50}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004c1}, 0x8000) 54.42441052s ago: executing program 1 (id=490): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x82) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xc, 0x20, 0x0, 0x7ffc0002}]}) (async) syz_emit_ethernet(0x15, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x1, 0x14, 0x67, 0x0, 0x6, 0x32, 0x0, @loopback, @multicast1}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040), 0x4) getsockopt$inet6_int(r2, 0x29, 0x48, 0x0, &(0x7f00007d0000)) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) 54.348495668s ago: executing program 32 (id=490): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x82) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xc, 0x20, 0x0, 0x7ffc0002}]}) (async) syz_emit_ethernet(0x15, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x1, 0x14, 0x67, 0x0, 0x6, 0x32, 0x0, @loopback, @multicast1}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040), 0x4) getsockopt$inet6_int(r2, 0x29, 0x48, 0x0, &(0x7f00007d0000)) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) 9.695849061s ago: executing program 0 (id=1051): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x100, 0x8002) (async) r1 = getgid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x4}, 0x1, 0x0, 0x43, 0x7fd, 0xb, 'syz1\x00', "df6e25fe88564a55ffd75243f0c4ef3ccfadd287c5bec1eac8211bcce8fd13db", "221796edffae2cc28c8dda266b47a3209255a4eb7815d588931d8ca71dd3c2da", [{0x4, 0x3, {0x2, 0x8001}}, {0x7ff, 0x3, {0x2, 0x10000000}}, {0xf3d2, 0xe, {0x2}}, {0x3, 0x7, {0x1, 0x4}}, {0xc, 0x0, {0x0, 0x9}}, {0x2, 0x1, {0x3, 0x656}}, {0xe1c9, 0x7, {0x1, 0xb9}}, {0xffff, 0x7, {0x2, 0x3}}, {0x1, 0x800, {0x2, 0xff}}, {0x6, 0x8, {0x2, 0x9}}, {0xd03, 0x2001, {0x2, 0x4}}, {0xb5a8, 0x4, {0x3, 0x9}}, {0xbe3, 0x3, {0x3, 0x4ef5}}, {0x401, 0x85, {0x3, 0x800}}, {0x3, 0x1, {0x3, 0xdf2c}}, {0x8, 0x400, {0x1, 0x4}}, {0x3, 0xfffe, {0x0, 0xfffffffa}}, {0x5, 0x101, {0x2, 0x6}}, {0xca5, 0x1d1, {0x2, 0x6}}, {0x0, 0x5, {0x2, 0x7d}}, {0x0, 0x9, {0x1, 0x2}}, {0x465, 0x1ff, {0x2, 0x1d}}, {0x8, 0x7fff, {0x1, 0xa45}}, {0x7, 0x9, {0x0, 0x3}}, {0x2, 0xc289, {0x0, 0x2}}, {0x7, 0x8, {0x3, 0x3}}, {0x6, 0x0, {0x0, 0xb}}, {0x5, 0x1, {0x2, 0x1cd4}}, {0x4, 0x5, {0x2, 0x375230b2}}, {0x6, 0x624, {0x3, 0x4}}, {0x8, 0xffff, {0x3, 0x3}}, {0x7, 0x0, {0x1, 0x8}}, {0x5, 0x2, {0x1, 0xee3}}, {0x8, 0xb575, {0x2, 0x3}}, {0x3, 0x1, {0x1, 0x7fffffff}}, {0x1ff, 0x7ff, {0x1, 0x7}}, {0xfffb, 0xff81, {0x2, 0x5}}, {0x81, 0xfffb, {0x0, 0x1c60000}}, {0xcb33, 0x9, {0x2, 0x1}}, {0x400, 0x4af, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x44}, 0xc080) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getgroups(0x7, &(0x7f0000000280)=[r1, r2, r3, 0x0, r4, r6, r7]) close_range(r0, r0, 0x0) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000340)) r9 = fcntl$dupfd(r0, 0x0, r0) (async) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000004440)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000004500)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000004540)=@assoc_value={r11, 0x2}, &(0x7f0000004580)=0x8) (async) modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e) (async, rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x3c, 0x32, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) 9.529108609s ago: executing program 0 (id=1053): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000640)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xad, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4c, &(0x7f0000000480)="0c1f59", &(0x7f0000000500)=""/76, 0x10, 0x30, 0x0, 0x1}) syz_io_uring_setup(0x889, &(0x7f00000000c0)={0x0, 0xaee2, 0x0, 0x82, 0xbfdffffc}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, &(0x7f00000000c0)=0x8800000, 0x6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1001f0) lseek(r0, 0x0, 0x4) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x10, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) setreuid(0xee01, 0x0) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x20000000, 0xd2442) r12 = socket(0x10, 0x2, 0x7a56) sendto$inet6(r12, &(0x7f0000000240)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a463fdaadb89c714fab547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x20048090, 0x0, 0x0) 9.391083036s ago: executing program 0 (id=1055): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000000000000004010800"/24], 0x18) (async, rerun: 32) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) (rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) sendto$inet6(r2, &(0x7f00000000c0)='e', 0x1, 0x20008001, &(0x7f0000b63fe4)={0xa, 0x2, 0x4, @empty, 0x40}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) mincore(&(0x7f00001bd000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/4096) 9.390828009s ago: executing program 0 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="400f78112e670f797200c744240013010000c744240206000000ff2c24420f01ca0f01c564400fc76c8a41b937030000b8b7850000ba000000000f3066b825008ed0440f01f866ba4000ec", 0x4b}], 0x1, 0x43, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040}, 0x4000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r9, 0x0, 0xd) splice(r3, 0x0, r8, 0x0, 0x4ffe6, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.61629182s ago: executing program 0 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x84084) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x40810, 0x50}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000481}, 0x8000) 8.124833922s ago: executing program 0 (id=1072): gettid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x6, 0xfe, 0x0, 0x7f, 0x6, 0x89, 0x58, 0x9, 0x9, 0xf1, 0x9, 0x0, 0x5, 0x2, 0x80, 0xff, 0x8, 0x9, '\x00', 0x4, 0x6}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x64000) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x0, 0x1}, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 5.14122354s ago: executing program 2 (id=1095): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001800010002000000000000031d01020008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="1500040003000000000300004505a8b9e859abc00100000008000e00", @ANYRES32], 0x44}}, 0x0) modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e) (async) iopl(0x3) syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 5.140977702s ago: executing program 3 (id=1096): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x5, 0x0, 0x7, 0x7fffffff}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 5.140357849s ago: executing program 3 (id=1097): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x6]}, 0x8, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00;\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25720000000c0099000004000073000000"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0) mmap$xdp(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3, 0x12, r4, 0x0) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f0000000080)) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) getpeername$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', r6, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvfrom$inet(r5, &(0x7f00000001c0)=""/116, 0x74, 0x1, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 5.140118108s ago: executing program 3 (id=1098): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002140), r6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)={0x14, r7, 0x331, 0x800, 0x25dfdbfb}, 0x14}}, 0x90) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r9 = fanotify_init(0xf00, 0x0) fanotify_mark(r9, 0x105, 0x5000003a, r8, 0x0) (async) creat(&(0x7f0000000200)='./file5\x00', 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file5\x00') (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000081) (async) syz_fuse_handle_req(r3, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0x297}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x7, 0x4, 0x7, 0xff}}, 0x0}) (async) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x42000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "427f4d05618664ecb7f952ed7667675bc32afc7ebbfea1deee1e2e520cc38c6a"}}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 5.139577513s ago: executing program 2 (id=1099): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1003ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000280)) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180)) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000080)={'\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) 5.136346912s ago: executing program 3 (id=1100): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x457) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000001c0)={r4}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {0x0, 0xc}, {0x9, 0x1}}}, 0x24}}, 0x0) 5.023131662s ago: executing program 2 (id=1101): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x4e23, 0x1, @local, 0xb}, 0x1c) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000034c0)=0xffffffffffffffff) fcntl$dupfd(r0, 0x0, r1) recvmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/77, 0x4d}], 0x3, &(0x7f00000002c0)=""/25, 0x19}, 0x3d8dc45f}, {{&(0x7f0000000300)=@x25={0x9, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/3, 0x3}, {&(0x7f00000003c0)=""/155, 0x9b}], 0x2}, 0x6}, {{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/74, 0x4a}], 0x2, &(0x7f0000000680)=""/124, 0x7c}, 0x7}, {{&(0x7f0000000700)=@nl=@proc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000880)=""/194, 0xc2}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/157, 0x9d}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/212, 0xd4}], 0x6, &(0x7f0000000800)=""/1, 0x1}, 0x7fffffff}, {{&(0x7f0000001cc0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001d40)=""/6, 0x6}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/140, 0x8c}, {&(0x7f0000002e40)=""/118, 0x76}], 0x4, &(0x7f0000002f00)=""/160, 0xa0}, 0x61577be}, {{&(0x7f0000002fc0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003040)=""/214, 0xd6}, {&(0x7f0000003140)=""/238, 0xee}, {&(0x7f0000003240)=""/4, 0x4}, {&(0x7f0000003280)=""/2, 0x2}, {&(0x7f00000032c0)=""/217, 0xd9}, {&(0x7f00000033c0)=""/79, 0x4f}], 0x6, &(0x7f00000034c0)}, 0x9}], 0x6, 0x2000, &(0x7f0000003680)={0x0, 0x989680}) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x4e23, 0x1, @local, 0xb}, 0x1c) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000034c0)) (async) fcntl$dupfd(r0, 0x0, r1) (async) recvmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/77, 0x4d}], 0x3, &(0x7f00000002c0)=""/25, 0x19}, 0x3d8dc45f}, {{&(0x7f0000000300)=@x25={0x9, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/3, 0x3}, {&(0x7f00000003c0)=""/155, 0x9b}], 0x2}, 0x6}, {{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/74, 0x4a}], 0x2, &(0x7f0000000680)=""/124, 0x7c}, 0x7}, {{&(0x7f0000000700)=@nl=@proc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000880)=""/194, 0xc2}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)=""/157, 0x9d}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/212, 0xd4}], 0x6, &(0x7f0000000800)=""/1, 0x1}, 0x7fffffff}, {{&(0x7f0000001cc0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001d40)=""/6, 0x6}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/140, 0x8c}, {&(0x7f0000002e40)=""/118, 0x76}], 0x4, &(0x7f0000002f00)=""/160, 0xa0}, 0x61577be}, {{&(0x7f0000002fc0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003040)=""/214, 0xd6}, {&(0x7f0000003140)=""/238, 0xee}, {&(0x7f0000003240)=""/4, 0x4}, {&(0x7f0000003280)=""/2, 0x2}, {&(0x7f00000032c0)=""/217, 0xd9}, {&(0x7f00000033c0)=""/79, 0x4f}], 0x6, &(0x7f00000034c0)}, 0x9}], 0x6, 0x2000, &(0x7f0000003680)={0x0, 0x989680}) (async) 4.979571198s ago: executing program 2 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./bus\x00', 0x10, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) creat(&(0x7f0000000040)='./file0\x00', 0x0) 4.95805157s ago: executing program 2 (id=1103): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @empty, @empty, 0x0, 0x10}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) close(r1) 4.782298293s ago: executing program 3 (id=1104): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e23, 0x80000001, @empty}}, 0xffffff27, 0xfff8, 0xbd1, 0x2, 0x25, 0x0, 0x6}, &(0x7f0000000000)=0x9c) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(wp256-generic)\x00'}, 0x58) (async) bind$alg(r7, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(wp256-generic)\x00'}, 0x58) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r8, 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000000)=0x80, 0x4) sendto$inet(r9, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) accept$alg(r7, 0x0, 0x0) (async) r10 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="50fd2f6861c1", 0x6}], 0x1, 0x0, 0x0, 0x850}], 0x1, 0x4090) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r11, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000200)={0x4, 0x3, 0xeeef0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000101010300000020000000000a000000100001800c00028005000100010000000c0019800800010008080000"], 0x30}}, 0x0) 4.696776522s ago: executing program 2 (id=1105): creat(&(0x7f00000002c0)='./file0\x00', 0x1) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) creat(0x0, 0xd931d3864d39ddd8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) 4.527074197s ago: executing program 3 (id=1106): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f00000072c0)=[{{&(0x7f0000000280)=@xdp={0x2c, 0x6, r1, 0xb}, 0x80, 0x0, 0x0, &(0x7f0000002800)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}], 0x1, 0x40088c0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000600)={0x170001, 0x0, [0x8, 0x8000000000000000, 0xcd97, 0x5064, 0x9, 0x101, 0x64, 0xffffffff]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r10, 0x40045010, &(0x7f0000000000)) r11 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r11, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r12 = dup2(r11, r11) sendmmsg$unix(r12, &(0x7f0000008940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004001}}], 0x1, 0x4008890) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000040)) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r13], 0x50}}, 0x2) 4.15340324s ago: executing program 4 (id=1107): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000224e00000000", 0x58}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x209, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x81800) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4044c800}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080029bd7000fcdbdf25120004000000050022000000000008000a0000000000060002000000000008001802e00000010000000000000000000000000000b37c38e65a6a45a3af927c43a5cf0c747aa89f4d"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) 4.053370062s ago: executing program 4 (id=1108): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 4.051087902s ago: executing program 4 (id=1109): r0 = syz_usb_connect$rtl8150(0x5, 0xfffffffffffffe21, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r0, 0xa5, 0x84, &(0x7f0000000000)="603d524a7bce428b8d4089344dd193ef7a92544e2fb6b662dffd794df268e6df573f9b7006662da1c6f95267ffbc02fa1f79a2de18d91d120bc27eb94352b6581fcdac84f962ebd8bfc12021c14464ce1af9a64dcf2687d8c846dccd793b165f7b91062d52704249159336b6cd15487d97f141a575b17df6e9d9b6efc63486600c55f41c") syz_usb_ep_write(r0, 0x2, 0x0, 0x0) 946.962115ms ago: executing program 4 (id=1110): socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x3426, &(0x7f0000000280)={0x0, 0x4, 0x3080, 0x8003, 0x4025f}, 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x21f1, &(0x7f00000000c0)={0x0, 0x3fffff, 0x10100, 0xfffffffb}, &(0x7f0000000200)=0x0, &(0x7f0000000400)=0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @empty, @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x29, 0x0, 0xffffffffffffffff, 0x0, r3, 0x2, 0x0, 0x1}) (async) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) write$FUSE_BMAP(r7, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x5) 761.891891ms ago: executing program 4 (id=1111): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r2 = syz_open_dev$dri(&(0x7f0000000100), 0xd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) close(r2) setreuid(0x0, 0xee00) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000640), 0x10) shutdown(r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) ppoll(&(0x7f0000000400)=[{r4, 0x480}], 0x1, 0x0, 0x0, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285628, &(0x7f00000001c0)={0x3, 0x1, 0x0, '\x00', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x208}, 