last executing test programs: 1m43.257060662s ago: executing program 1 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0x2, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 1m43.194373905s ago: executing program 1 (id=852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) setuid(0xee01) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r2, 0x110, 0x7, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m43.125347204s ago: executing program 1 (id=854): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xdc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0xfffffffffffffe7c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x2}, [@RTA_NEWDST={0x84}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4c010) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="b19ccc0d5e08b7f9ec2a46a7c3035da20fcf7acbe9a2300d", 0x18) r7 = accept$alg(r6, 0x0, 0x0) accept4(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80, 0x180800) sendmmsg$alg(r7, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000840)=""/39, 0x27}], 0x2}, 0x5}], 0x1, 0x2120, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1m42.812715741s ago: executing program 1 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @loopback, @multicast, @private=0x1}}}}, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f311b, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff, 0x2}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) (async) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) 1m42.617296621s ago: executing program 1 (id=859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0xf3ff, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m42.387872863s ago: executing program 1 (id=860): rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405515, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf250900000005ed2c000000000005002f0000000000050038000100d1ad7e9660fdfb010000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008810) r8 = signalfd4(r1, &(0x7f0000000040), 0x8, 0x1800) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) ioctl$VIDIOC_G_ENC_INDEX(r8, 0x8818564c, &(0x7f0000001240)) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r14, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b3000040"]) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x40, 0x0, 0xb, 0x70bd24, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x80000000, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 1m42.30341313s ago: executing program 32 (id=860): rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405515, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf250900000005ed2c000000000005002f0000000000050038000100d1ad7e9660fdfb010000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008810) r8 = signalfd4(r1, &(0x7f0000000040), 0x8, 0x1800) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) ioctl$VIDIOC_G_ENC_INDEX(r8, 0x8818564c, &(0x7f0000001240)) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r14, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b3000040"]) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x40, 0x0, 0xb, 0x70bd24, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x80000000, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 4.356008764s ago: executing program 0 (id=2683): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x13) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x125000, &(0x7f0000000000)=ANY=[@ANYBLOB="af55851d3e50fb37d91d7ec00e3e32a8c365590ef5797893dc356575c3fca9efe35ca9e4"]) chdir(&(0x7f0000000080)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2, 0x13) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000002680)={0xffffff7f, 0x2, 'client1\x00', 0x0, "2245941080736c1d", "db7895b88a8cfee74a15e0c3d0a55a5cb7f822ac34a3a29d6da58b5d00001000"}) r1 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x800}) 4.293743647s ago: executing program 0 (id=2686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x86576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000100)='silent\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000540)={@val={0xa, 0x88a8}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x3e, 0x64, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010102, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5a, 0x1, 0x8001, 0x0, 0x2}}}}}}}, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) 4.084781222s ago: executing program 0 (id=2691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xd, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000002, 0xd, 0x4, 0x10, 0x81, 0x4, 0x5, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf5, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x3, 0x2, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0x1b, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x100000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x4, 0x3, 0x3]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x40000}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) fcntl$setlease(r4, 0x400, 0x1) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x9e4b, 0x12240, 0x2, 0xffffffff, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000140)={0x5, r6, 0x3f, {0x9, 0x1}, 0x6}, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@alg={0xe0, 0x10, 0x90c, 0x70bd27, 0x25dfdbff, {{'jitterentropy_rng\x00'}, '\x00', '\x00', 0x2000, 0x2000}}, 0xe0}}, 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000380)=[@cpuid={0x14, 0x18, {0x5, 0x4}}, @uexit={0x0, 0x18, 0x2}, @wr_drn={0x6e, 0x20, {0x6, 0x9}}, @code={0xa, 0x5a, {"460f01f8400fc7b307200000f30faeef66b87e000f00d03e0f22e48f09f801b7a2920000c4217828b90d000000450f0139480fc72b66baf80cb848f6898bef66bafc0cb80a000000ef"}}, @rdmsr={0x32, 0x18, {0x831}}, @out_dx={0xaa, 0x28, {0x298e, 0x5, 0x1}}, @rdmsr={0x32, 0x18, {0xb38}}, @wrmsr={0x1e, 0x20, {0x858, 0xc}}, @wr_crn={0x46, 0x20, {0x0, 0x40}}, @out_dx={0xaa, 0x28, {0x845a, 0x0, 0x9}}, @cpuid={0x14, 0x18, {0x0, 0xffff}}, @wr_crn={0x46, 0x20, {0x4, 0x7}}, @rdmsr={0x32, 0x18, {0x571}}, @wr_crn={0x46, 0x20, {0x2, 0xb}}, @in_dx={0x82, 0x20, {0x200a, 0x3}}, @code={0xa, 0x6c, {"2c7066400ffb1b66420f3808f7c4e2f933630041f46566400f3882ad00700000c744240000800000c7442402e2030000c7442406000000000f011c2466460f38828d649effffb9800000c00f3235000400000f3036660f3881460d"}}, @uexit={0x0, 0x18, 0xfffffffffffffffa}, @cpuid={0x14, 0x18, {0xffff0000, 0x6}}, @out_dx={0xaa, 0x28, {0x3d7, 0x1, 0xfd}}, @wrmsr={0x1e, 0x20, {0xc0010062, 0x6}}, @cpuid={0x14, 0x18, {0x7, 0xff}}, @wr_drn={0x6e, 0x20, {0x6, 0x80000001}}, @uexit={0x0, 0x18, 0x9}], 0x32e}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f0000000700)="ded466b8fecfffff0f23d80f21f86635000000200f23f83e0f35660f3a443b7ff32edb04b803008ec866b80500000066b9079f98ee0f01c10f01c20f8a00000f785937", 0x43}], 0x1, 0x2, &(0x7f00000007c0), 0x0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 3.227109921s ago: executing program 4 (id=2716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001800)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c0e8b089b32323b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1bb3210daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdc69c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f3923733ee9ebdc667616dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d9560ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3554ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0cae51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d9376877971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbe8724779ca1f733b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a4331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e05b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d530000912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c743000078ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b7d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488b0}, 0x80) 3.16718046s ago: executing program 4 (id=2717): syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000a1540f3f1d292c07eb9cc7793c0000000000080045000024000000000073907800000300ac1414aa000000"], 0x0) 3.166721206s ago: executing program 4 (id=2718): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xb7, &(0x7f00000002c0)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00leI4\x8cm\xa0\x89\x0e\xd4\xa2\x88\x00\xd1l\x00M\x12\x98_h\xb8\x8fG\x15\xd3\x87\xd6\xa4\xc8\xa6}\xfc\x19\xc6\xe3\x9f\xde\xa5\x9b\xaav\xcam?\x82\xa8\x9ep\xae\xe7\x99\xee\xe3\x83\x148\x96N\xba\xe8\tF\xb9\bU95\x9c!\xc4\x1a\vY|\x8e\x14\xb7\x0eI\xab\t\x0e\x01\xa9\xa8<=\xaa\xfb]\xe3\\\a\xbea`l\x80\xe2\xd1\x86+\xa3\xe9\x06\xb8\xcf\v\xd8J\x91\x04\xd3\x83\xcd\x90\xb8\xd6\xec,\xd8\xe7f\xa8\xf16w\xa5{\xe7\x11\xae$\x1d=\x97\a\x93\x9c\xb3\xf4\xa8Z\xc8\xee<\xe4\x9e\xe4\x99~\x9bVe'}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/93, 0x5d) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x0, 0x26, 0x0, 0x4000, 0x8}, 0x28) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x402c805}, 0x8000082) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x20088041) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xfffffffffffffec7) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) openat$hpet(0xffffffffffffff9c, &(0x7f0000002480), 0x40, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000002580)={0x0, 0x8}, &(0x7f0000002500)=0x8) 3.166447876s ago: executing program 0 (id=2719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10) shmat(0x0, &(0x7f0000ff1000/0x1000)=nil, 0x400c) capset(0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r5, 0x0, 0x1010, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1, r4}) 3.087073845s ago: executing program 0 (id=2720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20580, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) r9 = openat$incfs(r8, &(0x7f0000000240)='.pending_reads\x00', 0x0, 0x28) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) ioctl$IOCTL_GET_NUM_DEVICES(r8, 0x40046104, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r10, 0x0, r6, 0x0, 0x408cd, 0x3) setns(r10, 0x20000) syz_emit_ethernet(0x33, &(0x7f0000000040)={@multicast, @random='\x00\x00\x00 \x00', @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x3d, 0x25, 0x0, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @multicast1, {[@ra={0x94, 0x4}]}}, {0x11, 0x7c, 0x0, @multicast1, "73f3000062"}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8, 0xfff1}, {0xffff, 0x6ab3b4cf5773204b}, {0xc, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x88800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 2.993585141s ago: executing program 0 (id=2723): set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x211280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f00000000c0)=""/30, 0x1e) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r6 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r8 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0xfffffffe, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r6, 0x2003, 0x0, 0x26, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 1.865721871s ago: executing program 2 (id=2746): gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x15, 0x800000000004}, &(0x7f0000bbdffc)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f00000000c0)=[{r0, 0x203}], 0x20, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x3899b3e1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000440)=ANY=[@ANYBLOB="6861676800000022fc5fa3003aa8ebe513a53edce70fff33db45230603c6175bca5c090ac2ced52511282b6b0407eed8bc55c6a587b6d4f95076d12f400ce70ae67b6478e646acae592556d26b8c6be0f00a3369db844d12506bc80c23c509309eae0e0c03f1ad95b9321e61761743b38ef1642e56c41b4f151a69b68c7474acdd876cab613b4a8fbb"]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x80) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'rose0\x00'}) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/freeze_filesystems', 0x100, 0x245) sendfile(r5, r5, 0x0, 0x68) bind$bt_sco(r4, &(0x7f0000000040), 0x8) listen(r4, 0x1) accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000200), 0x4) 1.005197185s ago: executing program 2 (id=2755): ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x7, 0x9f, 0x0, 'queue1\x00', 0x4}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000001da00000000000008436000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x4, 0x2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x54, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000000}, 0x20040880) 917.005872ms ago: executing program 2 (id=2756): syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x66, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x44]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x1]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8048800) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getspdinfo={0x14, 0x25, 0xfa996abc033a2361, 0x70bd28, 0x25dfdbfe, 0x10, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) 916.582718ms ago: executing program 2 (id=2757): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x1ff, @loopback, 0x6, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0xa7, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r2, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x28, 0x12, 0xa01, 0xffff, 0x0, {0x80}, [@nested={0x11, 0xc7, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @u32=0xc8f}, @generic="b0f10ffa92"]}]}, 0x28}}, 0x10) 846.750699ms ago: executing program 2 (id=2758): socket(0x27, 0x80805, 0x0) (async) r0 = socket(0x27, 0x80805, 0x0) listen(r0, 0x0) socket$inet6(0xa, 0x1, 0x84) (async) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000080)={0x6, 0x2, {0x51, 0x5, 0xffff, {0x5, 0xde7}, {0x5, 0xaf8c}, @ramp={0x5, 0xc, {0x5, 0x10, 0x40, 0x3ff}}}, {0x54, 0xf103, 0x6, {0x6}, {0x1000, 0xfffd}, @period={0x5a, 0x1, 0x3, 0xfff3, 0xe9, {0xe295, 0x400, 0x7, 0xd0c}, 0x0, 0x0}}}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010016000000000000000c0000000400038004000180"], 0x1c}}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) accept$ax25(r0, 0x0, 0x0) (async) accept$ax25(r0, 0x0, 0x0) 414.946459ms ago: executing program 3 (id=2765): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000f3, 0x0, 0x67c7}]}) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setresuid(0x0, 0xee00, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x402002, 0x0) r5 = io_uring_setup(0xaee, &(0x7f0000000200)={0x0, 0xdd0f, 0x800, 0x7, 0x2, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 236.870725ms ago: executing program 3 (id=2766): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, r0, 0x0, 0x154) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c00018008001600", @ANYRES32=0xee01], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r3, 0x4b34, 0x3bf) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r0, 0x0, r0, 0x0, 0x154) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c00018008001600", @ANYRES32=0xee01], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDDELIO(r3, 0x4b34, 0x3bf) (async) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) (async) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) (async) 176.634007ms ago: executing program 3 (id=2767): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x0, 0x800, 0x2, 0x0, 0xfffffff7, 0xfffffff4, 0xbfffbffa, 0xfffffffd, 0x5, 0x0, 0xffffffff, 0x1, 0x600, 0xfffffffd, 0x4, 0x0, 0x8, 0x4, 0x40100, 0x3, 0xc, 0x1001}}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000003c0), 0x0}, 0x20) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00(\x00\a'], 0x20}}, 0x40080c0) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@gettaction={0x28, 0x32, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async, rerun: 32) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x18, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) (async, rerun: 32) getsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) mount$pvfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8440, &(0x7f0000000300)={[{'ethtool\x00'}, {'}&\xbfq'}, {'%['}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise_type}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x62, 0x51, 0x30, 0x31, 0x37, 0x32, 0x64], 0x2d, [0x66, 0x65, 0x2, 0x66], 0x2d, [0x32, 0x61, 0x37, 0x33], 0x2d, [0x64, 0x0, 0x37, 0x61], 0x2d, [0x36, 0x30, 0x61, 0x36, 0x35, 0x32, 0x32, 0x62]}}}, {@seclabel}]}) socket$nl_sock_diag(0x10, 0x3, 0x4) 176.2153ms ago: executing program 3 (id=2768): linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x1a) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) write$char_usb(r3, &(0x7f0000000740)="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", 0xf4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'bridge0\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x80, 0x11, 0x4, 0x0, 0xca6}, @arp=@generic={0x5, 0x88a2, 0x6, 0xf, 0x1, @local, "a1bc1b61d4b6ec22f38c973d2077ed", @remote, "624991aea8932db751b99545bff850"}}, 0x40) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sync_file_range(r0, 0x8, 0x7fffffff, 0x4) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mount$afs(&(0x7f0000000440)=ANY=[@ANYBLOB="2373797a303a730c8887648e11a8251d299de570b950fac0966d8d2db309dfdf2f8b189faa7f88b90700000083f4aa4df9a4f42bae150b9f97a25e7aa2b0f8908c65e6f992c9f156c0607cad5653a4bcc4f594b126c5d6a53fc38bc0f66218fa0c9ea85b762ded4459d485db5ce83e800b697f9957ec079976042d3ed5d6d9d44ad9119bbffd77a95c3547ec13247f780f60cf3edcf6f47bc55f43abe59aaa2cef6ea85548a4a0ce", @ANYRES32=0x0], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1200000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r7, 0x1, 0x70bd2d, 0x2ddfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) fanotify_init(0x200, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 106.857611ms ago: executing program 4 (id=2769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000100004080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.729556ms ago: executing program 3 (id=2770): r0 = fsmount(0xffffffffffffffff, 0x1, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x3c1, 0xc00) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r7 = getuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@debug={'debug', 0x3d, 0xffffffffffffffff}}, {@nodevmap}, {@cache_loose}, {@fscache}, {@cache_fscache}, {@dfltuid={'dfltuid', 0x3d, r2}}], [{@fowner_gt={'fowner>', r4}}, {@smackfshat}, {@subj_type={'subj_type', 0x3d, '!'