0x4004080) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r5, @ANYRES64=r5, @ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB="8845c61499d819dcc9001b2fa56c89c382e98049636b105018b4a590f8bb273c36e9db01194e5cf2917ee7cdf8cbfd2277f909eba52c6ce77aef806d22f788bbe1ce0c19e0b5ee1f74b863fb5d9341c27b3267bcd548e7ec9e1ae48ae5a152fa7368", @ANYRESDEC=r7, @ANYRES8=r6, @ANYRES32=r2, @ANYRESDEC, @ANYRES64=r3], 0x208}, 0x0) recvmmsg(r8, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1, 0x2, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x5, 0x4, 0x2, 0xffffffff}, {0x81, 0x2, 0x4, 0x9}, {0x6, 0x6, 0x0, 0xfffffff9}, {0x4, 0xc3, 0x3, 0x7fff}]}) sendmsg$inet6(r9, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1a, 0x280000, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r9], 0x30}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) 0s ago: executing program 4 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, 0xfffffffffffffffc, 0x20000041) kernel console output (not intermixed with test programs): 0.933860][ T29] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 70.939159][ T7002] veth0_macvtap: left promiscuous mode [ 71.085360][ T29] usb 8-1: config index 0 descriptor too short (expected 8192, got 45) [ 71.088775][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.092862][ T29] usb 8-1: config 0 has no interfaces? [ 71.098690][ T29] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 71.102437][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.105511][ T29] usb 8-1: Product: syz [ 71.106830][ T29] usb 8-1: Manufacturer: syz [ 71.108278][ T29] usb 8-1: SerialNumber: syz [ 71.110989][ T29] usb 8-1: config 0 descriptor?? [ 71.333306][ T6999] netlink: 348 bytes leftover after parsing attributes in process `syz.3.274'. [ 72.188757][ T7068] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 72.218428][ T7068] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 72.222356][ T7068] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 72.267685][ T7075] gretap1: entered promiscuous mode [ 72.272656][ T7075] bond1: (slave gretap1): making interface the new active one [ 72.276911][ T7075] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 72.282084][ T40] kauditd_printk_skb: 32178 callbacks suppressed [ 72.282094][ T40] audit: type=1400 audit(1757973795.123:32562): avc: denied { read } for pid=7074 comm="syz.0.292" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 72.291756][ T40] audit: type=1400 audit(1757973795.123:32563): avc: denied { open } for pid=7074 comm="syz.0.292" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 72.292254][ T7068] macvlan2: entered promiscuous mode [ 72.301865][ T7068] macvlan2: entered allmulticast mode [ 72.306060][ T7068] bond1: entered promiscuous mode [ 72.309080][ T7068] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.317473][ T7068] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 72.317811][ T40] audit: type=1400 audit(1757973795.163:32564): avc: denied { read } for pid=7077 comm="syz.0.293" name="file0" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.329590][ T40] audit: type=1400 audit(1757973795.163:32565): avc: denied { open } for pid=7077 comm="syz.0.293" path="/86/file0" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.337199][ T7068] bond1: left promiscuous mode [ 72.345072][ T40] audit: type=1400 audit(1757973795.193:32566): avc: denied { connect } for pid=7083 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.397249][ T40] audit: type=1400 audit(1757973795.243:32567): avc: denied { read write } for pid=7083 comm="syz.0.294" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.405235][ T40] audit: type=1400 audit(1757973795.243:32568): avc: denied { open } for pid=7083 comm="syz.0.294" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.440241][ T40] audit: type=1400 audit(1757973795.283:32569): avc: denied { setopt } for pid=7086 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.495658][ T7089] 9pnet: Could not find request transport: v~rtio [ 72.583472][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 72.590788][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 72.643771][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.708709][ T7097] /dev/nullb0: Can't open blockdev [ 72.711118][ T40] audit: type=1400 audit(1757973795.553:32570): avc: denied { write } for pid=7095 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.717663][ T40] audit: type=1400 audit(1757973795.553:32571): avc: denied { ioctl } for pid=7095 comm="syz.1.298" path="socket:[14256]" dev="sockfs" ino=14256 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.805055][ T34] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.809287][ T34] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.812270][ T34] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.815972][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.821265][ T7085] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.827285][ T34] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.027321][ T6042] usb 5-1: USB disconnect, device number 5 [ 73.199775][ T7128] comedi comedi1: fl512: a I/O base address must be specified [ 73.208177][ T7128] comedi comedi1: comedi_config --init_data is deprecated [ 73.487585][ T7143] QAT: failed to copy from user. [ 73.612107][ T7148] syzkaller1: entered promiscuous mode [ 73.613889][ T7148] syzkaller1: entered allmulticast mode [ 73.644368][ T29] usb 8-1: USB disconnect, device number 5 [ 73.680496][ T7159] netlink: 68 bytes leftover after parsing attributes in process `syz.2.319'. [ 73.703576][ T7159] 9pnet_fd: Insufficient options for proto=fd [ 73.885205][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'. [ 73.965847][ T7206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.328'. [ 73.968558][ T7209] usb usb9: usbfs: process 7209 (syz.2.329) did not claim interface 0 before use [ 73.971548][ T7209] nbd: couldn't find a device at index -1605786504 [ 74.002765][ T7214] overlay: filesystem on ./bus not supported as upperdir [ 74.433713][ T6052] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 74.593690][ T6052] usb 7-1: Using ep0 maxpacket: 8 [ 74.597971][ T6052] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 74.600827][ T6052] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.604084][ T6052] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.607719][ T6052] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.612089][ T6052] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.612130][ T6052] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.620530][ T6052] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.673188][ T7227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.334'. [ 74.729822][ T7238] program syz.1.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.730522][ T7239] program syz.1.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.735518][ T7236] input: syz1 as /devices/virtual/input/input8 [ 74.795945][ T1027] cfg80211: failed to load regulatory.db [ 74.827262][ T6052] usb 7-1: usb_control_msg returned -32 [ 74.829134][ T6052] usbtmc 7-1:16.0: can't read capabilities [ 74.845434][ T6052] usb 7-1: USB disconnect, device number 4 [ 74.978164][ T7260] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 75.101795][ T7281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7281 comm=syz.0.350 [ 75.153270][ T7288] binder: 7287:7288 ioctl 4018620d 0 returned -22 [ 75.308160][ T7305] netlink: 'syz.0.359': attribute type 1 has an invalid length. [ 75.505584][ T7321] binder: 7320:7321 ioctl c0306201 0 returned -14 [ 75.558458][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.368'. [ 75.563569][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.368'. [ 75.575831][ T7333] vlan2: entered promiscuous mode [ 75.577570][ T7333] vlan2: entered allmulticast mode [ 75.579254][ T7333] hsr_slave_1: entered allmulticast mode [ 75.584926][ T7335] netlink: 152 bytes leftover after parsing attributes in process `syz.3.370'. [ 75.620134][ T7341] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.623114][ T7341] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.764230][ T7353] binder: 7352:7353 ioctl c0306201 200000000040 returned -22 [ 75.779587][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'. [ 75.841002][ T7363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 75.886795][ T7366] loop3: detected capacity change from 0 to 7 [ 75.893320][ T7366] Dev loop3: unable to read RDB block 7 [ 75.897564][ T7366] loop3: unable to read partition table [ 75.900219][ T7366] loop3: partition table beyond EOD, truncated [ 75.902931][ T7366] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 75.973566][ T7371] tipc: Can't bind to reserved service type 2 [ 76.128179][ T7381] netlink: 'syz.2.384': attribute type 7 has an invalid length. [ 76.131150][ T7381] netlink: 'syz.2.384': attribute type 8 has an invalid length. [ 76.145157][ T7383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.372492][ T7405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7405 comm=syz.0.389 [ 76.392594][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.392651][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.683451][ T7448] xfrm0 speed is unknown, defaulting to 1000 [ 77.023819][ T5967] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.026826][ T5972] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 77.060497][ T7494] geneve1: entered allmulticast mode [ 77.160232][ T7503] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 77.165366][ T7503] tmpfs: Bad value for 'mpol' [ 77.167781][ T7503] netlink: 'syz.1.410': attribute type 7 has an invalid length. [ 77.170432][ T7503] netlink: 'syz.1.410': attribute type 8 has an invalid length. [ 77.205617][ T7505] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 77.234507][ T7505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.944075][ T7473] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 78.944193][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.950321][ T7473] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 79.762186][ T7473] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.766910][ T7473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.768943][ T7473] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.772396][ T7473] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.777296][ T7473] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.779393][ T7473] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.782643][ T7473] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.829408][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 79.829422][ T40] audit: type=1400 audit(1757973802.673:32618): avc: denied { read } for pid=7510 comm="syz.3.414" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 79.842245][ T40] audit: type=1400 audit(1757973802.683:32619): avc: denied { open } for pid=7510 comm="syz.3.414" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 79.855003][ T40] audit: type=1400 audit(1757973802.683:32620): avc: denied { ioctl } for pid=7510 comm="syz.3.414" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 79.867415][ T7517] new mount options do not match the existing superblock, will be ignored [ 79.888575][ T40] audit: type=1400 audit(1757973802.733:32621): avc: denied { unmount } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.961388][ T40] audit: type=1400 audit(1757973802.803:32622): avc: denied { append } for pid=7528 comm="syz.2.418" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.043770][ T1027] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 80.183705][ T1027] usb 6-1: device descriptor read/64, error -71 [ 80.447967][ T7548] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7548 comm=syz.2.425 [ 80.452371][ T40] audit: type=1400 audit(1757973803.293:32623): avc: denied { write } for pid=7549 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.460651][ T7548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1811 sclass=netlink_route_socket pid=7548 comm=syz.2.425 [ 80.461512][ T40] audit: type=1400 audit(1757973803.293:32624): avc: denied { ioctl } for pid=7546 comm="syz.1.424" path="/dev/usbmon5" dev="devtmpfs" ino=753 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.532569][ T40] audit: type=1400 audit(1757973803.373:32625): avc: denied { watch_mount } for pid=7564 comm="syz.3.429" path="/92" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.544513][ T40] audit: type=1400 audit(1757973803.383:32626): avc: denied { watch_reads } for pid=7564 comm="syz.3.429" path="/92" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.548828][ T7561] batadv_slave_0: entered promiscuous mode [ 80.557935][ T7561] batadv_slave_0: left promiscuous mode [ 80.624840][ T7572] pimreg3: entered allmulticast mode [ 80.631545][ T5972] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 80.635935][ T7572] netlink: 'syz.3.433': attribute type 1 has an invalid length. [ 80.699809][ T7581] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 80.710243][ T40] audit: type=1400 audit(1757973803.553:32627): avc: denied { mount } for pid=7576 comm="syz.1.436" name="/" dev="9p" ino=71827741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.720750][ T7585] __nla_validate_parse: 10 callbacks suppressed [ 80.720763][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 80.737450][ C3] vcan0: j1939_xtp_rx_dat: no tx connection found [ 80.739571][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.742083][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.744591][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.747028][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.749702][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.752551][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.755184][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.757793][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.760303][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.763083][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.766301][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.769111][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.771916][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.775213][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.777336][ T57] hid_parser_main: 226 callbacks suppressed [ 80.777350][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.778328][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.780565][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.783432][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.787084][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.790065][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.796525][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.799383][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.803951][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.806689][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.808249][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.808272][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.808313][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.808332][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.808354][ T57] hid-generic 0007:FFFFFFFC:0009.0006: unknown main item tag 0x0 [ 80.817740][ T57] hid-generic 0007:FFFFFFFC:0009.0006: hidraw1: HID v0.09 Device [syz1] on syz0 [ 