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@audit}, {@euid_lt={'euid<', r7}}, {@appraise_type}]}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)={[{0x2b, 'net'}, {0x0, 'cpu'}]}, 0xa) getgid() bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', r0}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000440)=r0, 0x1) r8 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x402000, 0x10) setfsuid(r6) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00', 0x2, 0x0) accept$netrom(r0, &(0x7f0000000500)={{0x3, @null}, [@null, @bcast, @netrom, @null, @null, @remote, @null]}, &(0x7f0000000580)=0x48) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x80880, 0x8) utimensat(r10, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x77359400}, {0x0, 0xea60}}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000740)={0x3, @default, r11}) lchown(&(0x7f0000000780)='./file0\x00', r6, r3) r12 = accept$ax25(r0, &(0x7f00000007c0)={{}, [@netrom, @netrom, @default, @null, @null, @rose, @rose, @bcast]}, &(0x7f0000000840)=0x48) ioctl$SIOCAX25CTLCON(r12, 0x89e8, &(0x7f0000000880)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x6, 0x8, [@null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r13 = syz_io_uring_setup(0x3dfd, &(0x7f0000000900)={0x0, 0xe24f, 0x1000, 0x2, 0x32, 0x0, r12}, &(0x7f0000000980), &(0x7f00000009c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r13, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r13, 0x5, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r8, 0x4018aee3, &(0x7f0000000a40)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000a00)=0x16}) chmod(&(0x7f0000000a80)='./file0\x00', 0x1c1) fstat(r9, &(0x7f0000000ac0)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000b40)={0x4}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000f00)={0x0, 0x1000, "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"}, &(0x7f0000001f40)=0x1008) 6.473817ms ago: executing program 4 (id=2771): r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x5a10c0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xb, 0x1, 0x0, {0x5, 0x3, 0x9, 0x2}}) 810.596µs ago: executing program 2 (id=2772): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)="d6a93d4ca1c688069f3b839b8fc5d40d0000c480250a488d00ec1b21635838f9149f06f859b9fb9adac27e31f187e3d9e78b77efb7cd4ac176d8d286b19243fe159301972156ccc7d8ac8facc88943cde3c9dda5356f389991c8bc02a3fa25", 0x8000, r3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)="d6a93d4ca1c688069f3b839b8fc5d40d0000c480250a488d00ec1b21635838f9149f06f859b9fb9adac27e31f187e3d9e78b77efb7cd4ac176d8d286b19243fe159301972156ccc7d8ac8facc88943cde3c9dda5356f389991c8bc02a3fa25", 0x8000, r3}, 0x38) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000040)={0x7f}, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x3, r3}, 0x38) bind$can_j1939(r0, &(0x7f0000000b80)={0x1d, r2, 0x1, {0x1, 0x0, 0x4}, 0xff}, 0x18) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x0, 0x1, 0x1}, 0x2}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x0, 0x1, 0x1}, 0x2}, 0x18) exit(0x1ff) (async) exit(0x1ff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 587.949µs ago: executing program 4 (id=2773): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042dbd7000fedbdf256800000008000300", @ANYRES32=r4, @ANYBLOB="0c00990008000000650040000c00c7000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x40087) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x200000005c831, r0, 0xd85fd000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) sendmsg$nl_generic(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)={0x2144, 0x20, 0x800, 0x70bd28, 0x25dfdbff, {}, [@generic="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", @typed={0xc, 0xdb, 0x0, 0x0, @u64=0x7}, @nested={0x18, 0x70, 0x0, 0x1, [@typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @nested={0xffffffffffffffdf, 0x55, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @fd=r1}, @generic="cfc9a4242d030d020eba42a8b3d53ab9f51157e4c77cefe90296d817887aa55342c7aa91d8790ec1df61c155ee119cc813e9e871b792a5e165f5365d8b9b685b74ac2ce35a14a6eab034d58ab66bdfa527322dd2ece0d9ce96b47c621722302517bddc1820bcb94d6bc83f1f7b63fe9355e62548d5fa87462ab5125e22cbd9c8ae2d9d9cdf63a9b8a3c6f94ad8889202ddf2dd7e98702576fbd3fb68e6a91ef32476669a9623f4d7be9a63009d26c35174c067d604d8428e7a3e53899e2664f830b0c822c51b8ded43e71d60b036eefb1dcc50d4cdbae1a98c74ffad0b497fa6abc5b43c40060dc886967e3c912dc75f2b5cbc7c66", @generic="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", @typed={0x6, 0x5b, 0x0, 0x0, @str='\xdf\x00'}]}]}, 0x2144}, 0x1, 0x0, 0x0, 0xd0}, 0x2002c001) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x49, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x3f, &(0x7f00000008c0)=0x1, 0x4) 0s ago: executing program 3 (id=2774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/33, 0x21}], 0x1}, 0x9}], 0x1, 0x3, 0x0) kernel console output (not intermixed with test programs): etlink_route_socket pid=10658 comm=syz.2.1344 [ 153.803734][T10677] block nbd0: NBD_DISCONNECT [ 153.847043][T10685] overlayfs: failed to clone upperpath [ 153.901162][T10691] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 153.962224][T10693] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 154.023546][T10702] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.028899][T10702] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 154.033514][T10702] fuse: Unknown parameter '0x0000000000000005' [ 154.259071][T10723] EXT4-fs: Conflicting test_dummy_encryption options [ 154.259753][ T40] audit: type=1400 audit(1759435163.595:20898): avc: denied { ioctl } for pid=10722 comm="syz.0.1365" path="socket:[34148]" dev="sockfs" ino=34148 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.275001][ T40] audit: type=1400 audit(1759435163.595:20899): avc: denied { getopt } for pid=10722 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.344307][ T40] audit: type=1400 audit(1759435163.675:20900): avc: denied { mount } for pid=10736 comm="syz.4.1369" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 154.365313][ T40] audit: type=1400 audit(1759435163.695:20901): avc: denied { unmount } for pid=9067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 154.404613][T10754] fuse: Bad value for 'user_id' [ 154.407333][T10754] fuse: Bad value for 'user_id' [ 154.449649][T10763] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 154.453825][ T40] audit: type=1400 audit(1759435163.785:20902): avc: denied { relabelto } for pid=10762 comm="syz.3.1377" name="cpu.stat" dev="tmpfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 154.464299][ T40] audit: type=1400 audit(1759435163.785:20903): avc: denied { associate } for pid=10762 comm="syz.3.1377" name="cpu.stat" dev="tmpfs" ino=2046 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 154.475626][ T40] audit: type=1400 audit(1759435163.785:20904): avc: denied { append } for pid=10762 comm="syz.3.1377" path="/375/cpu.stat" dev="tmpfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 154.485900][ T40] audit: type=1400 audit(1759435163.805:20905): avc: denied { unlink } for pid=5944 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 154.521860][T10773] fuse: Bad value for 'fd' [ 154.627566][ T5812] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 154.786724][ T6014] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 154.787893][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 154.802873][ T5812] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.805870][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.816611][ T5812] usb 5-1: Product: syz [ 154.818675][ T5812] usb 5-1: Manufacturer: syz [ 154.820369][ T5812] usb 5-1: SerialNumber: syz [ 154.826981][ T5812] usb 5-1: config 0 descriptor?? [ 154.948154][ T6014] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.952596][ T6014] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 154.956381][ T6014] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.961086][ T6014] usb 9-1: config 0 descriptor?? [ 155.168400][ T6014] usbhid 9-1:0.0: can't add hid device: -71 [ 155.171178][ T6014] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 155.176045][ T6014] usb 9-1: USB disconnect, device number 3 [ 155.206854][ T40] audit: type=1400 audit(1759435164.545:20906): avc: denied { getopt } for pid=10786 comm="syz.2.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 155.258689][T10791] ufs: You didn't specify the type of your ufs filesystem [ 155.258689][T10791] [ 155.258689][T10791] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 155.258689][T10791] [ 155.258689][T10791] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 155.275286][T10791] ufs: ufstype=old is supported read-only [ 155.309603][ T24] usb 5-1: USB disconnect, device number 15 [ 155.506188][T10805] fuse: Bad value for 'fd' [ 155.660979][T10818] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 156.127653][T10862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=10862 comm=syz.2.1406 [ 156.184221][T10866] __nla_validate_parse: 3 callbacks suppressed [ 156.184237][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 156.192839][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 156.197421][T10866] netlink: 'syz.4.1407': attribute type 11 has an invalid length. [ 156.201669][T10866] netlink: 'syz.4.1407': attribute type 13 has an invalid length. [ 156.517112][T10910] afs: Unknown parameter 'dyncOK0ԫb[Aux$M' [ 156.560463][T10914] tipc: Enabling of bearer rejected, failed to enable media [ 156.945027][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 157.067573][T10968] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 157.070551][T10968] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.075867][T10968] vhci_hcd vhci_hcd.0: Device attached [ 157.082765][T10972] vhci_hcd: unknown pdu 1 [ 157.085142][ T7385] vhci_hcd: stop threads [ 157.087209][ T7385] vhci_hcd: release socket [ 157.089154][ T7385] vhci_hcd: disconnect device [ 157.207393][T10993] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1437'. [ 157.935002][T11018] unknown channel width for channel at 909000KHz? [ 157.939864][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'. [ 158.476891][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 158.606581][ T10] usb 9-1: device descriptor read/64, error -71 [ 158.846743][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 158.976881][ T10] usb 9-1: device descriptor read/64, error -71 [ 159.086950][ T10] usb usb9-port1: attempt power cycle [ 159.426825][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 159.448065][ T10] usb 9-1: device descriptor read/8, error -71 [ 159.686763][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 159.707382][ T10] usb 9-1: device descriptor read/8, error -71 [ 159.826887][ T10] usb usb9-port1: unable to enumerate USB device [ 160.412388][ T1329] libceph: mon0 (1)[c::]:6789 socket error on write [ 160.459811][ T1329] libceph: mon0 (1)[b::]:6789 socket error on write [ 160.503692][T11037] ceph: No mds server is up or the cluster is laggy [ 160.503701][T11039] ceph: No mds server is up or the cluster is laggy [ 160.796625][ T1329] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 160.976676][ T1329] usb 5-1: Using ep0 maxpacket: 8 [ 160.985657][ T1329] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 160.989689][ T1329] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.993914][ T1329] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.997448][ T1329] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28704, setting to 1024 [ 161.001855][ T1329] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 161.005801][ T1329] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.010137][ T1329] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.013324][ T1329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.480467][T11087] omfs: Invalid superblock (0) [ 161.520393][T11093] netlink: 'syz.2.1469': attribute type 10 has an invalid length. [ 161.525367][T11093] macvlan0: entered promiscuous mode [ 161.527785][T11093] macvlan0: entered allmulticast mode [ 161.531325][T11093] veth1_vlan: entered allmulticast mode [ 161.534539][T11093] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 161.577543][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 161.615039][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 161.683001][T11108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1474'. [ 161.779500][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 161.779523][ T40] audit: type=1400 audit(1759435171.115:20915): avc: granted { setsecparam } for pid=11115 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 161.792638][ T1472] usb 5-1: USB disconnect, device number 16 [ 161.831542][T11121] /dev/sg0: Can't lookup blockdev [ 161.891283][T11121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.926164][T11119] ipip0: entered promiscuous mode [ 161.935360][T11118] block nbd0: shutting down sockets [ 162.013191][T11121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.042538][T11151] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.117103][T11121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.164698][T11160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1492'. [ 162.169279][T11160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1492'. [ 162.180759][T11169] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 162.199711][T11169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.234379][T11169] bond3: (slave veth5): Enslaving as an active interface with a down link [ 162.259852][T11121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.274875][T11169] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.281392][T11169] bond3: (slave team0): making interface the new active one [ 162.285331][T11169] team0: entered promiscuous mode [ 162.288203][T11169] bond3: (slave team0): Enslaving as an active interface with an up link [ 162.353502][ T7387] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.358544][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'. [ 162.362430][T11175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1496'. [ 162.367082][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'. [ 162.372696][T11175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1496'. [ 162.387274][ T7397] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.409217][ T7397] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.416316][ T7397] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.496909][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 162.509572][ T40] audit: type=1400 audit(1759435171.845:20916): avc: denied { getopt } for pid=11181 comm="syz.0.1499" lport=53938 faddr=::ffff:172.30.0.1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.558293][ T40] audit: type=1400 audit(1759435171.895:20917): avc: denied { read } for pid=11181 comm="syz.0.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 163.444944][ T40] audit: type=1400 audit(1759435172.775:20918): avc: denied { ioctl } for pid=11209 comm="syz.0.1508" path="socket:[35969]" dev="sockfs" ino=35969 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.453354][ T40] audit: type=1400 audit(1759435172.775:20919): avc: denied { write } for pid=11209 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.713110][ T40] audit: type=1400 audit(1759435173.045:20920): avc: denied { getopt } for pid=11231 comm="syz.2.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.997758][ T40] audit: type=1400 audit(1759435173.325:20921): avc: denied { create } for pid=11256 comm="syz.0.