80.818167][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.834217][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.836753][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.839405][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.842235][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.845947][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.848644][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.851147][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.853597][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.856119][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.858525][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.860867][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.863332][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.865959][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.868532][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.870972][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.873430][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.875978][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.878426][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.880838][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.883527][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.886041][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.888528][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.891023][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.893597][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.896090][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.898568][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.901009][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.903600][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.906209][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.908698][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.911000][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.913423][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.915900][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.918352][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.920763][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.923226][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.925796][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.928240][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.930693][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.933149][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.935612][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.938076][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.940404][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.942777][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.945172][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.947648][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.950211][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.952682][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.955202][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.957657][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.960075][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.962510][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.964993][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.967363][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.969811][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.972262][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.974777][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.977260][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.979663][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.982158][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.984779][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.987248][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.989646][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.992021][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.994487][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.996941][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.999344][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.001741][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.004177][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.006621][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.009061][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.011492][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.013935][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.016377][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.018754][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.021148][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.023461][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.023736][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.025960][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.030943][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.033331][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.035806][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.038243][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.040656][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.043086][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.045537][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.048013][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.050477][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.052861][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.055199][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.057512][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.059882][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.062260][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.064645][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.067022][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.069404][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.071833][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.074291][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.076716][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.079136][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.081598][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.084031][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.086409][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.088789][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.091235][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.093601][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.096039][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.098426][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.116062][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.436'. [ 81.124944][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.168438][ T7606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.443'. [ 81.171748][ T7609] netlink: 72 bytes leftover after parsing attributes in process `syz.0.442'. [ 81.240511][ T7615] net_ratelimit: 10 callbacks suppressed [ 81.240530][ T7615] openvswitch: netlink: IP tunnel TTL not specified. [ 81.241219][ T7617] QAT: Device 2 not found [ 81.244815][ T7618] overlayfs: failed to resolve './file0/file0': -2 [ 81.248471][ T7615] overlayfs: failed to resolve './file0/file0': -2 [ 81.267314][ T7615] binder: BINDER_SET_CONTEXT_MGR already set [ 81.271275][ T7615] binder: 7614:7615 ioctl 4018620d 200000000040 returned -16 [ 81.668467][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 81.691410][ T7667] 9pnet_virtio: no channels available for device syz [ 81.727722][ T7676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=63687 sclass=netlink_audit_socket pid=7676 comm=syz.1.463 [ 81.822814][ T7686] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 81.825999][ T5972] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.826046][ T5967] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.828573][ T7686] cramfs: wrong magic [ 81.986557][ T7699] block nbd2: Attempted send on invalid socket [ 81.989014][ T7699] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.993444][ T7699] block nbd2: Attempted send on invalid socket [ 81.996261][ T7699] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.999245][ T7699] Mount JFS Failure: -5 [ 82.000736][ T7699] jfs_mount failed w/return code = -5 [ 82.006864][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 82.101070][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 82.104100][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 82.396378][ T7716] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 82.399203][ T7716] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 82.403451][ T7716] vhci_hcd vhci_hcd.0: Device attached [ 82.436127][ T7722] mac80211_hwsim hwsim6 : renamed from wlan1 (while UP) [ 82.644508][ T6716] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 82.729292][ T7732] kvm: kvm [7731]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 82.732475][ T7732] kvm: kvm [7731]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 83.103746][ T5967] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.191215][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 83.222745][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.489'. [ 83.303888][ T838] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.372651][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.378104][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.454190][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 83.464149][ T838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.468230][ T838] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.471867][ T838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 83.473193][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.475502][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.475543][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.478357][ T838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 83.484168][ T5972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.490762][ T838] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 83.493867][ T5972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.497162][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.499476][ T5972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.504428][ T5972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.512207][ T7770] ref_ctr increment failed for inode: 0x2ec offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802cbea040 [ 83.512287][ T838] hub 7-1:1.0: bad descriptor, ignoring hub [ 83.520608][ T838] hub 7-1:1.0: probe with driver hub failed with error -5 [ 83.524222][ T838] cdc_wdm 7-1:1.0: skipping garbage [ 83.526400][ T838] cdc_wdm 7-1:1.0: skipping garbage [ 83.529484][ T7767] xfrm0 speed is unknown, defaulting to 1000 [ 83.531845][ T838] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 83.534902][ T838] cdc_wdm 7-1:1.0: Unknown control protocol [ 83.559022][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.562468][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.656335][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.659280][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.671873][ T7767] chnl_net:caif_netlink_parms(): no params data found [ 83.804481][ T5972] Bluetooth: hci1: unexpected event for opcode 0x080c [ 83.821009][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.823383][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.831671][ T7767] bridge_slave_0: entered allmulticast mode [ 83.842440][ T7767] bridge_slave_0: entered promiscuous mode [ 83.850288][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.853133][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.856744][ T7767] bridge_slave_1: entered allmulticast mode [ 83.859608][ T7767] bridge_slave_1: entered promiscuous mode [ 83.900059][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.913993][ T5972] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.925625][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.964238][ T7747] delete_channel: no stack [ 83.990392][ T7767] team0: Port device team_slave_0 added [ 83.995382][ T7767] team0: Port device team_slave_1 added [ 84.052861][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.055890][ T29] usb 7-1: USB disconnect, device number 5 [ 84.056584][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.069779][ T7767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.076950][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.080006][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.090326][ T7767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.097981][ T12] bridge_slave_1: left allmulticast mode [ 84.100697][ T12] bridge_slave_1: left promiscuous mode [ 84.105133][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.112666][ T12] bridge_slave_0: left allmulticast mode [ 84.114836][ T12] bridge_slave_0: left promiscuous mode [ 84.117682][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.256992][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 84.548162][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.553212][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.560038][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 84.574170][ T12] bond0 (unregistering): Released all slaves [ 84.580384][ T12] bond1 (unregistering): Released all slaves [ 84.644644][ T12] bond2 (unregistering): Released all slaves [ 84.688618][ T7719] vhci_hcd: connection reset by peer [ 84.693457][ T7786] tipc: Started in network mode [ 84.695235][ T1157] vhci_hcd: stop threads [ 84.695838][ T1157] vhci_hcd: release socket [ 84.696655][ T1157] vhci_hcd: disconnect device [ 84.701692][ T7786] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 84.706531][ T7786] tipc: Enabled bearer , priority 10 [ 84.727410][ T7767] hsr_slave_0: entered promiscuous mode [ 84.730361][ T7767] hsr_slave_1: entered promiscuous mode [ 84.732842][ T7767] debugfs: 'hsr0' already exists in 'hsr' [ 84.736369][ T7767] Cannot create hsr debugfs directory [ 84.905946][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 84.905963][ T40] audit: type=1400 audit(1757973807.753:32654): avc: denied { ioctl } for pid=7817 comm="syz.2.505" path="socket:[18997]" dev="sockfs" ino=18997 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.918408][ T7819] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 84.920594][ T7819] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.932282][ T7819] vhci_hcd vhci_hcd.0: Device attached [ 84.963497][ T7767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.967977][ T7767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.972276][ T7767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.978757][ T7767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.063093][ T7824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.084446][ T7767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.097203][ T7767] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.102126][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.104541][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.124922][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.127646][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.139065][ T12] hsr_slave_0: left promiscuous mode [ 85.141376][ T12] hsr_slave_1: left promiscuous mode [ 85.143275][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.146174][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.149370][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.151720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.165248][ T34] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 85.172383][ T12] veth1_macvtap: left promiscuous mode [ 85.173765][ T53] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.174638][ T12] veth0_macvtap: left promiscuous mode [ 85.179038][ T12] veth1_vlan: left promiscuous mode [ 85.180840][ T12] veth0_vlan: left promiscuous mode [ 85.287027][ T7849] netlink: 'syz.2.509': attribute type 4 has an invalid length. [ 85.323833][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 85.328019][ T53] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 85.331764][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.336124][ T53] usb 5-1: config 0 has no interfaces? [ 85.339191][ T53] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 85.343196][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.350874][ T53] usb 5-1: config 0 descriptor?? [ 85.350982][ T7852] input: syz0 as /devices/virtual/input/input9 [ 85.511761][ T40] audit: type=1400 audit(1757973808.353:32655): avc: denied { lock } for pid=7848 comm="syz.2.509" path="socket:[18370]" dev="sockfs" ino=18370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 85.560566][ T7820] usb 37-1: recv xbuf, 0 [ 85.565964][ T13] vhci_hcd: stop threads [ 85.567372][ T13] vhci_hcd: release socket [ 85.568823][ T13] vhci_hcd: disconnect device [ 85.568961][ T53] usb 5-1: string descriptor 0 read error: -71 [ 85.584249][ T5972] Bluetooth: hci2: command tx timeout [ 85.590033][ T53] usb 5-1: USB disconnect, device number 6 [ 85.633692][ T34] vhci_hcd: vhci_device speed not set [ 85.756275][ T12] team0 (unregistering): Port device team_slave_1 removed [ 85.809382][ T12] team0 (unregistering): Port device team_slave_0 removed [ 85.838515][ T10] tipc: Node number set to 4269801488 [ 85.984577][ T5972] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.112408][ T40] audit: type=1400 audit(1757973808.953:32656): avc: denied { setattr } for pid=7867 comm="syz.0.510" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.358133][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.361207][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.478901][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.660895][ T7875] pimreg3: entered allmulticast mode [ 86.664116][ T1157] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.671860][ T1157] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.682596][ T1157] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.694752][ T1144] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.696085][ T7868] xfrm0 speed is unknown, defaulting to 1000 [ 86.828245][ T7894] trusted_key: encrypted_key: master key parameter is missing [ 86.917360][ T7767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.926869][ T40] audit: type=1400 audit(1757973809.773:32657): avc: denied { append } for pid=7904 comm="syz.0.518" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 86.930698][ T7905] pimreg: entered allmulticast mode [ 86.935996][ T40] audit: type=1400 audit(1757973809.773:32658): avc: denied { ioctl } for pid=7904 comm="syz.0.518" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x3e04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 86.951855][ T1024] IPVS: starting estimator thread 0... [ 87.063822][ T7910] IPVS: using max 44 ests per chain, 105600 per kthread [ 87.236439][ T7936] netlink: 'syz.3.523': attribute type 62 has an invalid length. [ 87.238804][ T7936] __nla_validate_parse: 2 callbacks suppressed [ 87.238813][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 87.250406][ T7767] veth0_vlan: entered promiscuous mode [ 87.267460][ T7767] veth1_vlan: entered promiscuous mode [ 87.294579][ T7767] veth0_macvtap: entered promiscuous mode [ 87.299608][ T40] audit: type=1400 audit(1757973810.143:32659): avc: denied { getopt } for pid=7940 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.312679][ T7767] veth1_macvtap: entered promiscuous mode [ 87.337751][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.358357][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.394067][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.397159][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.427053][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.427683][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.510561][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.517367][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.530545][ T7950] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 87.548182][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.551379][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.569737][ T40] audit: type=1400 audit(1757973810.413:32660): avc: denied { mounton } for pid=7767 comm="syz-executor" path="/syzkaller.4EV3Fv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 87.578408][ T40] audit: type=1400 audit(1757973810.413:32661): avc: denied { mounton } for pid=7767 comm="syz-executor" path="/syzkaller.4EV3Fv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 87.590836][ T40] audit: type=1400 audit(1757973810.433:32662): avc: denied { mounton } for pid=7767 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 87.605419][ T7957] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.529'. [ 87.609450][ T7957] openvswitch: netlink: Message has 5 unknown bytes. [ 87.663726][ T5972] Bluetooth: hci2: command tx timeout [ 87.690527][ T7968] openvswitch: netlink: IPv4 frag type 36 is out of range max 2 [ 87.733718][ T6716] vhci_hcd: vhci_device speed not set [ 87.778022][ T40] audit: type=1400 audit(1757973810.623:32663): avc: denied { ioctl } for pid=7980 comm="syz.2.535" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 87.966948][ T7993] syz.0.540 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 88.029961][ T8002] overlayfs: failed to resolve 'verity=require': -2 [ 88.033106][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 88.076385][ T8004] pim6reg1: entered promiscuous mode [ 88.078120][ T8004] pim6reg1: entered allmulticast mode [ 88.192923][ T8012] trusted_key: syz.2.543 sent an empty control message without MSG_MORE. [ 88.404310][ T1024] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 88.565866][ T1024] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 88.569168][ T1024] usb 5-1: config 0 has no interface number 0 [ 88.571398][ T1024] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.575697][ T1024] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 88.579470][ T1024] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 88.584191][ T1024] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 88.588690][ T1024] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 88.593089][ T1024] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.598496][ T1024] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 88.602183][ T1024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.607045][ T1024] usb 5-1: config 0 descriptor?? [ 88.609176][ T8013] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.611407][ T8013] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.615824][ T1024] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 88.819624][ T8013] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 88.825683][ T8013] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 88.830467][ T6716] usb 5-1: USB disconnect, device number 7 [ 88.835784][ T6716] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 88.923050][ T8019] overlay: Unknown parameter ':' [ 89.014942][ T8022] Invalid ELF header type: 0 != 1 [ 89.094704][ T8029] warning: `syz.3.551' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.110001][ T8030] : entered promiscuous mode [ 89.115092][ T8030] : left promiscuous mode [ 89.345112][ T8039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=8039 comm=syz.2.554 [ 89.350259][ T8044] netlink: 84 bytes leftover after parsing attributes in process `syz.2.554'. [ 89.607321][ T8064] tipc: Started in network mode [ 89.609037][ T8064] tipc: Node identity 5a779fe8293a, cluster identity 4711 [ 89.613547][ T8064] tipc: Enabled bearer , priority 0 [ 89.616527][ T8064] syzkaller0: entered promiscuous mode [ 89.618734][ T8064] syzkaller0: entered allmulticast mode [ 89.651510][ T8064] tipc: Resetting bearer [ 89.655449][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 89.664327][ T8063] tipc: Resetting bearer [ 89.704679][ T8063] tipc: Disabling bearer [ 89.743846][ T5972] Bluetooth: hci2: command tx timeout [ 89.835081][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 89.963205][ T8066] team0 (unregistering): Port device team_slave_0 removed [ 89.970138][ T8066] team0 (unregistering): Port device team_slave_1 removed [ 90.123694][ T8083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.569'. [ 90.163796][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 90.163807][ T40] audit: type=1400 audit(1757973813.003:32675): avc: denied { watch } for pid=8084 comm="syz.2.570" path="/135" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.219475][ T8097] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 90.222364][ T40] audit: type=1400 audit(1757973813.063:32676): avc: denied { getopt } for pid=8096 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 90.225185][ T8098] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 90.265214][ T8105] netlink: 'syz.2.575': attribute type 4 has an invalid length. [ 90.332957][ T40] audit: type=1400 audit(1757973813.173:32677): avc: denied { create } for pid=8107 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 90.364757][ T40] audit: type=1400 audit(1757973813.213:32678): avc: denied { mount } for pid=8112 comm="syz.4.577" name="/" dev="rpc_pipefs" ino=22627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 90.403490][ T8121] bridge_slave_0: invalid flags given to default FDB implementation [ 90.492275][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 90.498880][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 90.550766][ T40] audit: type=1400 audit(1757973813.393:32679): avc: denied { append } for pid=8128 comm="syz.2.582" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.552189][ T8129] netlink: 132 bytes leftover after parsing attributes in process `syz.2.582'. [ 90.735910][ T40] audit: type=1400 audit(1757973813.573:32680): avc: denied { setopt } for pid=8134 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.805943][ T8141] block nbd2: NBD_DISCONNECT [ 90.823036][ T5378] udevd[5378]: worker [6061] terminated by signal 33 (Unknown signal 33) [ 90.827327][ T5378] udevd[5378]: worker [6061] failed while handling '/devices/virtual/block/loop2' [ 90.943769][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 90.968963][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049f17800: rx timeout, send abort [ 90.973114][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049f17c00: rx timeout, send abort [ 90.977140][ T8152] kvm: pic: level sensitive irq not supported [ 90.977525][ T8152] kvm: pic: non byte read [ 90.981984][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888049f17800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.982026][ T40] audit: type=1400 audit(1757973813.823:32681): avc: denied { accept } for pid=8150 comm="syz.3.590" lport=50152 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.987994][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888049f17c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 91.000888][ T40] audit: type=1400 audit(1757973813.823:32682): avc: denied { setopt } for pid=8150 comm="syz.3.590" lport=50152 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 91.008108][ T40] audit: type=1400 audit(1757973813.823:32683): avc: denied { read } for pid=5360 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 91.014986][ T40] audit: type=1400 audit(1757973813.823:32684): avc: denied { search } for pid=5360 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.198454][ T8192] binder: 8191:8192 unknown command 0 [ 91.200841][ T8192] binder: 8191:8192 ioctl c0306201 200000000080 returned -22 [ 91.205685][ T8192] binder: 8191:8192 unknown command 0 [ 91.207936][ T8192] binder: 8191:8192 ioctl c0306201 2000000001c0 returned -22 [ 91.225698][ T8196] futex_wake_op: syz.3.603 tries to shift op by -1; fix this program [ 91.500399][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.502754][ T8207] batadv0: mtu less than device minimum [ 91.506736][ T8207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 91.510523][ T8207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 91.514223][ T8207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 91.517835][ T8207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 91.521442][ T8207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 91.598226][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.774088][ T8236] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 91.812254][ T8245] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 91.839478][ T8248] netlink: 'syz.4.619': attribute type 2 has an invalid length. [ 91.855519][ T8245] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 91.891715][ T8245] veth5: entered promiscuous mode [ 91.915378][ T8245] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 91.994607][ T8266] xfrm0 speed is unknown, defaulting to 1000 [ 92.046270][ T8273] binder: 8272:8273 ioctl 4018620d 0 returned -22 [ 92.060718][ T8277] dlm: non-version read from control device 0 [ 92.092380][ T8284] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 92.094555][ T8284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.104461][ T8284] vhci_hcd vhci_hcd.0: Device attached [ 92.108004][ T8285] vhci_hcd: unknown pdu 1 [ 92.111476][ T1152] vhci_hcd: stop threads [ 92.112815][ T1152] vhci_hcd: release socket [ 92.113544][ T8290] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 92.115385][ T1152] vhci_hcd: disconnect device [ 92.116952][ T8290] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.121720][ T8290] vhci_hcd vhci_hcd.0: Device attached [ 92.131022][ T8291] vhci_hcd: unknown pdu 1 [ 92.133224][ T1147] vhci_hcd: stop threads [ 92.134722][ T1147] vhci_hcd: release socket [ 92.136127][ T1147] vhci_hcd: disconnect device [ 92.575123][ T8303] usb usb9: usbfs: process 8303 (syz.4.634) did not claim interface 0 before use [ 92.578011][ T8304] usb usb9: usbfs: process 8304 (syz.4.634) did not claim interface 0 before use [ 92.645136][ T8308] xfrm0 speed is unknown, defaulting to 1000 [ 92.690532][ T8308] __nla_validate_parse: 6 callbacks suppressed [ 92.690544][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 92.696055][ T8308] net_ratelimit: 15 callbacks suppressed [ 92.696065][ T8308] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 92.701600][ T8308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.934145][ T8340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 92.969704][ T8336] netlink: 'syz.4.642': attribute type 1 has an invalid length. [ 92.971049][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 92.973086][ T8336] netlink: 224 bytes leftover after parsing attributes in process `syz.4.642'. [ 92.982030][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 93.116289][ T8366] netlink: 'syz.3.650': attribute type 13 has an invalid length. [ 93.129659][ T8367] netlink: 'syz.3.650': attribute type 13 has an invalid length. [ 93.160002][ T8376] 9pnet_fd: Insufficient options for proto=fd [ 93.162257][ T8377] 9pnet_fd: Insufficient options for proto=fd [ 93.196029][ T8380] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 93.258722][ T8384] binder: 8381:8384 ioctl c018620c 200000000240 returned -22 [ 93.360568][ T1024] hid_parser_main: 241 callbacks suppressed [ 93.360586][ T1024] hid-generic 0000:0003:0006.0007: unknown main item tag 0x7 [ 93.366798][ T1024] hid-generic 0000:0003:0006.0007: unknown main item tag 0x6 [ 93.369194][ T1024] hid-generic 0000:0003:0006.0007: unknown main item tag 0x6 [ 93.371480][ T1024] hid-generic 0000:0003:0006.0007: item fetching failed at offset 33/57 [ 93.374804][ T1024] hid-generic 0000:0003:0006.0007: probe with driver hid-generic failed with error -22 [ 93.430557][ T8392] ocfs2: Unknown parameter 'grpquotaO' [ 93.453739][ T6042] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 93.476172][ T8395] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 93.488026][ T8395] kvm: pic: level sensitive irq not supported [ 93.488769][ T8395] kvm: pic: non byte read [ 93.616280][ T6042] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.619703][ T6042] usb 9-1: config 0 has no interfaces? [ 93.621618][ T6042] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.624883][ T6042] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.629248][ T6042] usb 9-1: config 0 descriptor?? [ 93.686718][ T5972] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 93.835141][ T8383] bridge0: port 3(veth0_to_bridge) entered blocking state [ 93.838346][ T8383] bridge0: port 3(veth0_to_bridge) entered disabled state [ 93.841086][ T8383] veth0_to_bridge: entered allmulticast mode [ 93.844087][ T8383] veth0_to_bridge: entered promiscuous mode [ 93.846305][ T8383] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.850604][ T8383] bridge0: port 3(veth0_to_bridge) entered blocking state [ 93.853285][ T8383] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 93.857564][ T8383] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.654'. [ 93.864676][ T1024] usb 9-1: USB disconnect, device number 2 [ 94.385660][ T5972] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 94.388816][ T5972] Bluetooth: hci2: Injecting HCI hardware error event [ 94.392136][ T5972] Bluetooth: hci2: hardware error 0x00 [ 94.414827][ T8409] SELinux: ebitmap: truncated map [ 94.420027][ T8409] SELinux: failed to load policy [ 94.428092][ T8409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.475133][ T8416] netlink: 'syz.4.663': attribute type 2 has an invalid length. [ 94.512994][ T8420] dummy0: entered allmulticast mode [ 94.514457][ T8418] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 94.518700][ T8418] CUSE: unknown device info "" [ 94.520564][ T8418] CUSE: zero length info key specified [ 94.544212][ T8425] BIDI support in bsg has been removed. [ 94.569166][ T8427] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.666'. [ 94.587497][ T8430] could not allocate digest TFM handle sha512-arm [ 94.867912][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 94.870822][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 94.901726][ T8463] netlink: 'syz.3.675': attribute type 10 has an invalid length. [ 94.904818][ T8463] syz_tun: entered promiscuous mode [ 94.908576][ T8463] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 94.963882][ T8467] binder: BINDER_SET_CONTEXT_MGR already set [ 94.966113][ T8467] binder: 8466:8467 ioctl 4018620d 2000000000c0 returned -16 [ 94.966958][ T8468] binder: BINDER_SET_CONTEXT_MGR already set [ 94.970474][ T8468] binder: 8466:8468 ioctl 4018620d 200000000280 returned -16 [ 94.970536][ T8467] binder: BINDER_SET_CONTEXT_MGR already set [ 94.975225][ T8467] binder: 8466:8467 ioctl 4018620d 2000000000c0 returned -16 [ 94.975325][ T8468] binder: BINDER_SET_CONTEXT_MGR already set [ 94.980132][ T8468] binder: 8466:8468 ioctl 4018620d 200000000280 returned -16 [ 94.980170][ T8467] binder: BINDER_SET_CONTEXT_MGR already set [ 94.985281][ T8467] binder: 8466:8467 ioctl 4018620d 2000000000c0 returned -16 [ 94.985517][ T8468] binder: BINDER_SET_CONTEXT_MGR already set [ 94.990420][ T8468] binder: 8466:8468 ioctl 4018620d 200000000280 returned -16 [ 94.990466][ T8467] binder: BINDER_SET_CONTEXT_MGR already set [ 94.994995][ T8467] binder: 8466:8467 ioctl 4018620d 2000000000c0 returned -16 [ 94.995167][ T8468] binder: BINDER_SET_CONTEXT_MGR already set [ 95.001354][ T8468] binder: 8466:8468 ioctl 4018620d 200000000280 returned -16 [ 95.001450][ T8467] binder: BINDER_SET_CONTEXT_MGR already set [ 95.006085][ T8467] binder: 8466:8467 ioctl 4018620d 2000000000c0 returned -16 [ 95.006114][ T8468] binder: BINDER_SET_CONTEXT_MGR already set [ 95.011207][ T8468] binder: 8466:8468 ioctl 4018620d 200000000280 returned -16 [ 95.011238][ T8467] binder: BINDER_SET_CONTEXT_MGR already set [ 95.016399][ T8467] binder: 8466:8467 ioctl 4018620d 2000000000c0 returned -16 [ 95.016485][ T8468] binder: BINDER_SET_CONTEXT_MGR already set [ 95.021284][ T8468] binder: 8466:8468 ioctl 4018620d 200000000280 returned -16 [ 95.021309][ T8467] binder: BINDER_SET_CONTEXT_MGR already set [ 95.026653][ T8467] binder: 8466:8467 ioctl 4018620d 2000000000c0 returned -16 [ 95.062429][ T8472] netlink: 57 bytes leftover after parsing attributes in process `syz.3.678'. [ 95.569851][ T8486] netlink: 'syz.3.682': attribute type 58 has an invalid length. [ 95.596455][ T8489] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 95.599351][ T8489] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.603063][ T8489] vhci_hcd vhci_hcd.0: Device attached [ 95.607953][ T8490] vhci_hcd: unknown pdu 2 [ 95.613816][ T1157] vhci_hcd: stop threads [ 95.616349][ T1157] vhci_hcd: release socket [ 95.618261][ T1157] vhci_hcd: disconnect device [ 95.675367][ T6042] libceph: connect (1)[c::]:6789 error -22 [ 95.678320][ T6042] libceph: mon0 (1)[c::]:6789 connect error [ 95.682951][ T6042] libceph: connect (1)[c::]:6789 error -22 [ 95.686696][ T6042] libceph: mon0 (1)[c::]:6789 connect error [ 95.711551][ T8498] netlink: 'syz.3.685': attribute type 15 has an invalid length. [ 95.722836][ T1147] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.722845][ T8498] netlink: 'syz.3.685': attribute type 15 has an invalid length. [ 95.725699][ T1147] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.731524][ T1147] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.734832][ T1147] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 95.741563][ T6033] libceph: connect (1)[c::]:6789 error -22 [ 95.744803][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 95.813802][ T57] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 95.945373][ T1027] libceph: connect (1)[c::]:6789 error -22 [ 95.947376][ T1027] libceph: mon0 (1)[c::]:6789 connect error [ 95.963724][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 95.968877][ T57] usb 9-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 16 [ 95.972830][ T57] usb 9-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.978384][ T57] usb 9-1: config 1 interface 0 has no altsetting 0 [ 95.983125][ T57] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 95.986874][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.990245][ T57] usb 9-1: Product: syz [ 95.992033][ T57] usb 9-1: Manufacturer: ᘊ㾃᜕쌢䣹酝ćꔥ鎔腨汾걄ཊ웏ꏝ桰㯓⤷쒅ꇚ峕♹໤냱ᲁ쎊囘芊抻鳈瀻޳신柮讓ﻜପ鏈뫾㳬蚢䃢궎꿯日쮝䇗晜歝궛ꉖ柖춪疍룟噪ᒓ┕韫됨廸飨啢류൧뛄ϑ죒䁛꧋뭀贼⺳鑢ャὁ [ 96.002524][ T57] usb 9-1: SerialNumber: syz [ 96.004048][ T6033] libceph: connect (1)[c::]:6789 error -22 [ 96.007116][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 96.008129][ T8487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 96.212511][ T8507] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 96.377349][ T8518] hsr_slave_1 (unregistering): left promiscuous mode [ 96.464031][ T5972] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 96.464093][ T1027] libceph: connect (1)[c::]:6789 error -22 [ 96.469024][ T1027] libceph: mon0 (1)[c::]:6789 connect error [ 96.469693][ T8524] fuse: Bad value for 'fd' [ 96.491990][ T8498] ceph: No mds server is up or the cluster is laggy [ 96.492050][ T8495] ceph: No mds server is up or the cluster is laggy [ 96.514060][ T6033] libceph: connect (1)[c::]:6789 error -22 [ 96.516688][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 97.172708][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 97.172719][ T40] audit: type=1400 audit(1757973820.013:32727): avc: denied { connect } for pid=8526 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 97.182204][ T40] audit: type=1400 audit(1757973820.013:32728): avc: denied { bind } for pid=8529 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.276958][ T40] audit: type=1400 audit(1757973820.123:32729): avc: denied { relabelfrom } for pid=8540 comm="syz.0.697" name="" dev="pipefs" ino=25691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 97.382975][ T8564] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.428215][ T8570] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.455929][ T8576] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.460554][ T8576] qnx4: unable to read the superblock [ 97.536966][ T8586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8586 comm=syz.2.704 [ 97.547403][ T8589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.556114][ T8589] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 98.101971][ T40] audit: type=1400 audit(1757973820.943:32730): avc: denied { mount } for pid=8605 comm="syz.2.708" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 98.111281][ T40] audit: type=1400 audit(1757973820.943:32731): avc: denied { search } for pid=8605 comm="syz.2.708" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.121022][ T40] audit: type=1400 audit(1757973820.943:32732): avc: denied { search } for pid=8605 comm="syz.2.708" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.130438][ T40] audit: type=1400 audit(1757973820.943:32733): avc: denied { search } for pid=8605 comm="syz.2.708" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.147590][ T40] audit: type=1400 audit(1757973820.993:32734): avc: denied { write } for pid=8607 comm="syz.2.710" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 98.244013][ T8609] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 98.450849][ T40] audit: type=1400 audit(1757973821.293:32735): avc: denied { append } for pid=8632 comm="syz.0.715" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.453299][ T8634] loop6: detected capacity change from 0 to 7 [ 98.463169][ T8634] Dev loop6: unable to read RDB block 7 [ 98.475986][ T8634] loop6: AHDI p3 p4 [ 98.477302][ T8634] loop6: partition table partially beyond EOD, truncated [ 98.479620][ T8634] loop6: p3 start 1886353253 is beyond EOD, truncated [ 98.526972][ T57] usb 9-1: USB disconnect, device number 3 [ 98.531098][ T40] audit: type=1400 audit(1757973821.373:32736): avc: denied { watch watch_reads } for pid=8639 comm="syz.3.718" path="/159/file0" dev="tmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.577990][ T8643] batman_adv: batadv0: Interface deactivated: dummy0 [ 98.578696][ T8649] __nla_validate_parse: 7 callbacks suppressed [ 98.578706][ T8649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.719'. [ 98.584434][ T8648] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 98.602542][ T8651] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8651 comm=syz.4.720 [ 98.621423][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.664598][ T8655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8655 comm=syz.4.720 [ 98.710594][ T8643] veth5: left promiscuous mode [ 98.716828][ T1152] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.719870][ T1152] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.724316][ T1152] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.728055][ T1152] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.731709][ T1152] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.738104][ T1152] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.742146][ T1152] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.746671][ T1152] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.895378][ T8685] o2cb: This node has not been configured. [ 98.897431][ T8685] o2cb: Cluster check failed. Fix errors before retrying. [ 98.898655][ T8681] "syz.2.727" (8681) uses obsolete ecb(arc4) skcipher [ 98.901570][ T8685] (syz.3.730,8685,3):user_dlm_register:674 ERROR: status = -22 [ 98.907428][ T8685] (syz.3.730,8685,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 98.980585][ T8688] tipc: Enabled bearer , priority 0 [ 98.988100][ T8687] tipc: Resetting bearer [ 99.895978][ T8687] tipc: Disabling bearer [ 100.007102][ T8723] tmpfs: Invalid gid '0x00000000ffffffff' [ 100.064288][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.064385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 100.068294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.071940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.072889][ T8733] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.075657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.079311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.082244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.086014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 100.089709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.142652][ T8731] netlink: 720 bytes leftover after parsing attributes in process `syz.0.742'. [ 100.160246][ T8731] veth6: entered promiscuous mode [ 100.452520][ T8752] fuse: Bad value for 'group_id' [ 100.464101][ T8752] fuse: Bad value for 'group_id' [ 100.778311][ T8768] No control pipe specified [ 100.826557][ T8770] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.754'. [ 100.959465][ T8777] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 100.962005][ T8777] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 100.966190][ T8777] vhci_hcd vhci_hcd.0: Device attached [ 100.974218][ T8777] netlink: 'syz.2.757': attribute type 11 has an invalid length. [ 100.982872][ T8777] vhci_hcd vhci_hcd.0: port 0 already used [ 100.987168][ T8778] vhci_hcd: connection closed [ 100.989377][ T86] vhci_hcd: stop threads [ 101.001743][ T86] vhci_hcd: release socket [ 101.003823][ T86] vhci_hcd: disconnect device [ 101.016847][ T8783] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 101.029273][ T5972] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.038987][ T8783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.758'. [ 101.043017][ T8783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.758'. [ 101.187515][ T1024] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 101.216568][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 101.220130][ T8793] erspan0: entered promiscuous mode [ 101.222304][ T8793] erspan0: entered allmulticast mode [ 101.336115][ T1024] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.340488][ T1024] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.347776][ T1024] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.350676][ T1024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.560248][ T1024] usb 9-1: usb_control_msg returned -32 [ 101.564119][ T1024] usbtmc 9-1:16.0: can't read capabilities [ 102.395774][ T8842] block nbd0: Attempted send on invalid socket [ 102.398405][ T8842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.401568][ T8842] exFAT-fs (nbd0): unable to read boot sector [ 102.403837][ T8842] exFAT-fs (nbd0): failed to read boot sector [ 102.406023][ T8842] exFAT-fs (nbd0): failed to recognize exfat type [ 102.442478][ T57] IPVS: starting estimator thread 0... [ 102.468120][ T8845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.482412][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 102.482422][ T40] audit: type=1804 audit(1757973825.323:32744): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.777" name="/newroot/201/file0" dev="tmpfs" ino=1064 res=1 errno=0 [ 102.533693][ T8843] IPVS: using max 44 ests per chain, 105600 per kthread [ 102.960280][ T8847] fuse: Bad value for 'user_id' [ 102.961894][ T8847] fuse: Bad value for 'user_id' [ 102.985712][ T8847] overlayfs: failed to resolve './file1': -2 [ 103.012033][ T40] audit: type=1400 audit(1757973825.853:32745): avc: denied { ioctl } for pid=8849 comm="syz.0.779" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 103.051596][ T8855] block nbd3: Attempted send on invalid socket [ 103.054251][ T8855] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.057887][ T8855] block nbd3: Attempted send on invalid socket [ 103.060021][ T8855] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.184968][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 103.239159][ T40] audit: type=1400 audit(1757973826.073:32746): avc: denied { ioctl } for pid=8871 comm="syz.0.787" path="socket:[27164]" dev="sockfs" ino=27164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.254177][ T40] audit: type=1400 audit(1757973826.073:32747): avc: denied { bind } for pid=8871 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.328798][ T8878] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 103.361416][ T8878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.372215][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 103.396544][ T8878] bond3: (slave erspan1): making interface the new active one [ 103.400359][ T8878] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 103.593661][ C0] net_ratelimit: 48422 callbacks suppressed [ 103.593674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.593758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 103.595944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.599632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 103.604284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 103.607942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 103.611770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.615532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 103.619157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.622723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 103.917556][ T8900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8900 comm=syz.0.793 [ 103.922710][ T8900] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 103.948381][ T1024] usb 9-1: USB disconnect, device number 4 [ 104.208659][ T40] audit: type=1400 audit(1757973827.053:32748): avc: denied { node_bind } for pid=8914 comm="syz.3.797" saddr=fe80::17 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 104.216948][ T8915] 9pnet_virtio: no channels available for device syz [ 104.260381][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8921 comm=syz.4.798 [ 104.265016][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8921 comm=syz.4.798 [ 104.456344][ T8941] hfsplus: unable to find HFS+ superblock [ 104.498554][ T8946] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 104.557281][ T8948] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 104.560061][ T8933] netlink: 'syz.3.800': attribute type 7 has an invalid length. [ 104.562562][ T8933] netlink: 'syz.3.800': attribute type 8 has an invalid length. [ 104.646972][ T8951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.659202][ T8951] bond0: (slave rose0): Enslaving as an active interface with an up link [ 104.665074][ T5972] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 104.896288][ T8974] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 104.938408][ T8977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8977 comm=syz.3.814 [ 104.960516][ T8982] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 104.972018][ T8982] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 105.019600][ T8987] libceph: resolve ' [ 105.019600][ T8987] -&fYǝa2i [ 105.019600][ T8987] .?