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 164.299070][T11323] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 164.306900][ T40] audit: type=1400 audit(1759435173.635:20922): avc: denied { mount } for pid=11322 comm="syz.2.1547" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 164.660207][T11371] could not allocate digest TFM handle sha256-ssse3 [ 164.664352][ T40] audit: type=1400 audit(1759435173.995:20923): avc: denied { read } for pid=11370 comm="syz.2.1560" path="socket:[36164]" dev="sockfs" ino=36164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.972960][T11413] fuse: Bad value for 'group_id' [ 164.974963][T11413] fuse: Bad value for 'group_id' [ 165.003312][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65508 sclass=netlink_route_socket pid=11415 comm=syz.2.1568 [ 165.496712][T11447] fuse: Bad value for 'group_id' [ 165.499090][T11447] fuse: Bad value for 'group_id' [ 165.840586][T11417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.961580][T11472] fuse: Bad value for 'group_id' [ 165.963979][T11472] fuse: Bad value for 'group_id' [ 166.058700][T11477] netlink: 'syz.2.1588': attribute type 1 has an invalid length. [ 166.078276][T11477] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.113762][T11477] bond5: (slave ip6gretap1): making interface the new active one [ 166.117421][T11477] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 166.356107][T11510] netlink: 'syz.4.1595': attribute type 15 has an invalid length. [ 166.673708][ T40] audit: type=1400 audit(1759435176.005:20924): avc: denied { read } for pid=11532 comm="syz.0.1602" path="socket:[37915]" dev="sockfs" ino=37915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.065729][T11560] overlayfs: failed to clone upperpath [ 167.223179][ T40] audit: type=1400 audit(1759435176.555:20925): avc: denied { ioctl } for pid=11568 comm="syz.4.1613" path="/dev/nullb0" dev="devtmpfs" ino=706 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.273845][T11571] __nla_validate_parse: 4 callbacks suppressed [ 167.273866][T11571] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1614'. [ 167.423110][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 167.493645][ T40] audit: type=1400 audit(1759435176.825:20926): avc: denied { read } for pid=11584 comm="syz.4.1619" path="socket:[36306]" dev="sockfs" ino=36306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 167.564115][ T40] audit: type=1400 audit(1759435176.895:20927): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 167.610600][T11603] netlink: 'syz.3.1625': attribute type 11 has an invalid length. [ 167.657063][T11618] all: renamed from lo (while UP) [ 167.700141][ T40] audit: type=1400 audit(1759435177.035:20928): avc: denied { getopt } for pid=11623 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.743024][ T40] audit: type=1400 audit(1759435177.075:20929): avc: denied { execute_no_trans } for pid=11630 comm="syz.2.1634" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=38029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 167.855914][T11651] 9pnet_fd: Insufficient options for proto=fd [ 167.860907][T11652] program syz.0.1641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.872261][ T40] audit: type=1400 audit(1759435177.205:20930): avc: denied { ioctl } for pid=11650 comm="syz.0.1641" path="/341/file0/file0" dev="9p" ino=71827771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.872368][T11651] ptrace attach of "/syz-executor exec"[9067] was attempted by "/syz-executor exec"[11651] [ 167.890400][T11651] input: syz0 as /devices/virtual/input/input22 [ 167.898564][ T40] audit: type=1326 audit(1759435177.235:20931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.4.1640" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e0418eec9 code=0x0 [ 168.063640][T11654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.470697][T11673] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20000 [ 168.493385][ T40] audit: type=1400 audit(1759435177.825:20932): avc: denied { write } for pid=11681 comm="syz.0.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.520752][T11686] fuse: Bad value for 'group_id' [ 168.522395][T11686] fuse: Bad value for 'group_id' [ 168.620897][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 168.624863][T11693] lo: Caught tx_queue_len zero misconfig [ 168.628751][T11693] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1654'. [ 168.635267][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 168.639151][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 168.698712][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 168.704638][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 168.744951][T11707] fuse: Unknown parameter 'grou00000000000000000000' [ 168.890473][T11725] bridge0: entered promiscuous mode [ 168.893823][T11725] macsec1: entered promiscuous mode [ 168.899613][T11725] bridge0: port 3(macsec1) entered blocking state [ 168.901902][T11725] bridge0: port 3(macsec1) entered disabled state [ 168.904196][T11725] macsec1: entered allmulticast mode [ 168.905942][T11725] bridge0: entered allmulticast mode [ 168.910384][T11725] macsec1: left allmulticast mode [ 168.912127][T11725] bridge0: left allmulticast mode [ 168.915118][T11725] bridge0: left promiscuous mode [ 169.023972][T11729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.170982][ T63] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 169.241878][T11739] fuse: Unknown parameter 'grou00000000000000000000' [ 169.326735][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 169.394475][T11747] pim6reg13: entered allmulticast mode [ 169.488505][ T24] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 169.491902][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 169.496230][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 169.504765][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 169.508775][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 169.512260][ T24] usb 5-1: Product: syz [ 169.514012][ T24] usb 5-1: Manufacturer: syz [ 169.516145][ T24] usb 5-1: SerialNumber: syz [ 169.520020][ T24] usb 5-1: config 0 descriptor?? [ 169.523179][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 169.525345][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 169.530509][ T24] usb 5-1: selecting invalid altsetting 0 [ 169.742016][T11761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1676'. [ 169.748037][T11762] fuse: Unknown parameter 'grou00000000000000000000' [ 169.759334][T11758] mkiss: ax0: crc mode is auto. [ 169.915915][T11771] bond0: (slave team0): Releasing backup interface [ 169.921644][T11771] team0: left allmulticast mode [ 169.923490][T11771] team_slave_0: left allmulticast mode [ 169.925555][T11771] team_slave_1: left allmulticast mode [ 169.934816][T11771] bond0: (slave bond_slave_0): Releasing backup interface [ 169.940926][T11771] bond_slave_0: left allmulticast mode [ 169.948490][T11771] bond0: (slave bond_slave_1): Releasing backup interface [ 169.952052][T11771] bond_slave_1: left allmulticast mode [ 169.961107][T11771] team0: Port device team_slave_0 removed [ 169.967361][T11771] team0: Port device team_slave_1 removed [ 169.975274][T11771] bond2: (slave gretap1): Releasing active interface [ 170.025337][T11775] overlayfs: failed to clone upperpath [ 170.331095][T11793] openvswitch: netlink: Flow actions attr not present in new flow. [ 170.615808][ T6033] usb 5-1: USB disconnect, device number 17 [ 170.660405][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11831 comm=syz.3.1696 [ 170.664216][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=11831 comm=syz.3.1696 [ 170.668188][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11831 comm=syz.3.1696 [ 170.671911][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=11831 comm=syz.3.1696 [ 170.675441][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=11831 comm=syz.3.1696 [ 170.681160][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11831 comm=syz.3.1696 [ 170.687606][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=11831 comm=syz.3.1696 [ 170.692962][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11831 comm=syz.3.1696 [ 170.699003][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11831 comm=syz.3.1696 [ 170.806220][T11844] fuse: Unknown parameter 'group_i00000000000000000000' [ 171.005568][ T40] audit: type=1400 audit(1759435180.335:20933): avc: denied { mounton } for pid=11855 comm="syz.4.1704" path="/142/file0" dev="hugetlbfs" ino=36609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 171.009618][T11856] fuse: Bad value for 'fd' [ 171.035013][ T40] audit: type=1400 audit(1759435180.365:20934): avc: denied { unmount } for pid=9067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 171.048061][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1705'. [ 171.057438][T11858] xfrm1: entered promiscuous mode [ 171.058599][T11860] program syz.4.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.059530][T11858] xfrm1: entered allmulticast mode [ 171.063111][T11860] ata1.00: invalid transfer count 0 [ 171.466856][ T6033] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 171.565090][T11890] fuse: Unknown parameter 'group_id00000000000000000000' [ 171.616608][ T6033] usb 9-1: Using ep0 maxpacket: 16 [ 171.620163][ T6033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.623825][ T6033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.629381][ T6033] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 171.635959][ T6033] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 171.640433][ T6033] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.645251][ T6033] usb 9-1: config 0 descriptor?? [ 171.666058][T11901] netlink: 'syz.2.1713': attribute type 7 has an invalid length. [ 171.669169][T11901] netlink: 'syz.2.1713': attribute type 8 has an invalid length. [ 171.999482][T11955] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 172.055195][ T6033] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 172.057560][ T6033] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 172.060547][ T6033] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 172.064056][ T6033] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 172.067205][ T6033] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 172.073111][ T6033] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 172.119557][ T6033] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 172.122840][ T6033] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 172.188499][T11983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11983 comm=syz.0.1738 [ 172.199553][T11983] erofs (device nbd0): cannot find valid erofs superblock [ 172.232937][T11989] tipc: Enabling of bearer rejected, failed to enable media [ 172.266759][ T54] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 172.275647][ T1472] usb 9-1: USB disconnect, device number 9 [ 172.281181][ T54] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 172.294697][ T54] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 172.302802][ T54] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 172.328736][T12004] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 172.332182][T11996] __nla_validate_parse: 7 callbacks suppressed [ 172.332198][T11996] netlink: 812 bytes leftover after parsing attributes in process `syz.3.1743'. [ 172.439386][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 172.559757][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 172.559771][ T40] audit: type=1400 audit(1759435181.895:20939): avc: denied { shutdown } for pid=12031 comm="syz.0.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.821770][T12040] 9pnet_fd: Insufficient options for proto=fd [ 172.829336][T12040] ubi31: attaching mtd0 [ 172.833349][T12040] ubi31: scanning is finished [ 172.835392][T12040] ubi31: empty MTD device detected [ 172.965435][T12040] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 172.966389][T12048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1754'. [ 172.969560][T12040] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 172.975072][T12040] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 172.978785][T12040] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 172.981779][T12040] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 172.984130][T12040] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 172.996962][T12040] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1681505773 [ 173.000608][T12040] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 173.035846][T12049] ubi31: background thread "ubi_bgt31d" started, PID 12049 [ 173.149086][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 173.179093][T12061] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 173.334314][T12084] fuse: Bad value for 'user_id' [ 173.336069][T12084] fuse: Bad value for 'user_id' [ 173.374681][T12090] vlan0: entered promiscuous mode [ 173.390249][T12090] team0: Port device vlan0 added [ 173.449589][T12090] trusted_key: encrypted_key: key trusted:syz not found [ 173.466875][ T7387] team0: left promiscuous mode [ 173.483778][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 173.486933][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 173.497799][T12104] netlink: 'syz.4.1769': attribute type 64 has an invalid length. [ 173.500477][T12104] netlink: 'syz.4.1769': attribute type 4 has an invalid length. [ 173.503064][T12104] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1769'. [ 173.706020][T12099] ip6tnl2: entered promiscuous mode [ 173.709649][T12099] ip6tnl2: entered allmulticast mode [ 173.771312][T12116] tmpfs: Bad value for 'mpol' [ 173.777463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.884308][T12120] fuse: Bad value for 'fd' [ 173.960513][T12126] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 174.143344][T12140] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1781'. [ 174.147273][T12140] tipc: Started in network mode [ 174.148898][T12140] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 174.151285][T12140] tipc: Enabled bearer , priority 0 [ 174.176401][T12144] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1782'. [ 174.211253][T12147] netlink: 'syz.3.1783': attribute type 2 has an invalid length. [ 174.338978][T12155] 9pnet_fd: p9_fd_create_tcp (12155): problem binding to privport [ 174.426908][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 174.831988][T12187] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 174.834109][T12187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.839356][T12187] vhci_hcd vhci_hcd.0: Device attached [ 174.846298][T12187] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 174.848789][T12187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.851662][T12187] vhci_hcd vhci_hcd.0: Device attached [ 174.855343][T12187] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 174.857534][T12187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.860080][T12187] vhci_hcd vhci_hcd.0: Device attached [ 174.864405][T12187] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 174.866923][T12187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.870257][T12187] vhci_hcd vhci_hcd.0: Device attached [ 174.873243][T12187] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 174.875381][T12187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.878771][T12187] vhci_hcd vhci_hcd.0: Device attached [ 174.882243][T12187] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(21) [ 174.884491][T12187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.887837][T12187] vhci_hcd vhci_hcd.0: Device attached [ 174.892357][T12187] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 174.895404][T12187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.900395][T12187] vhci_hcd vhci_hcd.0: Device attached [ 174.905074][T12187] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(27) [ 174.908095][T12187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.913491][T12187] vhci_hcd vhci_hcd.0: Device attached [ 174.920887][T12187] vhci_hcd vhci_hcd.0: port 0 already used [ 174.936992][T12199] vhci_hcd: connection closed [ 174.937332][T12203] vhci_hcd: connection closed [ 174.937881][T12195] vhci_hcd: connection closed [ 174.938587][T12193] vhci_hcd: connection closed [ 174.938717][T12191] vhci_hcd: connection closed [ 174.938838][T12189] vhci_hcd: connection closed [ 174.938977][T12201] vhci_hcd: connection closed [ 174.939212][T12197] vhci_hcd: connection closed [ 174.939651][ T7395] vhci_hcd: stop threads [ 174.954120][ T7395] vhci_hcd: release socket [ 174.955978][ T7395] vhci_hcd: disconnect device [ 174.959953][ T7395] vhci_hcd: stop threads [ 174.961556][ T7395] vhci_hcd: release socket [ 174.963204][ T7395] vhci_hcd: disconnect device [ 174.965367][ T7395] vhci_hcd: stop threads [ 174.967070][ T7395] vhci_hcd: release socket [ 174.969866][ T7395] vhci_hcd: disconnect device [ 174.972000][ T7395] vhci_hcd: stop threads [ 174.973429][ T7395] vhci_hcd: release socket [ 174.976010][ T7395] vhci_hcd: disconnect device [ 174.978216][ T7395] vhci_hcd: stop threads [ 174.979898][ T7395] vhci_hcd: release socket [ 174.980832][ T40] audit: type=1400 audit(1759435184.315:20940): avc: denied { map } for pid=12109 comm="syz.4.1772" path="/dev/qrtr-tun" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.981447][ T7395] vhci_hcd: disconnect device [ 174.994752][ T7395] vhci_hcd: stop threads [ 174.996148][ T7395] vhci_hcd: release socket [ 174.998230][ T7395] vhci_hcd: disconnect device [ 175.000016][ T7395] vhci_hcd: stop threads [ 175.001827][ T7395] vhci_hcd: release socket [ 175.003699][ T7395] vhci_hcd: disconnect device [ 175.005574][ T7395] vhci_hcd: stop threads [ 175.007368][ T7395] vhci_hcd: release socket [ 175.008931][ T7395] vhci_hcd: disconnect device [ 175.016724][ T1329] vhci_hcd: vhci_device speed not set [ 175.233778][T12215] fuse: Bad value for 'fd' [ 175.246373][T12216] ipvlan2: entered promiscuous mode [ 175.253901][T12216] bridge0: port 3(ipvlan2) entered blocking state [ 175.258318][T12216] bridge0: port 3(ipvlan2) entered disabled state [ 175.261586][T12216] ipvlan2: entered allmulticast mode [ 175.266946][T12216] bridge0: entered allmulticast mode [ 175.269186][ T53] tipc: Node number set to 11578026 [ 175.270718][T12216] ipvlan2: left allmulticast mode [ 175.274050][T12216] bridge0: left allmulticast mode [ 175.360065][T12220] overlayfs: failed to clone lowerpath [ 175.480716][ T40] audit: type=1800 audit(1759435184.815:20941): pid=12237 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1807" name="file0" dev="tmpfs" ino=848 res=0 errno=0 [ 175.522129][T12240] fuse: Bad value for 'fd' [ 175.571809][T12246] sctp: [Deprecated]: syz.3.1812 (pid 12246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.571809][T12246] Use struct sctp_sack_info instead [ 175.582612][T12246] netlink: 'syz.3.1812': attribute type 30 has an invalid length. [ 175.750868][T12265] fuse: Invalid rootmode [ 176.241427][ T7386] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.245672][ T7386] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.249653][ T7386] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.254033][ T7386] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.475412][T12294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.765469][T12310] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 176.835799][ T40] audit: type=1400 audit(1759435186.165:20942): avc: denied { mounton } for pid=12317 comm="syz.0.1840" path="/378/bus" dev="tmpfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 176.841346][T12318] XFS (nullb0): Invalid superblock magic number [ 176.852872][T12325] fuse: Invalid rootmode [ 176.898095][ T40] audit: type=1400 audit(1759435186.235:20943): avc: denied { read } for pid=12327 comm="syz.2.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.975227][T12333] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.991658][T12333] vcan1: entered promiscuous mode [ 176.996875][T12333] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.000071][T12333] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 177.005616][T12333] bond4: (slave vcan1): Error -95 calling set_mac_address [ 177.111401][ T40] audit: type=1400 audit(1759435186.445:20944): avc: denied { ioctl } for pid=12336 comm="syz.4.1845" path="socket:[39138]" dev="sockfs" ino=39138 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 177.778991][T12357] fuse: Bad value for 'rootmode' [ 177.818230][ T40] audit: type=1400 audit(1759435187.155:20945): avc: denied { write } for pid=12358 comm="syz.0.1851" name="ndctl0" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.088054][T12382] fuse: Bad value for 'rootmode' [ 178.169132][T12393] __nla_validate_parse: 7 callbacks suppressed [ 178.169150][T12393] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1865'. [ 178.274793][T12405] macsec2: entered promiscuous mode [ 178.280177][T12405] bridge0: port 1(macsec2) entered blocking state [ 178.284414][T12405] bridge0: port 1(macsec2) entered disabled state [ 178.288180][T12405] macsec2: entered allmulticast mode [ 178.290478][T12405] bridge0: entered allmulticast mode [ 178.294506][T12405] macsec2: left allmulticast mode [ 178.296542][T12405] bridge0: left allmulticast mode [ 178.298293][T12406] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1868'. [ 178.335931][T12411] fuse: Bad value for 'rootmode' [ 178.370855][T12415] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 178.482246][T12440] fuse: Unknown parameter 'use00000000000000000000' [ 179.078173][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 179.203239][T12467] fuse: Unknown parameter 'use00000000000000000000' [ 179.249991][T12475] netlink: 'syz.0.1895': attribute type 29 has an invalid length. [ 179.254239][T12475] netlink: 'syz.0.1895': attribute type 29 has an invalid length. [ 179.259925][T12475] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1895'. [ 179.262260][T12472] openvswitch: netlink: IPv4 frag type 36 is out of range max 2 [ 179.266669][T12475] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1895'. [ 179.274701][ T40] audit: type=1400 audit(1759435188.605:20946): avc: denied { mounton } for pid=12473 comm="syz.0.1895" path="/390/file0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 179.344189][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 179.347450][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 179.349556][ T40] audit: type=1400 audit(1759435188.685:20947): avc: denied { read } for pid=12479 comm="syz.3.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.360248][ T40] audit: type=1400 audit(1759435188.685:20948): avc: denied { watch watch_reads } for pid=12481 comm="syz.2.1897" path="pipe:[37718]" dev="pipefs" ino=37718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 179.373086][T12485] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1898'. [ 180.097127][T12499] fuse: Unknown parameter 'use00000000000000000000' [ 180.448445][ T40] audit: type=1400 audit(1759435189.785:20949): avc: denied { ioctl } for pid=12530 comm="syz.3.1908" path="socket:[38760]" dev="sockfs" ino=38760 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 180.534736][T12540] netlink: 'syz.3.1910': attribute type 10 has an invalid length. [ 180.535553][T12539] netlink: 'syz.3.1910': attribute type 10 has an invalid length. [ 180.861447][T12580] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.1919'. [ 180.866247][T12580] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.1919'. [ 180.995888][T12599] fuse: Unknown parameter 'user_i00000000000000000000' [ 181.048388][ T40] audit: type=1400 audit(1759435190.385:20950): avc: denied { execstack } for pid=12606 comm="syz.0.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 181.094789][ T40] audit: type=1400 audit(1759435190.425:20951): avc: denied { map } for pid=12614 comm="syz.0.1928" path="/394/file0" dev="tmpfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 181.221428][T12623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.249519][T12630] fuse: Unknown parameter 'user_i00000000000000000000' [ 181.807190][ T53] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 181.958423][ T53] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 181.962451][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.966949][ T53] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.970148][ T53] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 181.973437][ T53] usb 5-1: Product: syz [ 181.974857][ T53] usb 5-1: Manufacturer: syz [ 181.976377][ T53] usb 5-1: SerialNumber: syz [ 181.980068][ T53] usb 5-1: config 0 descriptor?? [ 181.984820][ T53] usb 5-1: selecting invalid altsetting 0 [ 182.185677][T10404] usb 5-1: USB disconnect, device number 18 [ 182.451865][T12642] loop6: detected capacity change from 0 to 7 [ 182.512524][T12642] Dev loop6: unable to read RDB block 7 [ 182.514473][T12642] loop6: unable to read partition table [ 182.516704][T12642] loop6: partition table beyond EOD, truncated [ 182.522447][T12642] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 182.830338][T12663] fuse: Unknown parameter 'user_id00000000000000000000' [ 182.939756][T12635] veth1_to_batadv: entered promiscuous mode [ 182.951760][T12648] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 183.006086][T12671] futex_wake_op: syz.2.1946 tries to shift op by -1; fix this program [ 183.023092][T12673] IPv6: Can't replace route, no match found [ 183.026816][T12673] loop9: detected capacity change from 0 to 7 [ 183.030893][T12673] Dev loop9: unable to read RDB block 7 [ 183.048240][T12673] loop9: unable to read partition table [ 183.048339][T12673] loop9: partition table beyond EOD, truncated [ 183.048378][T12673] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 183.082318][T12681] fuse: Unknown parameter 'user_id00000000000000000000' [ 183.139047][T12678] selinux_netlink_send: 1 callbacks suppressed [ 183.139068][T12678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12678 comm=syz.3.1949 [ 183.157053][T12678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=12678 comm=syz.3.1949 [ 183.195663][T12697] __nla_validate_parse: 33 callbacks suppressed [ 183.195683][T12697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1955'. [ 183.198697][T12697] netlink: 'syz.2.1955': attribute type 1 has an invalid length. [ 183.198739][T12697] netlink: 'syz.2.1955': attribute type 2 has an invalid length. [ 183.201973][T12697] overlayfs: empty lowerdir [ 183.291357][T12708] fuse: Unknown parameter 'user_id00000000000000000000' [ 183.397186][T12720] netlink: 700 bytes leftover after parsing attributes in process `syz.3.1965'. [ 183.402423][T12720] overlayfs: failed to clone upperpath [ 183.496032][T12727] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 183.496218][T12728] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 183.537142][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 183.557094][ T7395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.559730][ T7395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.590158][T12737] autofs: Unknown parameter '' [ 183.642205][T12743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12743 comm=syz.4.1970 [ 183.649960][T12743] fuse: Unknown parameter '' [ 183.658280][ T40] audit: type=1400 audit(1759435192.995:20952): avc: denied { write } for pid=12742 comm="syz.4.1970" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.693341][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.698751][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.703183][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.711935][ T9] usb 5-1: config 0 descriptor?? [ 183.722273][T12748] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 183.747926][T12748] netlink: 'syz.3.1973': attribute type 10 has an invalid length. [ 183.750611][T12748] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 183.753606][T12748] bond0: (slave wlan1): refused to change device type [ 183.923085][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 183.925332][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.937620][ T9] usb 5-1: USB disconnect, device number 19 [ 183.967424][T12774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1981'. [ 183.975850][T12772] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 184.000246][T12776] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1982'. [ 184.456809][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 184.606938][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 184.611677][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.615971][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 184.619442][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.624269][ T9] usb 5-1: config 0 descriptor?? [ 184.831903][ T40] audit: type=1400 audit(1759435194.165:20953): avc: denied { watch } for pid=12788 comm="syz.4.1986" path="/193/bus" dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.930316][T12804] netlink: 'syz.3.1991': attribute type 29 has an invalid length. [ 185.000224][T12812] fuse: Unknown parameter '00000000000000000000004' [ 185.034959][ T9] kye 0003:0458:5016.0008: control desc unexpectedly large [ 185.042020][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0008/input/input26 [ 185.114573][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0008/input/input27 [ 185.181998][ T9] kye 0003:0458:5016.0008: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 185.272531][T12823] team0: No ports can be present during mode change [ 185.379470][T12830] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 185.379496][T12831] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 185.383085][T12830] dummy0: left promiscuous mode [ 185.399904][T12830] team0: Port device dummy0 added [ 185.402320][T12831] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 185.413948][T12830] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 185.413960][T12831] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 185.419806][T12830] team0: Failed to send options change via netlink (err -105) [ 185.422101][T12830] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 185.424874][T12830] team0: Port device dummy0 removed [ 185.429861][T12830] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 185.592613][T12849] fuse: Unknown parameter '00000000000000000000004' [ 185.598779][ T40] audit: type=1400 audit(1759435194.935:20954): avc: denied { map } for pid=12843 comm="syz.2.2005" path="socket:[41201]" dev="sockfs" ino=41201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.607483][ T40] audit: type=1400 audit(1759435194.935:20955): avc: denied { accept } for pid=12843 comm="syz.2.2005" path="socket:[41201]" dev="sockfs" ino=41201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.828420][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'. [ 185.839404][T12874] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 185.843066][T12874] team0: Device ipvlan2 is already an upper device of the team interface [ 185.950069][T12886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2021'. [ 185.965588][T12891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2573 sclass=netlink_tcpdiag_socket pid=12891 comm=syz.2.2023 [ 185.998479][T12894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12894 comm=syz.4.2024 [ 186.321324][T12913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2031'. [ 186.330207][T12913] overlayfs: overlapping lowerdir path [ 186.334176][ T40] audit: type=1400 audit(1759435195.665:20956): avc: denied { accept } for pid=12912 comm="syz.4.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 186.760400][T10404] usb 5-1: USB disconnect, device number 20 [ 186.797568][T12948] fuse: Unknown parameter '00000000000000000000004' [ 186.947859][T12951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.952890][T12951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.955749][T12951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.959064][T12951] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.968520][T12951] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.011916][T12956] tipc: Started in network mode [ 187.013540][T12956] tipc: Node identity 4ea1642a707, cluster identity 4711 [ 187.017408][T12956] tipc: Enabled bearer , priority 0 [ 187.019998][T12956] syzkaller0: entered promiscuous mode [ 187.022098][T12956] syzkaller0: entered allmulticast mode [ 187.029014][ T5961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.030932][T12956] tipc: Resetting bearer [ 187.042634][ T5961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.047704][ T5961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.048755][T12955] tipc: Resetting bearer [ 187.050846][ T5961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.069238][T12955] tipc: Disabling bearer [ 187.069514][ T5961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.136405][T12962] vlan2: entered promiscuous mode [ 187.138676][T12962] vlan2: entered allmulticast mode [ 187.140643][T12962] hsr_slave_1: entered allmulticast mode [ 187.195112][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 187.361398][T12957] chnl_net:caif_netlink_parms(): no params data found [ 187.459794][T12957] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.462687][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.465340][T12957] bridge_slave_0: entered allmulticast mode [ 187.468930][T12957] bridge_slave_0: entered promiscuous mode [ 187.475296][T12981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.475310][T12957] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.481723][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.485687][T12957] bridge_slave_1: entered allmulticast mode [ 187.489600][T12957] bridge_slave_1: entered promiscuous mode [ 187.531046][T12957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.535554][T12957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.584124][T12957] team0: Port device team_slave_0 added [ 187.588094][T12957] team0: Port device team_slave_1 added [ 187.625757][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 187.635261][T12957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.637905][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.649374][T12957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.657438][T12957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.659709][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 