&*&' (ret=-3): failed [ 105.083498][ T8993] cgroup2: Unknown parameter 'euid' [ 105.163659][ T40] audit: type=1400 audit(1757973828.003:32749): avc: denied { mounton } for pid=8994 comm="syz.3.818" path="/187/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 105.192056][ T8993] block nbd2: NBD_DISCONNECT [ 105.199929][ T40] audit: type=1400 audit(1757973828.043:32750): avc: denied { unmount } for pid=5977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 105.249518][ T40] audit: type=1400 audit(1757973828.093:32751): avc: denied { read } for pid=9005 comm="syz.3.819" path="socket:[26560]" dev="sockfs" ino=26560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 105.259974][ T9006] netlink: 'syz.3.819': attribute type 10 has an invalid length. [ 105.262557][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.819'. [ 105.303171][ T9008] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 105.309849][ T9008] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 105.312357][ T9006] dummy0: entered promiscuous mode [ 105.323911][ T9006] dummy0: left allmulticast mode [ 105.329183][ T9006] bridge0: port 3(dummy0) entered blocking state [ 105.331421][ T9006] bridge0: port 3(dummy0) entered disabled state [ 105.335998][ T9006] dummy0: entered allmulticast mode [ 105.523823][ T40] audit: type=1400 audit(1757973828.323:32752): avc: denied { setopt } for pid=9023 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.534121][ T9026] fuse: Unknown parameter '6E4lSa<3ueh{~m[)<.ՅJ) TfF(. l뀴4@' [ 105.723987][ T9033] netlink: 100 bytes leftover after parsing attributes in process `syz.0.828'. [ 105.788940][ T9040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.830'. [ 105.850022][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 105.953805][ T9052] netlink: 152 bytes leftover after parsing attributes in process `syz.2.832'. [ 105.962260][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.832'. [ 105.966758][ T9031] Falling back ldisc for ttyS3. [ 106.005754][ T5972] Bluetooth: Wrong link type (-71) [ 106.008787][ T9052] comedi comedi3: board detection failed [ 106.130062][ T9060] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 106.143697][ T9060] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.216158][ T9061] geneve2: entered promiscuous mode [ 106.227091][ T9061] geneve2: entered allmulticast mode [ 106.776479][ T40] audit: type=1400 audit(1757973829.623:32753): avc: denied { getopt } for pid=9081 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.885723][ T9085] netlink: 'syz.0.838': attribute type 16 has an invalid length. [ 106.888903][ T9085] netlink: 'syz.0.838': attribute type 17 has an invalid length. [ 106.947727][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.839'. [ 106.996973][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 107.002559][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 107.088951][ T9089] xfrm0 speed is unknown, defaulting to 1000 [ 107.203333][ T9102] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.212441][ T9102] MINIX-fs: unable to read superblock [ 107.474862][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 107.676792][ T9128] 9pnet_fd: Insufficient options for proto=fd [ 107.678810][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 107.678819][ T40] audit: type=1400 audit(1757973830.523:32755): avc: denied { mounton } for pid=9127 comm="syz.2.848" path="/222/file0" dev="tmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.811368][ T40] audit: type=1400 audit(1757973830.653:32756): avc: denied { accept } for pid=9131 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 107.878839][ T40] audit: type=1400 audit(1757973830.723:32757): avc: denied { map } for pid=9141 comm="syz.4.852" path="socket:[27796]" dev="sockfs" ino=27796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.900006][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9144 comm=syz.3.853 [ 107.921972][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9144 comm=syz.3.853 [ 108.045030][ T9158] syz.3.856(9158): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 108.075326][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.077901][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.213912][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.223109][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.268340][ T838] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 108.546892][ T1027] xfrm0 speed is unknown, defaulting to 1000 [ 108.548888][ T1027] syz1: Port: 1 Link DOWN [ 108.554569][ T46] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.581526][ T46] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.585917][ T46] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.589627][ T46] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.603709][ C0] net_ratelimit: 63576 callbacks suppressed [ 108.603721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.603756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 108.605976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 108.610253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 108.613961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.618009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 108.621567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.625547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 108.629065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.633031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 108.785930][ T9167] mkiss: ax0: crc mode is auto. [ 109.097207][ T9190] syzkaller0: entered promiscuous mode [ 109.099063][ T9190] syzkaller0: entered allmulticast mode [ 110.698300][ T838] usb 5-1: device not accepting address 8, error -71 [ 113.613667][ C1] net_ratelimit: 74866 callbacks suppressed [ 113.613679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 113.613775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 113.615744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 113.620355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.623940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 113.628637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.631996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 113.636619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.640015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 113.644649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 114.052450][ T40] audit: type=1400 audit(1757973836.893:32758): avc: denied { execute } for pid=9217 comm="syz.2.878" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 114.100693][ T9226] wg2: Caught tx_queue_len zero misconfig [ 114.103325][ T9226] __nla_validate_parse: 3 callbacks suppressed [ 114.103337][ T9226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.880'. [ 114.108239][ T9226] netem: unknown loss type 12 [ 114.110004][ T9226] netem: change failed [ 114.121089][ T9229] binder: BINDER_SET_CONTEXT_MGR already set [ 114.122965][ T9229] binder: 9228:9229 ioctl 4018620d 200000000140 returned -16 [ 114.123463][ T9226] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 114.127313][ T9231] binder_alloc: binder_alloc_mmap_handler: 9228 200000ffd000-200001000000 already mapped failed -16 [ 114.133404][ T9229] binder_alloc: 9228: binder_alloc_buf, no vma [ 114.160728][ T9227] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.879' resets device [ 114.232671][ T9241] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.237339][ T9241] bond3: (slave bond4): making interface the new active one [ 114.241130][ T9241] bond3: (slave bond4): Enslaving as an active interface with an up link [ 114.287671][ T9246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.291660][ T9246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.296773][ T9246] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 114.300303][ T9246] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 114.513724][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 114.636386][ C0] sched: DL replenish lagged too much [ 114.788004][ T9250] lo: Caught tx_queue_len zero misconfig [ 116.691371][ T9264] tipc: Started in network mode [ 116.693210][ T9264] tipc: Node identity 4, cluster identity 4711 [ 116.696001][ T5972] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 116.696500][ T9264] tipc: Node number set to 4 [ 116.742598][ T9269] netlink: 'syz.3.890': attribute type 21 has an invalid length. [ 116.814403][ T9276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'. [ 116.968815][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 116.971899][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.895'. [ 116.978414][ T9288] geneve3: entered promiscuous mode [ 116.980098][ T9288] geneve3: entered allmulticast mode [ 116.988028][ T86] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.991362][ T86] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.994269][ T86] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.000634][ T86] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.431602][ T40] audit: type=1400 audit(1757973840.273:32759): avc: denied { ioctl } for pid=9298 comm="syz.0.897" path="socket:[29068]" dev="sockfs" ino=29068 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.618991][ T40] audit: type=1400 audit(1757973840.463:32760): avc: denied { nlmsg_read } for pid=9300 comm="syz.0.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.875880][ T9325] netlink: 'syz.2.905': attribute type 63 has an invalid length. [ 118.034096][ T53] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 118.107559][ T40] audit: type=1400 audit(1757973840.953:32761): avc: denied { accept } for pid=9331 comm="syz.0.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.195710][ T9334] netlink: 'syz.0.908': attribute type 4 has an invalid length. [ 118.200976][ T9334] netlink: 'syz.0.908': attribute type 4 has an invalid length. [ 118.208025][ T53] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.211538][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.214138][ T53] usb 8-1: Product: syz [ 118.215456][ T53] usb 8-1: Manufacturer: syz [ 118.216925][ T53] usb 8-1: SerialNumber: syz [ 118.221557][ T53] usb 8-1: config 0 descriptor?? [ 118.412907][ T40] audit: type=1400 audit(1757973841.253:32762): avc: denied { setopt } for pid=9340 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.623719][ C1] net_ratelimit: 73871 callbacks suppressed [ 118.623731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.623754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.625777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.629686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 118.633133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.637359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.640894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.645302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.648890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.653042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 118.654124][ T40] audit: type=1400 audit(1757973841.493:32763): avc: denied { create } for pid=9309 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 118.654170][ T40] audit: type=1400 audit(1757973841.493:32764): avc: denied { ioctl } for pid=9309 comm="syz.3.902" path="socket:[28457]" dev="sockfs" ino=28457 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 118.657696][ T24] usb 8-1: USB disconnect, device number 7 [ 118.747174][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 118.804760][ T9368] dlm: Unknown command passed to DLM device : 255 [ 118.804760][ T9368] [ 118.809721][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.917'. [ 118.861435][ T9373] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 118.866195][ T9373] Error validating options; rc = [-22] [ 119.109954][ T40] audit: type=1400 audit(1757973841.953:32765): avc: denied { connect } for pid=9379 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.258236][ T9400] program syz.4.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.269479][ T40] audit: type=1400 audit(1757973842.113:32766): avc: denied { mounton } for pid=9399 comm="syz.4.927" path="mnt:[4026532868]" dev="nsfs" ino=4026532868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.292990][ T40] audit: type=1400 audit(1757973842.123:32767): avc: denied { remount } for pid=9399 comm="syz.4.927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 119.405106][ T9406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.453738][ T53] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 119.603685][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 119.606691][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.608773][ T53] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 119.611839][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.625269][ T53] usb 7-1: config 0 descriptor?? [ 120.045666][ T53] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 120.252102][ T53] usb 7-1: USB disconnect, device number 6 [ 120.616904][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 120.623244][ T9428] bridge0: port 4(macvlan4) entered blocking state [ 120.626135][ T9428] bridge0: port 4(macvlan4) entered disabled state [ 120.628398][ T9428] macvlan4: entered allmulticast mode [ 120.630040][ T9428] bridge0: entered allmulticast mode [ 120.641735][ T9428] macvlan4: left allmulticast mode [ 120.644030][ T9428] bridge0: left allmulticast mode [ 120.848098][ T40] audit: type=1400 audit(1757973843.693:32768): avc: denied { write } for pid=9437 comm="syz.2.935" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.884567][ T40] audit: type=1400 audit(1757973843.723:32769): avc: denied { setattr } for pid=9436 comm="syz.4.933" path="/dev/cec4" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.891866][ T40] audit: type=1400 audit(1757973843.723:32770): avc: denied { map } for pid=9436 comm="syz.4.933" path="socket:[29450]" dev="sockfs" ino=29450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.923281][ T40] audit: type=1400 audit(1757973843.723:32771): avc: denied { read } for pid=9436 comm="syz.4.933" path="socket:[29450]" dev="sockfs" ino=29450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.066038][ T40] audit: type=1400 audit(1757973843.903:32772): avc: denied { write } for pid=9447 comm="syz.4.940" name="file0" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.072914][ T40] audit: type=1400 audit(1757973843.903:32773): avc: denied { open } for pid=9447 comm="syz.4.940" path="/92/file0" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.078328][ T9451] netlink: 'syz.3.941': attribute type 30 has an invalid length. [ 121.082570][ T9451] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 121.094069][ T9451] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 121.410284][ T40] audit: type=1400 audit(1757973844.243:32774): avc: denied { ioctl } for pid=9474 comm="syz.4.948" path="socket:[29794]" dev="sockfs" ino=29794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.494340][ T9479] binder: 9478:9479 unknown command 0 [ 121.496118][ T9479] binder: 9478:9479 ioctl c0306201 200000000080 returned -22 [ 121.532237][ T9483] netlink: 'syz.3.952': attribute type 2 has an invalid length. [ 121.789948][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 121.948077][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.951389][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.964600][ T34] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 121.967316][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.974115][ T34] usb 8-1: config 0 descriptor?? [ 122.177981][ T34] usbhid 8-1:0.0: can't add hid device: -71 [ 122.179888][ T34] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 122.192719][ T34] usb 8-1: USB disconnect, device number 8 [ 122.257285][ T9535] VFS: Mount too revealing [ 122.259183][ T9535] hugetlbfs: Bad value for 'uid' [ 122.260813][ T9535] hugetlbfs: Bad value for 'uid' [ 122.417963][ T9546] batadv_slave_1: entered promiscuous mode [ 122.427310][ T9544] batadv_slave_1: left promiscuous mode [ 122.829467][ T9572] binder: BINDER_SET_CONTEXT_MGR already set [ 122.831360][ T9572] binder: 9571:9572 ioctl 4018620d 200000000100 returned -16 [ 122.938512][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 122.941205][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.984'. [ 123.018666][ T9588] netlink: 19 bytes leftover after parsing attributes in process `syz.2.985'. [ 123.390113][ T9610] team0: Caught tx_queue_len zero misconfig [ 123.611776][ T9619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=9619 comm=syz.4.995 [ 123.619195][ T9619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=9619 comm=syz.4.995 [ 123.624597][ T9619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=9619 comm=syz.4.995 [ 123.629617][ T9619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9619 comm=syz.4.995 [ 123.633692][ C1] net_ratelimit: 67866 callbacks suppressed [ 123.633703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 123.633933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 123.634178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.635497][ T9619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=9619 comm=syz.4.995 [ 123.636098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 123.639823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.643540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 123.647813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.651705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 123.655920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.659682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 123.683742][ T53] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 123.835270][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.839559][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.846076][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.850863][ T53] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.858055][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.863047][ T53] usb 7-1: config 0 descriptor?? [ 124.036327][ T9636] kAFS: No cell specified [ 124.148632][ T9646] binder: 9644:9646 ioctl c0306201 200000000080 returned -22 [ 124.177071][ T9650] netlink: 'syz.4.1003': attribute type 14 has an invalid length. [ 124.274180][ T53] usbhid 7-1:0.0: can't add hid device: -71 [ 124.276736][ T53] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 124.281259][ T53] usb 7-1: USB disconnect, device number 7 [ 124.710058][ T9652] netlink: 'syz.3.1004': attribute type 4 has an invalid length. [ 124.795044][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 124.795055][ T40] audit: type=1400 audit(1757973847.643:32780): avc: denied { map } for pid=9663 comm="syz.4.1008" path="socket:[31229]" dev="sockfs" ino=31229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.819404][ T40] audit: type=1400 audit(1757973847.663:32781): avc: denied { setattr } for pid=9661 comm="syz.3.1007" name="file0" dev="9p" ino=71827747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.080898][ T9671] syz_tun: entered promiscuous mode [ 125.083345][ T9671] batadv_slave_0: entered promiscuous mode [ 125.086958][ T9671] hsr1: entered allmulticast mode [ 125.088694][ T9671] syz_tun: entered allmulticast mode [ 125.091698][ T9671] batadv_slave_0: entered allmulticast mode [ 125.110701][ T5972] Bluetooth: hci0: Unable to find connection for big 0x00 [ 125.403749][ T9701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9701 comm=syz.4.1016 [ 125.532688][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1019'. [ 125.841451][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 125.845300][ T9723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1023'. [ 125.895135][ T40] audit: type=1400 audit(1757973848.743:32782): avc: denied { mounton } for pid=9724 comm="syz.4.1024" path="/128/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 126.187726][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 126.203271][ T9742] macsec1: entered promiscuous mode [ 126.205639][ T9742] bridge0: entered promiscuous mode [ 126.281565][ T9747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43351 sclass=netlink_route_socket pid=9747 comm=syz.0.1030 [ 126.534705][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 126.637529][ T9758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.687677][ T9761] loop6: detected capacity change from 0 to 7 [ 126.698563][ T8202] Dev loop6: unable to read RDB block 7 [ 126.700399][ T8202] loop6: unable to read partition table [ 126.702310][ T8202] loop6: partition table beyond EOD, truncated [ 126.722447][ T9761] Dev loop6: unable to read RDB block 7 [ 126.727202][ T9761] loop6: unable to read partition table [ 126.729266][ T9761] loop6: partition table beyond EOD, truncated [ 126.733809][ T9761] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 126.974654][ T40] audit: type=1400 audit(1757973849.813:32783): avc: denied { setopt } for pid=9772 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.109978][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1039'. [ 127.298189][ T40] audit: type=1400 audit(1757973850.143:32784): avc: denied { setcheckreqprot } for pid=9782 comm="syz.4.1042" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 127.310404][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1046'. [ 127.430652][ T9793] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 127.525770][ T9796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9796 comm=syz.4.1047 [ 127.529996][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 127.566878][ T9799] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 127.579866][ T9801] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1048'. [ 127.640878][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 127.645956][ T9808] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1050'. [ 127.916027][ T9818] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 127.916951][ T40] audit: type=1400 audit(1757973850.763:32785): avc: denied { map } for pid=9829 comm="syz.0.1055" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.977889][ T40] audit: type=1400 audit(1757973850.783:32786): avc: denied { name_bind } for pid=9829 comm="syz.0.1055" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 128.161105][ T40] audit: type=1400 audit(1757973851.003:32787): avc: denied { map } for pid=9840 comm="syz.3.1058" path="socket:[32791]" dev="sockfs" ino=32791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 128.177308][ T9847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9847 comm=syz.0.1056 [ 128.358571][ T9804] 9pnet_fd: p9_fd_create_tcp (9804): problem connecting socket to 127.0.0.1 [ 128.390422][ T9860] bpf: Bad value for 'uid' [ 128.643662][ C1] net_ratelimit: 62080 callbacks suppressed [ 128.643674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.643680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 128.643939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 128.645736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 128.649488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 128.653108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.657254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 128.660883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.664986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 128.668686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 128.888506][ T9886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9886 comm=syz.4.1066 [ 129.163177][ T9903] netlink: 'syz.2.1069': attribute type 2 has an invalid length. [ 129.463781][ T53] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 129.557094][ T9919] block nbd4: Attempted send on invalid socket [ 129.559069][ T9919] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.562516][ T9919] block nbd4: Attempted send on invalid socket [ 129.565146][ T9919] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.593857][ T53] usb 7-1: device descriptor read/64, error -71 [ 129.833749][ T53] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 129.837222][ T40] audit: type=1400 audit(1757973852.683:32788): avc: denied { map } for pid=9932 comm="syz.4.1074" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 129.845899][ T40] audit: type=1400 audit(1757973852.693:32789): avc: denied { execute } for pid=9932 comm="syz.4.1074" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 129.884036][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.930834][ T40] audit: type=1400 audit(1757973852.773:32790): avc: denied { append } for pid=9936 comm="syz.4.1076" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.963867][ T53] usb 7-1: device descriptor read/64, error -71 [ 130.045578][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 130.050233][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 130.053154][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.057934][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.061938][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.065462][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.069578][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.072502][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.084006][ T53] usb usb7-port1: attempt power cycle [ 130.253699][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 130.282450][ T24] usb 5-1: usb_control_msg returned -32 [ 130.285060][ T24] usbtmc 5-1:16.0: can't read capabilities [ 130.406774][ T34] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.410281][ T34] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.414346][ T34] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.417693][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.422876][ T9943] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 130.429418][ T34] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.435879][ T53] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 130.455836][ T53] usb 7-1: device descriptor read/8, error -71 [ 130.649729][ T24] usb 9-1: USB disconnect, device number 5 [ 130.704281][ T53] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 130.725207][ T53] usb 7-1: device descriptor read/8, error -71 [ 130.834608][ T53] usb usb7-port1: unable to enumerate USB device [ 131.067998][ T9946] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 131.070992][ T9946] __nla_validate_parse: 2 callbacks suppressed [ 131.071005][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 131.187567][ T9948] block nbd4: Attempted send on invalid socket [ 131.190237][ T9948] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.194648][ T9948] (syz.4.1078,9948,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 131.197482][ T9948] (syz.4.1078,9948,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 131.200521][ T9948] (syz.4.1078,9948,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 131.204335][ T9948] (syz.4.1078,9948,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 131.519495][ T40] audit: type=1400 audit(1757973854.363:32791): avc: denied { read } for pid=9963 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.519988][ T9964] sctp: [Deprecated]: syz.4.1083 (pid 9964) Use of int in maxseg socket option. [ 131.519988][ T9964] Use struct sctp_assoc_value instead [ 131.803809][ T53] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 131.896005][ T9976] netlink: 896 bytes leftover after parsing attributes in process `syz.3.1087'. [ 131.907286][ T9976] "syz.3.1087" (9976) uses obsolete ecb(arc4) skcipher [ 131.956359][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 131.961546][ T53] usb 9-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1023 [ 131.966783][ T53] usb 9-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.972245][ T53] usb 9-1: config 1 interface 0 has no altsetting 0 [ 131.979801][ T53] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 131.983314][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.996944][ T53] usb 9-1: Product: 汈ვ⟟蒬ٖ꣕뽯鶾ꯃ襓釐雄荶i쭈豕毪쎆㿠粩闆ޠ넽㴄ﶰ㖻垽呱政ᄋ俹礯ﻨ䙴굨勉ᱺ⩵㽎Ἠ箖⋙ኖ眰仸뱌딀㓔த欳蜽ᄽ勉ᇚ詧蕷ㅛ⨚膢筺鹧靿휞辛톗옛甓ꢾ丕㟹몢璛茿᥈꽜㩶헌韨梈勪ﲰᖸ짡龢堅鑺䖁܆Ɇ蓼뢊皦㛹ᒌஅꥷ╿䭓ꕼ喗骔埧㝚䖤솑惬⛱␠쮳 [ 132.011567][ T53] usb 9-1: Manufacturer: 䐊 [ 132.013518][ T53] usb 9-1: SerialNumber: syz [ 132.015417][ T9980] input: syz1 as /devices/virtual/input/input13 [ 132.025155][ T9966] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 132.026126][ T9980] pim6reg: entered allmulticast mode [ 132.028267][ T9966] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 132.121206][ T9987] loop6: detected capacity change from 0 to 2560 [ 132.123522][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.126239][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.128688][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.131099][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.133729][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.136158][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.141319][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.143835][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.146307][ T9987] ldm_validate_partition_table(): Disk read failed. [ 132.148370][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.150872][ T9987] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.153439][ T9987] Dev loop6: unable to read RDB block 0 [ 132.157667][ T9987] loop6: unable to read partition table [ 132.160372][ T9987] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 132.255483][ T9993] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.1094'. [ 132.296276][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 132.325771][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 132.333781][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'. [ 132.339378][ T9998] netlink: 'syz.2.1095': attribute type 7 has an invalid length. [ 132.380545][T10003] syzkaller1: entered promiscuous mode [ 132.382291][T10003] syzkaller1: entered allmulticast mode [ 132.391056][ T40] audit: type=1400 audit(1757973855.233:32792): avc: denied { watch } for pid=10004 comm="syz.3.1098" path="/252" dev="tmpfs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.415565][ T40] audit: type=1400 audit(1757973855.233:32793): avc: denied { watch_sb } for pid=10004 comm="syz.3.1098" path="/252" dev="tmpfs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.560546][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 132.597573][T10014] dummy0 (unregistering): left allmulticast mode [ 132.600391][T10014] bridge0: port 3(dummy0) entered disabled state [ 132.628103][ T40] audit: type=1400 audit(1757973855.473:32794): avc: denied { bind } for pid=10016 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.638814][ T40] audit: type=1400 audit(1757973855.483:32795): avc: denied { name_bind } for pid=10016 comm="syz.2.1101" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 132.648565][ T40] audit: type=1400 audit(1757973855.483:32796): avc: denied { node_bind } for pid=10016 comm="syz.2.1101" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 132.658582][ T40] audit: type=1400 audit(1757973855.483:32797): avc: denied { read } for pid=10016 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.707401][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.711974][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.717842][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.721345][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.727042][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.740895][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.767537][T10024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1104'. [ 132.960760][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.964859][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.970779][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.975452][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.007518][ T24] usb 9-1: USB disconnect, device number 6 [ 133.263740][ T5972] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 133.263789][ T5967] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.570325][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1108'. [ 133.653761][ C1] net_ratelimit: 63160 callbacks suppressed [ 133.653775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 133.653864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.655831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 133.660673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.664220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 133.667840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:af:8c:73:50:18, vlan:0) [ 133.671533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 133.676283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.679845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 133.683845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.843868][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 133.995686][ T24] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 133.998713][ T24] usb 9-1: can't read configurations, error -22 [ 134.123781][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 134.275434][ T24] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 134.278032][ T24] usb 9-1: can't read configurations, error -22 [ 134.280449][ T24] usb usb9-port1: attempt power cycle [ 134.626981][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 134.655668][ T24] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 134.658237][ T24] usb 9-1: can't read configurations, error -22 [ 134.787731][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 134.808044][ T24] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 134.811306][ T24] usb 9-1: can't read configurations, error -22 [ 134.814601][ T24] usb usb9-port1: unable to enumerate USB device [ 137.758349][ T40] audit: type=1400 audit(1757973860.603:32798): avc: denied { setattr } for pid=10088 comm="syz.4.1113" name="PING" dev="sockfs" ino=32309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.768259][ T40] audit: type=1400 audit(1757973860.613:32799): avc: denied { setopt } for pid=10088 comm="syz.4.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.827471][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.829651][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.833085][ T1423] ================================================================== [ 137.835824][ T1423] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 137.838248][ T1423] Read of size 8 at addr ffff8880338b9020 by task aoe_tx0/1423 [ 137.841906][ T1423] [ 137.843528][ T1423] CPU: 2 UID: 0 PID: 1423 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 137.843543][ T1423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.843550][ T1423] Call Trace: [ 137.843555][ T1423] [ 137.843559][ T1423] dump_stack_lvl+0x116/0x1f0 [ 137.843587][ T1423] print_report+0xcd/0x630 [ 137.843600][ T1423] ? __virt_addr_valid+0x81/0x610 [ 137.843615][ T1423] ? __phys_addr+0xe8/0x180 [ 137.843630][ T1423] ? tty_write_room+0x7d/0x90 [ 137.843647][ T1423] kasan_report+0xe0/0x110 [ 137.843659][ T1423] ? tty_write_room+0x7d/0x90 [ 137.843677][ T1423] tty_write_room+0x7d/0x90 [ 137.843694][ T1423] handle_tx+0x14f/0x630 [ 137.843705][ T1423] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 137.843720][ T1423] dev_hard_start_xmit+0x97/0x740 [ 137.843733][ T1423] __dev_queue_xmit+0xa46/0x4490 [ 137.843745][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.843759][ T1423] ? finish_task_switch.isra.0+0x221/0xc10 [ 137.843774][ T1423] ? rcu_is_watching+0x12/0xc0 [ 137.843788][ T1423] ? __pfx___dev_queue_xmit+0x10/0x10 [ 137.843799][ T1423] ? __schedule+0x11a3/0x5de0 [ 137.843812][ T1423] ? __lock_acquire+0xb97/0x1ce0 [ 137.843832][ T1423] ? do_raw_spin_lock+0x12c/0x2b0 [ 137.843846][ T1423] ? rcu_is_watching+0x12/0xc0 [ 137.843861][ T1423] tx+0xcc/0x190 [ 137.843874][ T1423] ? __pfx_tx+0x10/0x10 [ 137.843886][ T1423] kthread+0x1e4/0x3e0 [ 137.843897][ T1423] ? find_held_lock+0x2b/0x80 [ 137.843910][ T1423] ? __pfx_kthread+0x10/0x10 [ 137.843921][ T1423] ? __pfx_default_wake_function+0x10/0x10 [ 137.843935][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.843949][ T1423] ? __kthread_parkme+0x19e/0x250 [ 137.843965][ T1423] ? __pfx_kthread+0x10/0x10 [ 137.843976][ T1423] kthread+0x3c2/0x780 [ 137.843986][ T1423] ? __pfx_kthread+0x10/0x10 [ 137.843997][ T1423] ? rcu_is_watching+0x12/0xc0 [ 137.844010][ T1423] ? __pfx_kthread+0x10/0x10 [ 137.844020][ T1423] ret_from_fork+0x56a/0x730 [ 137.844031][ T1423] ? __pfx_kthread+0x10/0x10 [ 137.844041][ T1423] ret_from_fork_asm+0x1a/0x30 [ 137.844064][ T1423] [ 137.844068][ T1423] [ 137.911336][ T1423] Allocated by task 10056: [ 137.912826][ T1423] kasan_save_stack+0x33/0x60 [ 137.914398][ T1423] kasan_save_track+0x14/0x30 [ 137.915898][ T1423] __kasan_kmalloc+0xaa/0xb0 [ 137.917384][ T1423] alloc_tty_struct+0x96/0x8c0 [ 137.918926][ T1423] tty_init_dev.part.0+0x1e/0x500 [ 137.920549][ T1423] tty_init_dev+0x60/0x80 [ 137.921923][ T1423] ptmx_open+0x10d/0x360 [ 137.923338][ T1423] chrdev_open+0x234/0x6a0 [ 137.924803][ T1423] do_dentry_open+0x97f/0x1530 [ 137.926340][ T1423] vfs_open+0x82/0x3f0 [ 137.927651][ T1423] path_openat+0x1de4/0x2cb0 [ 137.929190][ T1423] do_filp_open+0x20b/0x470 [ 137.930727][ T1423] do_sys_openat2+0x11b/0x1d0 [ 137.932395][ T1423] __x64_sys_openat+0x174/0x210 [ 137.934058][ T1423] do_syscall_64+0xcd/0x4e0 [ 137.935509][ T1423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.937383][ T1423] [ 137.938157][ T1423] Freed by task 24: [ 137.939377][ T1423] kasan_save_stack+0x33/0x60 [ 137.940891][ T1423] kasan_save_track+0x14/0x30 [ 137.942411][ T1423] kasan_save_free_info+0x3b/0x60 [ 137.944060][ T1423] __kasan_slab_free+0x60/0x70 [ 137.945456][ T1423] kfree+0x2b4/0x4d0 [ 137.946643][ T1423] process_one_work+0x9cc/0x1b70 [ 137.948347][ T1423] worker_thread+0x6c8/0xf10 [ 137.950215][ T1423] kthread+0x3c2/0x780 [ 137.951893][ T1423] ret_from_fork+0x56a/0x730 [ 137.953756][ T1423] ret_from_fork_asm+0x1a/0x30 [ 137.955705][ T1423] [ 137.956710][ T1423] Last potentially related work creation: [ 137.958974][ T1423] kasan_save_stack+0x33/0x60 [ 137.960574][ T1423] kasan_record_aux_stack+0xa7/0xc0 [ 137.962244][ T1423] insert_work+0x36/0x230 [ 137.963627][ T1423] __queue_work+0x97e/0x1160 [ 137.965123][ T1423] queue_work_on+0x1a4/0x1f0 [ 137.966599][ T1423] release_tty+0x4de/0x5d0 [ 137.968033][ T1423] tty_release_struct+0xb7/0xe0 [ 137.969616][ T1423] tty_release+0xe2d/0x1430 [ 137.971128][ T1423] __fput+0x402/0xb70 [ 137.972472][ T1423] task_work_run+0x150/0x240 [ 137.974095][ T1423] exit_to_user_mode_loop+0xeb/0x110 [ 137.975834][ T1423] do_syscall_64+0x41c/0x4e0 [ 137.977330][ T1423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.979212][ T1423] [ 137.979990][ T1423] The buggy address belongs to the object at ffff8880338b9000 [ 137.979990][ T1423] which belongs to the cache kmalloc-cg-2k of size 2048 [ 137.984439][ T1423] The buggy address is located 32 bytes inside of [ 137.984439][ T1423] freed 2048-byte region [ffff8880338b9000, ffff8880338b9800) [ 137.988869][ T1423] [ 137.989702][ T1423] The buggy address belongs to the physical page: [ 137.991820][ T1423] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x338b8 [ 137.994626][ T1423] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 137.997302][ T1423] memcg:ffff888055cfe901 [ 137.998654][ T1423] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 138.001033][ T1423] page_type: f5(slab) [ 138.002486][ T1423] raw: 00fff00000000040 ffff88801b84c140 ffffea0000c3e000 dead000000000002 [ 138.005833][ T1423] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888055cfe901 [ 138.008731][ T1423] head: 00fff00000000040 ffff88801b84c140 ffffea0000c3e000 dead000000000002 [ 138.011471][ T1423] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888055cfe901 [ 138.014143][ T1423] head: 00fff00000000003 ffffea0000ce2e01 00000000ffffffff 00000000ffffffff [ 138.017004][ T1423] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 138.019899][ T1423] page dumped because: kasan: bad access detected [ 138.022069][ T1423] page_owner tracks the page as allocated [ 138.023960][ T1423] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7767, tgid 7767 (syz-executor), ts 83624855394, free_ts 83609153348 [ 138.031181][ T1423] post_alloc_hook+0x1c0/0x230 [ 138.032806][ T1423] get_page_from_freelist+0x132b/0x38e0 [ 138.034595][ T1423] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 138.036565][ T1423] alloc_pages_mpol+0x1fb/0x550 [ 138.038223][ T1423] new_slab+0x247/0x330 [ 138.039625][ T1423] ___slab_alloc+0xcf2/0x1750 [ 138.041146][ T1423] __slab_alloc.constprop.0+0x56/0xb0 [ 138.042767][ T1423] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 138.044800][ T1423] kmemdup_noprof+0x29/0x60 [ 138.046256][ T1423] __devinet_sysctl_register+0xbc/0x360 [ 138.048026][ T1423] devinet_sysctl_register+0x17b/0x200 [ 138.049768][ T1423] inetdev_init+0x2b8/0x5a0 [ 138.051223][ T1423] inetdev_event+0xc5f/0x18a0 [ 138.052745][ T1423] notifier_call_chain+0xb9/0x410 [ 138.054313][ T1423] call_netdevice_notifiers_info+0xbe/0x140 [ 138.056333][ T1423] register_netdevice+0x182e/0x2270 [ 138.058234][ T1423] page last free pid 7767 tgid 7767 stack trace: [ 138.060448][ T1423] __free_frozen_pages+0x7d5/0x10f0 [ 138.062119][ T1423] __put_partials+0x165/0x1c0 [ 138.063654][ T1423] qlist_free_all+0x4d/0x120 [ 138.065141][ T1423] kasan_quarantine_reduce+0x195/0x1e0 [ 138.066933][ T1423] __kasan_slab_alloc+0x69/0x90 [ 138.068503][ T1423] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 138.070213][ T1423] ref_tracker_alloc+0x18e/0x5b0 [ 138.071792][ T1423] netdev_queue_update_kobjects+0x2db/0x720 [ 138.073701][ T1423] netdev_register_kobject+0x2b3/0x3d0 [ 138.075454][ T1423] register_netdevice+0x13dc/0x2270 [ 138.077113][ T1423] bond_newlink+0x87/0x100 [ 138.078523][ T1423] rtnl_newlink+0xc45/0x2000 [ 138.080003][ T1423] rtnetlink_rcv_msg+0x95b/0xe90 [ 138.081596][ T1423] netlink_rcv_skb+0x158/0x420 [ 138.083224][ T1423] netlink_unicast+0x5a7/0x870 [ 138.084892][ T1423] netlink_sendmsg+0x8d1/0xdd0 [ 138.086518][ T1423] [ 138.087343][ T1423] Memory state around the buggy address: [ 138.089152][ T1423] ffff8880338b8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 138.091660][ T1423] ffff8880338b8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 138.094214][ T1423] >ffff8880338b9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.096786][ T1423] ^ [ 138.098407][ T1423] ffff8880338b9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.100959][ T1423] ffff8880338b9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.103523][ T1423] ================================================================== [ 138.106199][ T1423] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.108445][ T1423] CPU: 2 UID: 0 PID: 1423 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 138.111219][ T1423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.114640][ T1423] Call Trace: [ 138.115708][ T1423] [ 138.116668][ T1423] dump_stack_lvl+0x3d/0x1f0 [ 138.118155][ T1423] vpanic+0x6e8/0x7a0 [ 138.119447][ T1423] ? __pfx_vpanic+0x10/0x10 [ 138.120915][ T1423] ? tty_write_room+0x7d/0x90 [ 138.122422][ T1423] panic+0xca/0xd0 [ 138.123637][ T1423] ? __pfx_panic+0x10/0x10 [ 138.125073][ T1423] ? check_panic_on_warn+0x1f/0xb0 [ 138.126704][ T1423] check_panic_on_warn+0xab/0xb0 [ 138.128297][ T1423] end_report+0x107/0x170 [ 138.129689][ T1423] kasan_report+0xee/0x110 [ 138.131122][ T1423] ? tty_write_room+0x7d/0x90 [ 138.132648][ T1423] tty_write_room+0x7d/0x90 [ 138.134287][ T1423] handle_tx+0x14f/0x630 [ 138.135772][ T1423] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 138.137726][ T1423] dev_hard_start_xmit+0x97/0x740 [ 138.139335][ T1423] __dev_queue_xmit+0xa46/0x4490 [ 138.140925][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.142587][ T1423] ? finish_task_switch.isra.0+0x221/0xc10 [ 138.144457][ T1423] ? rcu_is_watching+0x12/0xc0 [ 138.145984][ T1423] ? __pfx___dev_queue_xmit+0x10/0x10 [ 138.147673][ T1423] ? __schedule+0x11a3/0x5de0 [ 138.149192][ T1423] ? __lock_acquire+0xb97/0x1ce0 [ 138.150773][ T1423] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.152384][ T1423] ? rcu_is_watching+0x12/0xc0 [ 138.154009][ T1423] tx+0xcc/0x190 [ 138.155219][ T1423] ? __pfx_tx+0x10/0x10 [ 138.156675][ T1423] kthread+0x1e4/0x3e0 [ 138.158063][ T1423] ? find_held_lock+0x2b/0x80 [ 138.159573][ T1423] ? __pfx_kthread+0x10/0x10 [ 138.161060][ T1423] ? __pfx_default_wake_function+0x10/0x10 [ 138.162908][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.164575][ T1423] ? __kthread_parkme+0x19e/0x250 [ 138.166228][ T1423] ? __pfx_kthread+0x10/0x10 [ 138.168118][ T1423] kthread+0x3c2/0x780 [ 138.169444][ T1423] ? __pfx_kthread+0x10/0x10 [ 138.170933][ T1423] ? rcu_is_watching+0x12/0xc0 [ 138.172485][ T1423] ? __pfx_kthread+0x10/0x10 [ 138.174005][ T1423] ret_from_fork+0x56a/0x730 [ 138.175534][ T1423] ? __pfx_kthread+0x10/0x10 [ 138.177088][ T1423] ret_from_fork_asm+0x1a/0x30 [ 138.178677][ T1423] [ 138.180597][ T1423] Kernel Offset: disabled [ 138.182029][ T1423] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:04:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000006 RBX=ffff88801da8d370 RCX=000000007f1fed10 RDX=03813abc02fcf7df RSI=0000000000000001 RDI=000000005970cd9e RBP=0000000000000000 RSP=ffffc90000006c88 R8 =03813abc02fcf7df R9 =0000000000000000 R10=0000000000000005 R11=0000000000000000 R12=ffff88801da8d438 R13=ffff88801da8c880 R14=000000007f45ee1d R15=0000000000000001 RIP=ffffffff8197ba6b RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6df9558f98 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1c6b5636 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1c6b5636 00007ffc1c6b563c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df89a74a8 00007f6df89a74a0 00007f6df89a7498 00007f6df89a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df950d100 00007f6df89a7460 00007f6df89a7478 00007f6df89a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df89a74b8 00007f6df89a74b0 00007f6df89a74a8 00007f6df89a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc900006a03a0 RCX=ffffc900006a1001 RDX=ffffc900006a03a8 RSI=ffffc900006a0370 RDI=ffffc9000069ff48 RBP=0000000000000001 RSP=ffffc9000069fec0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000096581 R12=ffffc9000069ff88 R13=ffffc9000069ff38 R14=ffffc900006a03a0 R15=ffffc9000069ff6c RIP=ffffffff8b94b088 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f34a838c300 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6df8774940 CR3=000000002ebce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 0458000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 009d000000000375 0280000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030000000000 0008ffffff9e0000 0000030000000000 0008ffffff8e0000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030000000000 0008ffffff7e0000 0000030000000000 000e0000000cffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffaa000003e60000 0008000400000008 0008000000140000 002c000000400000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0054000000680000 0088000000a00000 00b4000000d40000 0009000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffee00000000 0300000000000008 ffffffde00000000 0300000000000009 ZMM25=b072bb2db072bb2d b072bb2db072bb2d b072bb2db072bb2d b072bb2db072bb2d b072bb2db072bb2d b072bb2db072bb2d b072bb2db072bb2d b072bb2db072bb2d ZMM26=05a749b105a749b1 05a749b105a749b1 05a749b105a749b1 05a749b105a749b1 05a749b105a749b1 05a749b105a749b1 05a749b105a749b1 05a749b105a749b1 ZMM27=92eb752592eb7525 92eb752592eb7525 92eb752592eb7525 92eb752592eb7525 92eb752592eb7525 92eb752592eb7525 92eb752592eb7525 92eb752592eb7525 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b3050000b3050000 b3050000b3050000 b3050000b3050000 b3050000b3050000 b3050000b3050000 b3050000b3050000 b3050000b3050000 b3050000b3050000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b815 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc90006b6f438 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032343154 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b1180a0 R15=ffffffff8564b7b0 RIP=ffffffff8564b83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd47d500286 CR3=00000000330a7000 CR4=00352ef0 DR0=0000000000000008 DR1=8000000000000000 DR2=000000000000cd97 DR3=0000000000005064 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306765726d6970 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1c6b5636 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1c6b5636 00007ffc1c6b563c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df8812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006c6f72746e6f63 5f6e6170776f6c36 2f68746f6f746575 6c622f6775626564 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df950d100 00007f6df89a7460 00007f6df89a0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df89a74b8 00007f6df89a74b0 00007f6df89a74a8 00007f6df89a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000051419fe7 RDX=ffffffff816af56d RSI=ffffffff8c163280 RDI=ffffffff8c1632c0 RBP=ffffc90004c87810 RSP=ffffc90004c87718 R8 =4d110270714c64c4 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff81a6edc0 R13=ffffc90004c877c8 R14=0000000000000000 R15=ffff888021f2c880 RIP=ffffffff8b94c2d8 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f46f27d5e9c CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080001 Opmask01=0000000000000001 Opmask02=00000000fff7ffdf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055627093b343 000055627093b343 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f2b06050 00007f46f2b050c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f2b06580 00007f46f2b05b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f28080c0 00007f46f2b06ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f2b44da0 00007f46f2b055f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f28086b0 00007f46f28080c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f2b06ab0 00007f46f2b06580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f46f2b05b20 00007f46f2b06050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692074616d726f66 2064616200707865 6765722073756f69 76657270206f6e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 450c584d415e434a 0c484d4e005c5449 4b495e0c5f594345 5a495e5c0c434200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000