187.661147][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.675464][T12957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.722238][T13008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13008 comm=syz.0.2055 [ 187.741724][T12957] hsr_slave_0: entered promiscuous mode [ 187.744933][T12957] hsr_slave_1: entered promiscuous mode [ 187.747850][T12957] debugfs: 'hsr0' already exists in 'hsr' [ 187.750344][T12957] Cannot create hsr debugfs directory [ 187.973996][T12957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.978336][T12957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.027735][T13015] netlink: 'syz.2.2058': attribute type 10 has an invalid length. [ 188.038366][T13015] batman_adv: batadv0: Adding interface: team0 [ 188.042667][T13015] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.054114][T13015] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 188.083727][T12957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.088011][T12957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.199005][T12957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.203618][T12957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.316909][T12957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.320190][T12957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.349563][T13033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.484389][T13044] program syz.0.2066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.487791][T12957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.491106][T13044] ata1.00: invalid transfer count 0 [ 188.497597][T12957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.502821][T12957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.510030][T12957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.565883][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 188.566146][T12957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.585549][T12957] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.593900][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.596878][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.602231][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.605609][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.617943][T13068] binder_alloc: 13067: binder_alloc_buf, no vma [ 188.725484][ T40] audit: type=1400 audit(1759435198.055:20957): avc: denied { unmount } for pid=9067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 188.743214][T12957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.775636][T12957] veth0_vlan: entered promiscuous mode [ 188.785560][T12957] veth1_vlan: entered promiscuous mode [ 188.807399][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2076'. [ 188.812985][T12957] veth0_macvtap: entered promiscuous mode [ 188.819857][T12957] veth1_macvtap: entered promiscuous mode [ 188.829431][T12957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.838516][T12957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.847724][ T7395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.850588][ T7395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.854356][ T7395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.857658][ T7395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.906872][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.911610][ T7390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.914067][ T7390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.931591][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.934137][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.946760][T13004] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 188.971885][T13088] netlink: 'syz.3.2041': attribute type 10 has an invalid length. [ 188.980726][T13088] team0: Port device dummy0 added [ 188.988083][ T5961] Bluetooth: hci3: command 0x0c1a tx timeout [ 188.988082][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.096662][T13004] usb 5-1: Using ep0 maxpacket: 8 [ 189.100276][T13004] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.103723][T13004] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.106951][T13004] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 189.110910][T13004] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 189.114773][T13004] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.118922][T13004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.125856][T13004] hub 5-1:1.0: bad descriptor, ignoring hub [ 189.130655][T13004] hub 5-1:1.0: probe with driver hub failed with error -5 [ 189.134081][T13004] cdc_wdm 5-1:1.0: skipping garbage [ 189.136269][T13004] cdc_wdm 5-1:1.0: skipping garbage [ 189.140746][T13004] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 189.143367][T13004] cdc_wdm 5-1:1.0: Unknown control protocol [ 189.148728][ T63] Bluetooth: hci4: command tx timeout [ 189.195256][T13105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2084'. [ 189.199759][ T40] audit: type=1400 audit(1759435198.535:20958): avc: denied { setopt } for pid=13104 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 189.240862][T13110] ALSA: mixer_oss: invalid OSS volume '' [ 189.244355][ T40] audit: type=1400 audit(1759435198.575:20959): avc: denied { listen } for pid=13109 comm="syz.3.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 189.251730][ T40] audit: type=1400 audit(1759435198.585:20960): avc: denied { accept } for pid=13109 comm="syz.3.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 189.284512][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 189.325924][ T40] audit: type=1400 audit(1759435198.655:20961): avc: denied { read write } for pid=13076 comm="syz.0.2074" name="cdc-wdm0" dev="devtmpfs" ino=3171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 189.335924][ T40] audit: type=1400 audit(1759435198.655:20962): avc: denied { open } for pid=13076 comm="syz.0.2074" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 189.346581][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 189.499641][ T10] usb 9-1: config index 0 descriptor too short (expected 65274, got 45) [ 189.505668][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 189.511758][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.517434][ T10] usb 9-1: Product: syz [ 189.519920][ T10] usb 9-1: Manufacturer: syz [ 189.520365][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.522066][ T10] usb 9-1: SerialNumber: syz [ 189.529426][ T5961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.538634][ T5961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.542435][ T24] usb 5-1: USB disconnect, device number 21 [ 189.551386][ T5961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.567239][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.774985][T13114] chnl_net:caif_netlink_parms(): no params data found [ 189.790815][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 189.795655][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 189.799082][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 189.804975][ T10] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 189.813472][ T10] usb 9-1: USB disconnect, device number 10 [ 189.891304][T13114] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.893765][T13114] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.896229][T13114] bridge_slave_0: entered allmulticast mode [ 189.900336][T13114] bridge_slave_0: entered promiscuous mode [ 189.906008][T13114] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.909888][T13114] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.912810][T13114] bridge_slave_1: entered allmulticast mode [ 189.916681][T13114] bridge_slave_1: entered promiscuous mode [ 189.967453][T13114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.973265][T13114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.017281][T13114] team0: Port device team_slave_0 added [ 190.021859][T13114] team0: Port device team_slave_1 added [ 190.069075][T13114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.072107][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.088229][T13114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.095410][T13114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.099309][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.110800][T13114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.173824][T13114] hsr_slave_0: entered promiscuous mode [ 190.176153][T13114] hsr_slave_1: entered promiscuous mode [ 190.178651][T13114] debugfs: 'hsr0' already exists in 'hsr' [ 190.180720][T13114] Cannot create hsr debugfs directory [ 190.304350][T13114] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.310741][T13114] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.334792][T13131] netpci0: renamed from bridge_slave_0 (while UP) [ 190.387033][T13114] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.392490][T13114] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.401710][T13139] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2094'. [ 190.453114][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2095'. [ 190.456408][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2095'. [ 190.472532][T13141] kAFS: unable to lookup cell '/,cL' [ 190.490785][T13114] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.495264][T13114] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.613526][ T40] audit: type=1400 audit(1759435199.945:20963): avc: denied { unmount } for pid=12957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 190.616566][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 190.622267][T13114] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.622304][T13114] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.684361][T13147] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.692898][ T40] audit: type=1400 audit(1759435200.025:20964): avc: denied { setattr } for pid=13149 comm="syz.3.2099" name="video5" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 190.773974][T13114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.788406][T13114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.788527][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.795844][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.800203][T13114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.801438][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.807215][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.809838][T13114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.809990][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.819063][ T24] usb 9-1: config 0 descriptor?? [ 190.879099][ T40] audit: type=1800 audit(1759435200.215:20965): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2104" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 190.892347][T13114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.913459][T13114] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.920227][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.923430][ T7390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.930271][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.932744][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.056626][ T5961] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.059656][T13114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.086296][T13114] veth0_vlan: entered promiscuous mode [ 191.092380][T13114] veth1_vlan: entered promiscuous mode [ 191.113058][T13114] veth0_macvtap: entered promiscuous mode [ 191.118633][T13114] veth1_macvtap: entered promiscuous mode [ 191.130099][T13114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.140629][T13114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.151073][ T7385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.154703][ T7385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.159482][ T7385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.163270][ T7385] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.210543][ T7395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.213354][ T7395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.216684][ T5961] Bluetooth: hci4: command tx timeout [ 191.228895][ T7385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.231384][ T7385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.232965][ T24] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 191.429115][T13137] gfs2: gfs2 mount does not exist [ 191.435979][T13137] tipc: Started in network mode [ 191.438146][T13137] tipc: Node identity aea5bed1936c, cluster identity 4711 [ 191.440679][T13137] tipc: Enabled bearer , priority 0 [ 191.443336][T13137] syzkaller0: entered promiscuous mode [ 191.445056][T13137] syzkaller0: entered allmulticast mode [ 191.461032][T13137] tipc: Resetting bearer [ 191.464999][T13136] tipc: Resetting bearer [ 191.478260][T13136] tipc: Disabling bearer [ 191.538634][ T29] usb 9-1: USB disconnect, device number 11 [ 191.616777][ T5961] Bluetooth: hci0: command tx timeout [ 191.743856][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 191.844794][ T40] audit: type=1400 audit(1759435201.175:20966): avc: denied { ioctl } for pid=13186 comm="syz.3.2108" path="socket:[43724]" dev="sockfs" ino=43724 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.895521][T13195] trusted_key: encrypted_key: insufficient parameters specified [ 191.973143][T13199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2112'. [ 192.109824][T13205] netlink: 'syz.4.2114': attribute type 10 has an invalid length. [ 192.114941][T13205] macvlan0: entered promiscuous mode [ 192.117356][T13205] macvlan0: entered allmulticast mode [ 192.122689][T13205] veth1_vlan: entered allmulticast mode [ 192.128095][T13205] veth1_vlan: left allmulticast mode [ 192.143300][T13207] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2115'. [ 192.149376][T13207] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.192858][T13212] fuse: Bad value for 'user_id' [ 192.194928][T13212] fuse: Bad value for 'user_id' [ 192.229731][T13216] netlink: 'syz.4.2119': attribute type 10 has an invalid length. [ 192.238856][T13216] team0: Port device dummy0 added [ 192.275787][T13219] kAFS: No cell specified [ 192.690404][T13254] No buffer was provided with the request [ 192.761829][T13261] netlink: 'syz.3.2133': attribute type 17 has an invalid length. [ 192.764381][T13261] macvtap0: entered allmulticast mode [ 192.766249][T13261] veth0_macvtap: entered allmulticast mode [ 192.769458][T13261] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 192.905826][T13274] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 193.140425][ T5961] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.296729][ T5961] Bluetooth: hci4: command tx timeout [ 193.355383][T13309] loop6: detected capacity change from 0 to 7 [ 193.374007][T13309] Dev loop6: unable to read RDB block 7 [ 193.376119][T13309] loop6: unable to read partition table [ 193.380052][T13309] loop6: partition table beyond EOD, truncated [ 193.383008][T13309] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 193.706778][ T5961] Bluetooth: hci0: command tx timeout [ 193.906161][T13339] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 193.912649][T13339] Error validating options; rc = [-22] [ 194.510392][T13333] overlayfs: statfs failed on './file0' [ 194.843097][T13360] netlink: 'syz.4.2166': attribute type 21 has an invalid length. [ 194.847557][T13360] __nla_validate_parse: 7 callbacks suppressed [ 194.847568][T13360] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2166'. [ 195.187376][T13389] tmpfs: Bad value for 'mpol' [ 195.187559][T13387] usb usb1: check_ctrlrecip: process 13387 (syz.2.2174) requesting ep 01 but needs 81 [ 195.193112][T13387] usb usb1: usbfs: process 13387 (syz.2.2174) did not claim interface 0 before use [ 195.313847][T13398] program syz.3.2180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.376805][ T5961] Bluetooth: hci4: command tx timeout [ 195.399035][T13400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.419620][T13400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.534902][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2184'. [ 195.644024][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 195.647621][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2187'. [ 195.660703][T13422] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 195.764479][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2192'. [ 195.786964][ T5961] Bluetooth: hci0: command tx timeout [ 195.862132][T13430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.974537][T13447] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 196.049828][T13456] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 196.121870][T13460] input: syz0 as /devices/virtual/input/input29 [ 196.132202][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 196.132219][ T40] audit: type=1400 audit(1759435205.465:20970): avc: denied { search } for pid=13452 comm="syz.0.2198" name="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.142993][ T40] audit: type=1400 audit(1759435205.465:20971): avc: denied { search } for pid=13452 comm="syz.0.2198" name="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.151710][ T40] audit: type=1400 audit(1759435205.465:20972): avc: denied { read open } for pid=13452 comm="syz.0.2198" path="/" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.316810][ T1472] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 196.476585][ T1472] usb 9-1: Using ep0 maxpacket: 8 [ 196.480582][ T1472] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 196.485525][ T1472] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.491100][ T1472] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.495291][ T1472] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.501291][ T1472] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.505298][ T1472] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.716256][ T1472] usb 9-1: GET_CAPABILITIES returned 0 [ 196.718617][ T1472] usbtmc 9-1:16.0: can't read capabilities [ 196.852649][T13470] kAFS: Can only specify source 'none' with -o dyn [ 196.853331][T13471] kAFS: Can only specify source 'none' with -o dyn [ 196.920903][T13463] netlink: 'syz.4.2200': attribute type 29 has an invalid length. [ 196.927734][T13004] usb 9-1: USB disconnect, device number 12 [ 196.969236][T13475] netlink: 'syz.0.2204': attribute type 10 has an invalid length. [ 196.984679][T13475] team0: Device veth0_vlan is already a lower device of the team interface [ 197.035370][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 197.039344][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2205'. [ 197.078963][ T7385] bond3: (slave team0): link status definitely down, disabling slave [ 197.087679][ T7385] bond3: now running without any active interface! [ 197.126594][ T1472] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 197.131665][ T40] audit: type=1400 audit(1759435206.465:20973): avc: denied { append } for pid=13480 comm="syz.0.2207" name="nvram" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 197.176754][ T40] audit: type=1400 audit(1759435206.515:20974): avc: denied { shutdown } for pid=13483 comm="syz.0.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.215881][T13486] netlink: 'syz.0.2209': attribute type 1 has an invalid length. [ 197.240107][T13486] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.268687][T13486] veth7: entered promiscuous mode [ 197.275077][T13486] bond5: (slave veth7): Enslaving as an active interface with a down link [ 197.288896][ T1472] usb 7-1: unable to get BOS descriptor or descriptor too short [ 197.292740][ T1472] usb 7-1: not running at top speed; connect to a high speed hub [ 197.300616][ T1472] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.307927][ T1472] usb 7-1: config 1 interface 0 has no altsetting 0 [ 197.313310][ T1472] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.317961][ T1472] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.318819][ T40] audit: type=1400 audit(1759435206.655:20975): avc: denied { lock } for pid=13488 comm="syz.0.2210" path="socket:[48264]" dev="sockfs" ino=48264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 197.321843][ T1472] usb 7-1: Product: syz [ 197.333079][ T1472] usb 7-1: Manufacturer: syz [ 197.335124][ T1472] usb 7-1: SerialNumber: syz [ 197.552609][ T1472] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 197.571633][ T1472] usb 7-1: USB disconnect, device number 7 [ 197.630722][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2216'. [ 197.671889][ T40] audit: type=1400 audit(1759435207.005:20976): avc: denied { setopt } for pid=13514 comm="syz.4.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 197.857154][ T5961] Bluetooth: hci0: command tx timeout [ 198.002059][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 198.394527][T13545] efs: cannot read volume header [ 198.683628][T13557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2231'. [ 198.733447][ T40] audit: type=1400 audit(1759435208.065:20977): avc: denied { create } for pid=13568 comm="syz.4.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 198.750625][ T40] audit: type=1400 audit(1759435208.085:20978): avc: denied { append } for pid=13564 comm="syz.0.2234" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 198.750704][T13566] random: crng reseeded on system resumption [ 198.774143][ T40] audit: type=1400 audit(1759435208.105:20979): avc: denied { ioctl } for pid=13564 comm="syz.0.2234" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 198.999086][T13588] openvswitch: netlink: Unknown nsh attribute 0 [ 198.999106][T13588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.006680][T13588] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 199.087774][T13599] loop6: detected capacity change from 0 to 2640 [ 199.090940][ T7841] buffer_io_error: 12 callbacks suppressed [ 199.090950][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.096105][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.100959][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.104281][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.107224][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.110113][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.113015][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.116203][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.121318][ T7841] ldm_validate_partition_table(): Disk read failed. [ 199.125638][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.128510][ T7841] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.131251][ T7841] Dev loop6: unable to read RDB block 0 [ 199.133255][ T7841] loop6: unable to read partition table [ 199.137393][T13599] ldm_validate_partition_table(): Disk read failed. [ 199.140023][T13599] Dev loop6: unable to read RDB block 0 [ 199.143255][T13599] loop6: unable to read partition table [ 199.145184][T13599] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 199.386770][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.388970][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.442790][T13630] XFS (nbd4): SB validate failed with error -5. [ 199.607593][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 199.756676][ T24] usb 5-1: device descriptor read/64, error -71 [ 199.768405][T13645] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.2258' sets config #1 [ 200.026880][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 200.156566][ T24] usb 5-1: device descriptor read/64, error -71 [ 200.267375][ T24] usb usb5-port1: attempt power cycle [ 200.626785][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 200.647267][ T24] usb 5-1: device descriptor read/8, error -71 [ 200.688674][T13690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.691925][T13690] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 200.700537][T13690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.702824][T13690] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 200.709256][T13690] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.712503][T13690] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 200.726800][T13690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.730205][T13690] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 200.768960][T13698] random: crng reseeded on system resumption [ 200.827580][T13696] team0: Port device dummy0 removed [ 200.829955][T13696] batman_adv: batadv0: Adding interface: dummy0 [ 200.832027][T13696] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.839722][T13696] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 200.896863][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 200.917074][ T24] usb 5-1: device descriptor read/8, error -71 [ 200.968217][T13710] __nla_validate_parse: 4 callbacks suppressed [ 200.968235][T13710] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2280'. [ 201.027734][ T24] usb usb5-port1: unable to enumerate USB device [ 201.183215][T13716] binder: BINDER_SET_CONTEXT_MGR already set [ 201.186767][T13716] binder: 13715:13716 ioctl 4018620d 200000000280 returned -16 [ 201.412131][T13725] IPVS: Unknown mcast interface: syzkaller1 [ 201.425166][T13725] efs: device does not support 512 byte blocks [ 201.428341][T13725] device does not support 512 byte blocks [ 201.428341][T13725] [ 201.503861][T13727] netlink: 1532 bytes leftover after parsing attributes in process `syz.4.2287'. [ 201.507216][T13727] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 201.712104][T13737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2290'. [ 201.741812][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 201.741824][ T40] audit: type=1400 audit(1759435211.075:20985): avc: denied { watch_mount } for pid=13738 comm="syz.4.2292" path="/273" dev="tmpfs" ino=1466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 201.770990][T13740] NILFS (nullb0): couldn't find nilfs on the device [ 201.969360][T13746] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2294'. [ 202.025935][T13750] syz_tun: entered allmulticast mode [ 202.043141][T13749] syz_tun: left allmulticast mode [ 202.070064][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 202.314921][T13769] kvm: user requested TSC rate below hardware speed [ 202.404533][ T40] audit: type=1400 audit(1759435211.735:20986): avc: denied { watch_sb } for pid=13774 comm="syz.4.2302" path="/280" dev="tmpfs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 202.452938][T13773] hugetlbfs: Unknown parameter 'uidile0' [ 202.579271][ T40] audit: type=1400 audit(1759435211.915:20987): avc: denied { shutdown } for pid=13781 comm="syz.2.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 202.746603][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 202.747515][T13798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2309'. [ 202.753672][T13798] netlink: 'syz.2.2309': attribute type 7 has an invalid length. [ 202.758279][T13798] netlink: 'syz.2.2309': attribute type 8 has an invalid length. [ 202.761971][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2309'. [ 202.898912][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 202.905671][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.910124][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.913610][ T24] usb 9-1: Product: syz [ 202.915502][ T24] usb 9-1: Manufacturer: syz [ 202.917754][ T24] usb 9-1: SerialNumber: syz [ 202.921720][ T24] usb 9-1: config 0 descriptor?? [ 203.034693][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2313'. [ 203.043520][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.081927][ T40] audit: type=1400 audit(1759435212.415:20988): avc: denied { execute } for pid=13810 comm="syz.3.2314" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 203.315576][ T40] audit: type=1400 audit(1759435212.645:20989): avc: denied { module_load } for pid=13812 comm="syz.2.2315" path="/62/bus" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 203.339779][T13780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.344750][T13780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.361329][ T53] usb 9-1: USB disconnect, device number 13 [ 203.423820][ T40] audit: type=1400 audit(1759435212.755:20990): avc: denied { read } for pid=13821 comm="syz.2.2318" name="usbmon4" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.471005][T13826] delete_channel: no stack [ 203.516150][ T40] audit: type=1400 audit(1759435212.845:20991): avc: denied { execute } for pid=13831 comm="syz.2.2321" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.674656][ T40] audit: type=1400 audit(1759435213.005:20992): avc: denied { nlmsg_read } for pid=13843 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 203.715232][T13838] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 203.719685][T13838] overlayfs: conflicting lowerdir path [ 203.822969][T13857] mkiss: ax0: crc mode is auto. [ 204.049712][ T40] audit: type=1400 audit(1759435213.385:20993): avc: denied { setopt } for pid=13871 comm="syz.3.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.094004][T13874] program syz.4.2335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.123208][ T40] audit: type=1400 audit(1759435213.455:20994): avc: denied { read } for pid=13873 comm="syz.2.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.254850][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2340'. [ 204.310295][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2342'. [ 204.544976][T13906] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 204.618303][T13910] bridge1: entered promiscuous mode [ 204.656184][T13913] netlink: 'syz.3.2349': attribute type 10 has an invalid length. [ 204.685489][T13913] veth0_vlan: left promiscuous mode [ 204.690554][T13913] veth0_vlan: entered promiscuous mode [ 204.695022][T13913] team0: Device veth0_vlan failed to register rx_handler [ 205.063418][T13934] kAFS: No cell specified [ 205.116640][ T29] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 205.280148][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.283840][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.289386][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.292469][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.493674][T13945] 9p: Unknown access argument 18446744073709551615JQ: -22 [ 205.503685][T13926] vim2m vim2m.0: vidioc_s_fmt queue busy [ 205.511032][ T29] usb 9-1: GET_CAPABILITIES returned 0 [ 205.512833][ T29] usbtmc 9-1:16.0: can't read capabilities [ 205.667556][T13953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=13953 comm=syz.3.2364 [ 206.040045][T13967] overlayfs: failed to resolve '/{@Ubr': -2 [ 206.173052][T13973] netlink: 'syz.2.2370': attribute type 5 has an invalid length. [ 206.227037][T13980] __nla_validate_parse: 3 callbacks suppressed [ 206.227048][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 206.735366][T14017] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 206.753931][T14017] netlink: 'syz.2.2387': attribute type 10 has an invalid length. [ 206.757556][T14017] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 206.762049][T14017] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 206.964654][T14031] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 207.054914][T14036] usb 2-1: USB disconnect, device number 2 [ 207.112681][T14040] tipc: Started in network mode [ 207.114869][T14040] tipc: Node identity 8eedb73d5ec9, cluster identity 4711 [ 207.118441][T14040] tipc: Enabled bearer , priority 0 [ 207.121715][T14040] syzkaller0: entered promiscuous mode [ 207.123792][T14040] syzkaller0: entered allmulticast mode [ 207.144419][T14036] tipc: Resetting bearer [ 207.156960][T14035] tipc: Resetting bearer [ 207.167703][T14035] tipc: Disabling bearer [ 207.844202][ T10] usb 9-1: USB disconnect, device number 14 [ 207.867575][T14071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14071 comm=syz.4.2407 [ 208.017369][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 208.017388][ T40] audit: type=1400 audit(1759435217.355:21001): avc: denied { remount } for pid=14078 comm="syz.4.2410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 208.028903][ T40] audit: type=1400 audit(1759435217.355:21002): avc: denied { remount } for pid=14068 comm="syz.2.2406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 208.090691][T14072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2406'. [ 208.231106][T14088] netlink: 'syz.4.2411': attribute type 4 has an invalid length. [ 208.665157][T14101] overlay: filesystem on ./bus not supported as upperdir [ 208.671077][ T40] audit: type=1400 audit(1759435218.005:21003): avc: denied { connect } for pid=14099 comm="syz.4.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 208.680803][ T40] audit: type=1400 audit(1759435218.015:21004): avc: denied { read } for pid=14099 comm="syz.4.2417" path="socket:[50655]" dev="sockfs" ino=50655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 208.767620][T14102] hfs: can't find a HFS filesystem on dev sr0 [ 208.933149][ T40] audit: type=1400 audit(1759435218.265:21005): avc: denied { mount } for pid=14104 comm="syz.0.2419" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 208.985966][T14109] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2420'. [ 209.560475][T14145] XFS (nullb0): Invalid superblock magic number [ 210.006724][T10404] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 210.136609][T10404] usb 5-1: device descriptor read/64, error -71 [ 210.396709][T10404] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 210.536575][T10404] usb 5-1: device descriptor read/64, error -71 [ 210.649460][T10404] usb usb5-port1: attempt power cycle [ 210.679743][ T40] audit: type=1326 audit(1759435220.015:21006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14161 comm="syz.3.2433" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bedb8eec9 code=0x0 [ 210.987437][T10404] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 211.008398][T10404] usb 5-1: device descriptor read/8, error -71 [ 211.266592][T10404] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 211.287310][T10404] usb 5-1: device descriptor read/8, error -71 [ 211.297314][T14186] FAULT_INJECTION: forcing a failure. [ 211.297314][T14186] name failslab, interval 1, probability 0, space 0, times 1 [ 211.301685][T14186] CPU: 1 UID: 0 PID: 14186 Comm: syz.4.2441 Not tainted syzkaller #0 PREEMPT(full) [ 211.301703][T14186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.301711][T14186] Call Trace: [ 211.301717][T14186] [ 211.301723][T14186] dump_stack_lvl+0x16c/0x1f0 [ 211.301768][T14186] should_fail_ex+0x512/0x640 [ 211.301791][T14186] ? fs_reclaim_acquire+0xae/0x150 [ 211.301806][T14186] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 211.301823][T14186] should_failslab+0xc2/0x120 [ 211.301842][T14186] __kmalloc_noprof+0xd2/0x510 [ 211.301876][T14186] tomoyo_realpath_from_path+0xc2/0x6e0 [ 211.301906][T14186] ? tomoyo_profile+0x47/0x60 [ 211.301938][T14186] tomoyo_path_number_perm+0x245/0x580 [ 211.301954][T14186] ? tomoyo_path_number_perm+0x237/0x580 [ 211.301975][T14186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 211.301989][T14186] ? find_held_lock+0x2b/0x80 [ 211.302021][T14186] ? find_held_lock+0x2b/0x80 [ 211.302037][T14186] ? hook_file_ioctl_common+0x145/0x410 [ 211.302059][T14186] ? __fget_files+0x20e/0x3c0 [ 211.302084][T14186] security_file_ioctl+0x9b/0x240 [ 211.302102][T14186] __x64_sys_ioctl+0xb7/0x210 [ 211.302119][T14186] do_syscall_64+0xcd/0x4e0 [ 211.302139][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.302152][T14186] RIP: 0033:0x7f5e0418eec9 [ 211.302164][T14186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.302176][T14186] RSP: 002b:00007f5e0508f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.302189][T14186] RAX: ffffffffffffffda RBX: 00007f5e043e5fa0 RCX: 00007f5e0418eec9 [ 211.302197][T14186] RDX: 0000200000000080 RSI: 0000000040086602 RDI: 0000000000000005 [ 211.302204][T14186] RBP: 00007f5e0508f090 R08: 0000000000000000 R09: 0000000000000000 [ 211.302213][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.302220][T14186] R13: 00007f5e043e6038 R14: 00007f5e043e5fa0 R15: 00007ffd7d324cc8 [ 211.302236][T14186] [ 211.302242][T14186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.396783][T10404] usb usb5-port1: unable to enumerate USB device [ 214.190212][ T40] audit: type=1400 audit(1759435223.525:21007): avc: denied { write } for pid=14204 comm="syz.4.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 214.266618][ T53] libceph: connect (1)[c::]:6789 error -101 [ 214.268704][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 214.365498][T14210] ceph: No mds server is up or the cluster is laggy [ 214.476777][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 214.606809][ T10] usb 7-1: device descriptor read/64, error -71 [ 214.646210][T14239] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 214.856599][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 214.954449][T14244] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2458'. [ 214.961332][T14244] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2458'. [ 214.986521][ T10] usb 7-1: device descriptor read/64, error -71 [ 215.097283][ T10] usb usb7-port1: attempt power cycle [ 215.208448][T14249] tmpfs: Bad value for 'mpol' [ 215.208536][T14250] tmpfs: Bad value for 'mpol' [ 215.436638][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 215.441607][T14267] devpts: Bad value for 'max' [ 215.458734][ T10] usb 7-1: device descriptor read/8, error -71 [ 215.625810][T14283] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2469'. [ 215.629182][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2469'. [ 215.633737][ T40] audit: type=1400 audit(1759435224.965:21008): avc: denied { getopt } for pid=14282 comm="syz.3.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 215.696722][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 215.717328][ T10] usb 7-1: device descriptor read/8, error -71 [ 215.808525][T14290] syz.3.2472 (14290): /proc/14289/oom_adj is deprecated, please use /proc/14289/oom_score_adj instead. [ 215.827302][ T10] usb usb7-port1: unable to enumerate USB device [ 216.056914][T14305] vlan2: entered allmulticast mode [ 216.059548][T14305] bond0: entered allmulticast mode [ 216.061767][T14305] bond_slave_0: entered allmulticast mode [ 216.064127][T14305] bond_slave_1: entered allmulticast mode [ 216.111919][ T40] audit: type=1400 audit(1759435225.445:21009): avc: denied { ioctl } for pid=14309 comm="syz.3.2478" path="socket:[49771]" dev="sockfs" ino=49771 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.293870][T14314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.301272][T14314] bond0: (slave rose0): Enslaving as an active interface with an up link [ 216.314288][T14316] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 216.423163][T14323] erofs (device nbd3): cannot find valid erofs superblock [ 216.469590][T14327] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2482'. [ 216.550382][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2483'. [ 216.935245][ T40] audit: type=1400 audit(1759435226.265:21010): avc: denied { append } for pid=14356 comm="syz.3.2491" name="pfkey" dev="proc" ino=4026533646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 216.939684][T14357] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2491'. [ 216.977922][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2492'. [ 216.980583][T14360] bridge_slave_1: left allmulticast mode [ 216.982597][T14360] bridge_slave_1: left promiscuous mode [ 216.984594][T14360] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.990437][T14360] netpci0: left allmulticast mode [ 216.992741][T14360] netpci0: left promiscuous mode [ 216.995120][T14360] bridge0: port 1(netpci0) entered disabled state [ 217.062958][T14361] VFS: Mount too revealing [ 217.174350][T14365] program syz.3.2493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.500809][T14384] netlink: 'syz.2.2500': attribute type 10 has an invalid length. [ 217.511337][T14384] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 217.712010][ T40] audit: type=1400 audit(1759435227.045:21011): avc: denied { append } for pid=14405 comm="syz.4.2506" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.729800][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 217.733379][T14413] Bluetooth: MGMT ver 1.23 [ 217.757312][ T40] audit: type=1400 audit(1759435227.085:21012): avc: denied { read } for pid=14416 comm="syz.2.2509" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 217.768740][T14418] tipc: Started in network mode [ 217.775737][T14418] tipc: Node identity 9e04f5e941b, cluster identity 4711 [ 217.779130][T14418] tipc: Enabled bearer , priority 0 [ 217.886070][ T40] audit: type=1400 audit(1759435227.215:21013): avc: denied { map } for pid=14421 comm="syz.3.2512" path="/dev/fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 217.895534][ T40] audit: type=1400 audit(1759435227.215:21014): avc: denied { write execute } for pid=14421 comm="syz.3.2512" path="/dev/fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 217.907120][T14418] syzkaller0: entered promiscuous mode [ 217.910158][T14418] syzkaller0: entered allmulticast mode [ 217.943479][T14418] tipc: Resetting bearer [ 217.946825][T14417] support for the xor transformation has been removed. [ 217.966152][T14416] tipc: Resetting bearer [ 217.985210][T14416] tipc: Disabling bearer [ 218.053639][T14437] netlink: 'syz.4.2516': attribute type 9 has an invalid length. [ 218.108905][ T40] audit: type=1400 audit(1759435227.435:21015): avc: denied { accept } for pid=14440 comm="syz.4.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.369328][T14456] hub 8-0:1.0: USB hub found [ 218.372903][T14456] hub 8-0:1.0: 1 port detected [ 218.492246][ T40] audit: type=1400 audit(1759435227.835:21016): avc: denied { remount } for pid=14462 comm="syz.4.2526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 218.914595][T14491] SELinux: failed to load policy [ 218.949221][T14496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14496 comm=syz.4.2536 [ 218.978695][T14498] tipc: Enabled bearer , priority 0 [ 218.983641][T14497] tipc: Disabling bearer [ 218.999280][T14500] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 218.999292][T14500] PKCS7: Only support pkcs7_signedData type [ 218.999785][T14501] netlink: 'syz.4.2538': attribute type 3 has an invalid length. [ 218.999797][T14501] netlink: 'syz.4.2538': attribute type 1 has an invalid length. [ 218.999804][T14501] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2538'. [ 219.101276][T14506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61468 sclass=netlink_route_socket pid=14506 comm=syz.4.2540 [ 219.175477][T14515] binder_alloc: 14514: binder_alloc_buf, no vma [ 219.336572][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 219.336585][ T40] audit: type=1400 audit(1759435228.615:21023): avc: denied { mount } for pid=14522 comm="syz.4.2547" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 219.356532][ T40] audit: type=1400 audit(1759435228.615:21024): avc: denied { mounton } for pid=14522 comm="syz.4.2547" path="/338/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 219.386524][ T40] audit: type=1400 audit(1759435228.645:21025): avc: denied { listen } for pid=14522 comm="syz.4.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.393167][ T40] audit: type=1400 audit(1759435228.645:21026): avc: denied { accept } for pid=14522 comm="syz.4.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.575045][ T40] audit: type=1400 audit(1759435228.905:21027): avc: denied { setattr } for pid=14532 comm="syz.0.2550" name="qrtr-tun" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.708768][T14545] openvswitch: netlink: EtherType 0 is less than min 600 [ 219.791784][T14552] overlayfs: conflicting options: userxattr,metacopy=on [ 219.829422][T14554] input: syz0 as /devices/virtual/input/input32 [ 220.016802][ T29] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 220.166660][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 220.170627][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.174589][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.178752][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.181169][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 220.184496][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.192300][T14571] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 220.195743][ T29] usb 5-1: config 0 descriptor?? [ 220.199581][T14571] team0: Cannot enslave team device to itself [ 220.397187][T14586] __nla_validate_parse: 1 callbacks suppressed [ 220.397200][T14586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2567'. [ 220.402204][T14586] syz_tun: entered promiscuous mode [ 220.503155][T14591] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2569'. [ 220.843169][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 220.845308][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 220.853312][ T29] usb 5-1: USB disconnect, device number 30 [ 221.486572][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 221.602677][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2584'. [ 221.611530][ T40] audit: type=1400 audit(1759435230.945:21028): avc: denied { map } for pid=14631 comm="syz.0.2579" path="/dev/video9" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 221.635366][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2585'. [ 221.638918][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2585'. [ 221.641368][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.643174][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2585'. [ 221.650494][ T24] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.652694][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2585'. [ 221.656623][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.660891][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2585'. [ 221.667726][ T24] usb 7-1: config 0 descriptor?? [ 221.671112][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2585'. [ 221.676002][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2585'. [ 221.874477][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 221.876692][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 221.880311][ T24] usb 7-1: USB disconnect, device number 12 [ 222.049756][T14685] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 222.052444][ T40] audit: type=1400 audit(1759435231.385:21029): avc: denied { accept } for pid=14676 comm="syz.0.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 222.083226][T14690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.087937][T14690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.177383][T14698] netlink: 'syz.2.2599': attribute type 1 has an invalid length. [ 222.606605][ T29] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 222.768578][ T29] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 222.772673][ T29] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.776685][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 222.780118][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 222.784876][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.790567][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.794439][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.798787][ T29] usb 9-1: config 0 descriptor?? [ 222.801409][T14713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.031054][ T40] audit: type=1400 audit(1759435232.365:21030): avc: denied { remove_name } for pid=14736 comm="syz.2.2611" name="file0" dev="9p" ino=71827771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.041749][ T40] audit: type=1400 audit(1759435232.365:21031): avc: denied { unlink } for pid=14736 comm="syz.2.2611" name="file0" dev="9p" ino=71827771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 223.052296][ T40] audit: type=1400 audit(1759435232.365:21032): avc: denied { create } for pid=14736 comm="syz.2.2611" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 223.215306][ T29] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 223.226361][ T29] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 223.254124][T14744] FAT-fs (nullb0): bogus number of reserved sectors [ 223.258216][T14744] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 223.492080][ T29] usb 9-1: USB disconnect, device number 15 [ 223.756609][ T10] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 223.928432][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.931212][ T10] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 223.934457][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.939151][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 223.944026][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.948244][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.951367][ T10] usb 7-1: Product: syz [ 223.952659][ T10] usb 7-1: Manufacturer: syz [ 223.957776][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 223.959588][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 223.966957][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 223.969320][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 224.037624][T14763] TCP: TCP_TX_DELAY enabled [ 224.091437][T14765] sp0: Synchronizing with TNC [ 224.147278][T14766] QAT: failed to copy from user cfg_data. [ 224.150021][T14766] [U] ` [ 224.211312][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 224.212589][ T6014] usb 7-1: USB disconnect, device number 13 [ 224.214126][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 224.218630][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 224.807925][T14778] fuse: Unknown parameter 'S%3-' [ 224.899105][T14792] tap0: tun_chr_ioctl cmd 1074025672 [ 224.901649][T14792] tap0: ignored: set checksum enabled [ 224.964098][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 224.964113][ T40] audit: type=1400 audit(1759435234.295:21034): avc: denied { setattr } for pid=14804 comm="syz.4.2633" name="vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 225.035011][T14815] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 225.042842][T14815] 9pnet_fd: Insufficient options for proto=fd [ 225.124090][T14829] macvlan2: entered promiscuous mode [ 225.126058][T14829] macvlan2: entered allmulticast mode [ 225.158970][T14832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=14832 comm=syz.2.2643 [ 225.189869][T14836] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 225.190051][T14835] /dev/sg0: Can't lookup blockdev [ 225.192810][T14836] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 225.197586][T14836] vhci_hcd vhci_hcd.0: Device attached [ 225.209323][T14837] vhci_hcd: connection closed [ 225.211003][ T7388] vhci_hcd: stop threads [ 225.214338][ T7388] vhci_hcd: release socket [ 225.216174][ T7388] vhci_hcd: disconnect device [ 225.417248][T14853] FAT-fs (sr0): unable to read boot sector [ 225.497306][T14857] __nla_validate_parse: 65 callbacks suppressed [ 225.497320][T14857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2652'. [ 225.738440][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2653'. [ 225.819770][T14866] netlink: 'syz.0.2656': attribute type 28 has an invalid length. [ 225.822365][T14866] netlink: 'syz.0.2656': attribute type 3 has an invalid length. [ 225.825244][T14866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2656'. [ 226.040618][T14888] block nbd0: not configured, cannot reconfigure [ 226.053754][T14890] netlink: 'syz.4.2664': attribute type 3 has an invalid length. [ 226.056904][T14890] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2664'. [ 226.079618][T14893] netlink: 'syz.0.2665': attribute type 10 has an invalid length. [ 226.083264][T14893] team0: Device ipvlan1 failed to register rx_handler [ 226.091322][ T40] audit: type=1326 audit(1759435235.425:21035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.2665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05578eec9 code=0x7fc00000 [ 226.240953][T14912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2671'. [ 226.405861][T14914] cgroup: Invalid name [ 226.454517][T14921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=14921 comm=syz.0.2674 [ 226.485012][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2673'. [ 226.488233][T14923] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 226.491122][T14923] netlink: 'syz.3.2673': attribute type 2 has an invalid length. [ 226.495833][T14923] netlink: 'syz.3.2673': attribute type 3 has an invalid length. [ 226.499713][T14923] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2673'. [ 226.736027][T14936] netlink: 'syz.3.2680': attribute type 2 has an invalid length. [ 226.766869][T14943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.772230][ T40] audit: type=1400 audit(1759435236.105:21036): avc: denied { remount } for pid=14941 comm="syz.4.2681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 226.905917][ T40] audit: type=1400 audit(1759435236.235:21037): avc: denied { map } for pid=14958 comm="syz.0.2686" path="/dev/dri/card0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 226.918373][ T40] audit: type=1400 audit(1759435236.235:21038): avc: denied { execute } for pid=14958 comm="syz.0.2686" path="/dev/dri/card0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 226.930061][T14955] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 226.962339][T14955] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 226.970059][T14955] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 226.975019][T14955] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 226.980406][T14955] kvm: requested 194438 ns i8254 timer period limited to 200000 ns [ 226.988731][T14955] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 227.013467][T14955] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 227.018562][T14955] kvm: requested 64533 ns i8254 timer period limited to 200000 ns [ 227.032446][T14955] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 227.037860][T14955] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 227.128314][ T40] audit: type=1326 audit(1759435236.465:21039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.0.2691" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe05578eec9 code=0x0 [ 227.140605][T14973] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2692'. [ 227.195836][T14974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2691'. [ 227.228705][T14975] netlink: 'syz.3.2692': attribute type 1 has an invalid length. [ 227.278353][T14973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.280238][ T40] audit: type=1400 audit(1759435236.615:21040): avc: denied { write } for pid=14972 comm="syz.3.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 227.280507][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 227.295652][T14973] bond_slave_0: left allmulticast mode [ 227.302677][T14973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.307883][T14973] bond_slave_1: left allmulticast mode [ 227.312492][T14973] bond0 (unregistering): Released all slaves [ 227.704109][T15025] IPVS: length: 184 != 24 [ 227.823440][ T40] audit: type=1400 audit(1759435237.155:21041): avc: denied { nlmsg_write } for pid=15035 comm="syz.3.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 227.875768][T15043] netlink: 'syz.4.2713': attribute type 11 has an invalid length. [ 227.944141][T15049] netlink: 'syz.2.2714': attribute type 2 has an invalid length. [ 227.948413][T15049] nbd: must specify a device to reconfigure [ 227.980669][T15051] syz_tun: entered allmulticast mode [ 228.058388][ T40] audit: type=1400 audit(1759435237.395:21042): avc: denied { rename } for pid=15056 comm="syz.4.2718" name="file0" dev="9p" ino=71827771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 228.115361][T15061] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.156740][ T53] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 228.309592][ T53] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 228.313569][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.316700][ T53] usb 8-1: Product: syz [ 228.318073][ T53] usb 8-1: Manufacturer: syz [ 228.319624][ T53] usb 8-1: SerialNumber: syz [ 228.337033][ T6014] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 228.477049][ T6014] usb 9-1: device descriptor read/64, error -71 [ 228.506575][ T1329] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 228.523199][ T40] audit: type=1400 audit(1759435237.855:21043): avc: denied { connect } for pid=15080 comm="syz.2.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 228.570034][ T53] rtl8150 8-1:1.0: couldn't reset the device [ 228.572364][ T53] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 228.580986][ T53] usb 8-1: USB disconnect, device number 16 [ 228.624872][T15094] ceph: Path missing in source [ 228.656731][ T1329] usb 5-1: Using ep0 maxpacket: 32 [ 228.661056][ T1329] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 228.666112][ T1329] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 228.669250][ T1329] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 228.671832][ T1329] usb 5-1: Product: syz [ 228.673158][ T1329] usb 5-1: Manufacturer: syz [ 228.674884][ T1329] usb 5-1: SerialNumber: syz [ 228.678383][ T1329] usb 5-1: config 0 descriptor?? [ 228.681693][T15073] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 228.718031][ T6014] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 228.867456][ T6014] usb 9-1: device descriptor read/64, error -71 [ 228.977058][ T6014] usb usb9-port1: attempt power cycle [ 229.122437][T15136] ref_ctr increment failed for inode: 0x3b9 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888022c20000 [ 229.326636][ T6014] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 229.348287][ T6014] usb 9-1: device descriptor read/8, error -71 [ 229.370030][T15158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.416238][T15160] tmpfs: Unknown parameter 'hagh' [ 229.586788][ T6014] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 229.607274][ T6014] usb 9-1: device descriptor read/8, error -71 [ 229.716993][ T6014] usb usb9-port1: unable to enumerate USB device [ 229.760941][T15173] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 229.763660][T15173] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 229.767693][T15173] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 229.770574][T15173] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 229.974323][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 229.974342][ T40] audit: type=1400 audit(1759435239.305:21046): avc: denied { ioctl } for pid=15177 comm="syz.3.2752" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 229.982460][T15178] FAT-fs (sr0): unable to read boot sector [ 229.984927][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.984950][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.984964][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.984979][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.984993][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.985007][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.985022][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.985036][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.985051][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.985065][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 229.993704][ T10] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [] Q~{oaR¼ݫYlCLԮ(] on pAmtsvf'_p'1 [ 230.045052][T15181] fido_id[15181]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 230.488864][T15211] 9pnet_virtio: no channels available for device syz [ 230.488918][T15212] 9pnet_virtio: no channels available for device syz [ 230.538731][T15214] 9pnet_virtio: no channels available for device syz [ 230.951164][T15220] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 230.962771][T15221] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 231.036156][ T40] audit: type=1400 audit(1759435240.365:21047): avc: denied { listen } for pid=15229 comm="syz.3.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.221729][ T7395] [ 231.222542][ T7395] ============================================ [ 231.224487][ T7395] WARNING: possible recursive locking detected [ 231.226680][ T7395] syzkaller #0 Not tainted [ 231.228211][ T7395] -------------------------------------------- [ 231.231664][ T7395] kworker/u32:31/7395 is trying to acquire lock: [ 231.234413][ T7395] ffffe8fefc770a50 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x7bd/0xd20 [ 231.237812][ T7395] [ 231.237812][ T7395] but task is already holding lock: [ 231.240251][ T7395] ffffe8fefc987b80 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x697/0xd20 [ 231.243146][ T7395] [ 231.243146][ T7395] other info that might help us debug this: [ 231.245856][ T7395] Possible unsafe locking scenario: [ 231.245856][ T7395] [ 231.248900][ T7395] CPU0 [ 231.250141][ T7395] ---- [ 231.251363][ T7395] lock(&pd_list->lock); [ 231.252161][ T10] usb 5-1: USB disconnect, device number 31 [ 231.252927][ T7395] lock(&pd_list->lock); [ 231.256764][ T7395] [ 231.256764][ T7395] *** DEADLOCK *** [ 231.256764][ T7395] [ 231.259648][ T7395] May be due to missing lock nesting notation [ 231.259648][ T7395] [ 231.262244][ T7395] 3 locks held by kworker/u32:31/7395: [ 231.263967][ T7395] #0: ffff888023cab948 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 231.267706][ T7395] #1: ffffc90006b1fd10 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 231.271475][ T7395] #2: ffffe8fefc987b80 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x697/0xd20 [ 231.274614][ T7395] [ 231.274614][ T7395] stack backtrace: [ 231.276503][ T7395] CPU: 1 UID: 0 PID: 7395 Comm: kworker/u32:31 Not tainted syzkaller #0 PREEMPT(full) [ 231.276518][ T7395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.276526][ T7395] Workqueue: pdecrypt_parallel padata_parallel_worker [ 231.276541][ T7395] Call Trace: [ 231.276546][ T7395] [ 231.276551][ T7395] dump_stack_lvl+0x116/0x1f0 [ 231.276579][ T7395] print_deadlock_bug+0x1e9/0x240 [ 231.276598][ T7395] __lock_acquire+0x1133/0x1ce0 [ 231.276610][ T7395] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.276626][ T7395] lock_acquire+0x179/0x350 [ 231.276636][ T7395] ? padata_do_serial+0x7bd/0xd20 [ 231.276649][ T7395] ? queue_work_on+0x146/0x1f0 [ 231.276662][ T7395] ? queue_work_on+0x86/0x1f0 [ 231.276675][ T7395] _raw_spin_lock+0x2e/0x40 [ 231.276687][ T7395] ? padata_do_serial+0x7bd/0xd20 [ 231.276699][ T7395] padata_do_serial+0x7bd/0xd20 [ 231.276714][ T7395] pcrypt_aead_dec+0x5b/0x70 [ 231.276736][ T7395] padata_parallel_worker+0x65/0xb0 [ 231.276749][ T7395] process_one_work+0x9cf/0x1b70 [ 231.276770][ T7395] ? __pfx_process_one_work+0x10/0x10 [ 231.276784][ T7395] ? assign_work+0x1a0/0x250 [ 231.276796][ T7395] worker_thread+0x6c8/0xf10 [ 231.276811][ T7395] ? __kthread_parkme+0x19e/0x250 [ 231.276828][ T7395] ? __pfx_worker_thread+0x10/0x10 [ 231.276841][ T7395] kthread+0x3c5/0x780 [ 231.276853][ T7395] ? __pfx_kthread+0x10/0x10 [ 231.276864][ T7395] ? rcu_is_watching+0x12/0xc0 [ 231.276880][ T7395] ? __pfx_kthread+0x10/0x10 [ 231.276891][ T7395] ret_from_fork+0x56a/0x730 [ 231.276903][ T7395] ? __pfx_kthread+0x10/0x10 [ 231.276914][ T7395] ret_from_fork_asm+0x1a/0x30 [ 231.276933][ T7395] [ 231.332499][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.344476][T15243] __nla_validate_parse: 4 callbacks suppressed [ 231.344488][T15243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2772'. [ 231.353179][T15252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2772'. VM DIAGNOSIS: 20:00:40 Registers: info registers vcpu 0 CPU#0 RAX=0000008d450f26da RBX=ffff88806a623a00 RCX=00000000000006e0 RDX=000000000000008d RSI=ffff88806a623a00 RDI=000000000003732c RBP=000000000003732c RSP=ffffc90000007ec8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a627c80 RIP=ffffffff8167ae55 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000340 CR3=0000000049c3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffad7ec836 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffad7ec836 00007fffad7ec83c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe05581305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe05581313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0559b74a8 00007fe0559b74a0 00007fe0559b7498 00007fe0559b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe05651d100 00007fe0559b7460 00007fe0559b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0559b74b8 00007fe0559b74b0 00007fe0559b74a8 00007fe0559b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85200855 RDI=ffffffff9ab64ae0 RBP=ffffffff9ab64aa0 RSP=ffffc90006b1f570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ab64aa0 R15=ffffffff852007f0 RIP=ffffffff8520087f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000fe6008 CR3=0000000048abe000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020520001 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6bf4276ea008716d f40eb808c09fcc45 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e92bd17335b5f38e 5e0b0ec79dee03c4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cc12c7624dbab2f c286595f18376a90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b5927301ee2d6ea a6d96fcd9ce59a2b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee7bdd06850cc616 dc6d2986bb82876c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b3c205d2a883930 1237a9db6221b856 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b204dbbe3411274a 04a4804e4cfbf9f9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b0414408a40a824 6814a58080d02818 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4273c1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4273c1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2973252865746972 770073252f64252f 6b7361742f666c65 732f636f72adc0de ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c56000d40514c57 520056000a41000a 4e5644510a434940 560a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff8dabed00 RBX=0000000000000001 RCX=ffffc90004891000 RDX=ffff88800ddd9000 RSI=ffff88800ddd8480 RDI=ffffc900063874c0 RBP=ffffc900063874c0 RSP=ffffc90006387378 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88800ddd8000 R13=0000000000000040 R14=0000000000001000 R15=ffffc900063874b8 RIP=ffffffff84a3dbe3 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5e0508f6c0 ffffffff 00c00000 GS =0000 ffff8880d7060000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000029c0 CR3=0000000051c89000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 550c7dc3243185be 550c7dc3243185be ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 232cda823ae07544 4378f2e4d1d456fc ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 705dcd9a4a6fb107 6816263dcfeea0e2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f3ee14f7b914ce35 f70c21890f859bd2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f1a594a7ef2343b ead10d780c66c811 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81c30c3f RDX=ffff88802738c900 RSI=ffffffff8169b141 RDI=ffffffff8169b117 RBP=ffffe8fefc987b68 RSP=ffffc9000317f9d8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90606c97 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a93b240 R15=fffff91fdf930f6d RIP=ffffffff8b508b2f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7160000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c24db9c CR3=0000000051c89000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c67178f2bef9a3f7 c67178f2bef9a3f7 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 622ce722f8b71686 14a24327cbddfba2 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 528a28779d06c8bc d75dcfcb767f0423 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 767f0423d75dcfcb cbddfba214a24327 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c9301f628dc1f03 a93fb760ce966f39 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e283d21785a3d4e 358556bca834b458 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000