last executing test programs: 1.864233435s ago: executing program 1 (id=664): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0xfd}, 0x6}}}, 0x7) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0xfd}, 0x6}}}, 0x7) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0x0, 0x35314142, 0x0, 0x0, [{0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {0x20}]}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) (async) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c00000000000000000000000800", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x0) read$char_usb(r5, &(0x7f0000000340)=""/139, 0x8b) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="f30f01766136440f01c970a8652e0f780b66ba4300ed36410f381c1d20000000b9800000c00f3235001000000f3066baf80cb80c652d85ef66bafc0ced66baf80cb8d87d8e86ef66bafc0cb831440000ef66baf80cb89e5eb885ef66bafc0c66ed", 0x61}], 0x24, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.28029346s ago: executing program 3 (id=675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @loopback}, 0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r1}}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xb, 0x2, 0x1, 0x4, 0x0, 0x2, 0x6, 0x5, 0xc7, 0x40, 0x1ed, 0x70, 0x8, 0x38, 0x1, 0x6, 0xfe01, 0x4}, [{0x2, 0x9734, 0x7, 0x4c6a9b2a, 0x7fffffff, 0x4, 0x9, 0x8}], "17208613d75eb3a2cbd744d964087b1c6b68927a2eaf02723a498546599d379442f2d38e35ade42f0e560e77709c678374aca9396b87f956c8910dbe985fb68ac8bc04ef9bf91fef9ee76dd3a305d50aa541616a789dbd28b05f66bf28a971892438f3996f8159635a64930bf2a2", ['\x00', '\x00', '\x00']}, 0x3e6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "88a88a5fbf13069b", "653b2875e3376746c2b816d2bc1dd286", "a2ea1515", "1e13374021b0f7f8"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @loopback}, 0x1c) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r1}}, 0x18) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xb, 0x2, 0x1, 0x4, 0x0, 0x2, 0x6, 0x5, 0xc7, 0x40, 0x1ed, 0x70, 0x8, 0x38, 0x1, 0x6, 0xfe01, 0x4}, [{0x2, 0x9734, 0x7, 0x4c6a9b2a, 0x7fffffff, 0x4, 0x9, 0x8}], "17208613d75eb3a2cbd744d964087b1c6b68927a2eaf02723a498546599d379442f2d38e35ade42f0e560e77709c678374aca9396b87f956c8910dbe985fb68ac8bc04ef9bf91fef9ee76dd3a305d50aa541616a789dbd28b05f66bf28a971892438f3996f8159635a64930bf2a2", ['\x00', '\x00', '\x00']}, 0x3e6) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "88a88a5fbf13069b", "653b2875e3376746c2b816d2bc1dd286", "a2ea1515", "1e13374021b0f7f8"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) 1.079667253s ago: executing program 3 (id=676): io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) 1.07940437s ago: executing program 1 (id=677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0x8, 0x3, 0xfffffffb, 0x0, 0xe, 0x9}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="2e0f060f01c50f38cd30263efe0f3825a773a38b8b8b0f38811d0f0866f30f1efb0f01d90fc77af367670fe1fa", 0x2d}], 0x1, 0x69, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 956.311362ms ago: executing program 3 (id=679): prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="afadb7cffdb69146836b52e883152097b539600f0238e87e8c16209fc6169dbb764bbfcc51228e146a60af20face161be73b2f78d99b7b996851aa09bf4eef5a209fc3ea470b1f695e21353240da7d635acb65199b2cea5c11054b67b5e85bcf35253174d2858fe231208c77b1c7176359bb6531c5849f4e3d725c9f4233a6169e1aee6790e4872085729f931e0c6e99543ce7e676386d9b5df505a4811e4528bd21c236", 0xa4) r0 = socket(0x10, 0x3, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2, 0x0, 0x4, 0x0, 0x1, 0x20, 0x5bc}}}}}]}, 0x3c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r4 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5412, &(0x7f00000001c0)=0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="040e"], 0x7) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x1790) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x20, 0xa01, 0x4, 0xffffffff, {0x4b}, [@typed={0x4, 0x147}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0xd0) 869.683565ms ago: executing program 3 (id=682): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0xc0000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r6) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0xfff, 0x40) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r12 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@secondary) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 869.000056ms ago: executing program 2 (id=683): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x4, 0x8, 0x0, {0x4, @sliced={0x8, [0x0, 0x7f, 0x5, 0x1, 0x6, 0x4000, 0x100, 0x5, 0x8, 0xf8bd, 0x5, 0xfff0, 0x800, 0x6, 0x2, 0x9, 0x6, 0x0, 0x3, 0x36, 0xb81d, 0x3, 0xe920, 0x9, 0x5, 0xf4a9, 0x4, 0x7, 0x1bc2, 0x4, 0xfff8, 0x9, 0x2, 0x5, 0x101, 0x4, 0x3, 0x6, 0x101, 0xfffd, 0x8, 0x0, 0x8, 0xd, 0xe1e, 0x4, 0x7b3e, 0x6], 0x1ff}}, 0x7}) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x701, 0x10000, 0x0, {0x26}}, 0x14}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c0000040000001400018006000600800a0000080002"], 0x2c}}, 0x0) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff8fff) read$FUSE(0xffffffffffffffff, &(0x7f0000003340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/raw6\x00') read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0x2020) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x4, 0x8, 0x0, {0x4, @sliced={0x8, [0x0, 0x7f, 0x5, 0x1, 0x6, 0x4000, 0x100, 0x5, 0x8, 0xf8bd, 0x5, 0xfff0, 0x800, 0x6, 0x2, 0x9, 0x6, 0x0, 0x3, 0x36, 0xb81d, 0x3, 0xe920, 0x9, 0x5, 0xf4a9, 0x4, 0x7, 0x1bc2, 0x4, 0xfff8, 0x9, 0x2, 0x5, 0x101, 0x4, 0x3, 0x6, 0x101, 0xfffd, 0x8, 0x0, 0x8, 0xd, 0xe1e, 0x4, 0x7b3e, 0x6], 0x1ff}}, 0x7}) (async) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x701, 0x10000, 0x0, {0x26}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c0000040000001400018006000600800a0000080002"], 0x2c}}, 0x0) (async) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff8fff) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003340)={0x2020}, 0x2020) (async) syz_open_procfs(r5, &(0x7f0000000000)='net/raw6\x00') (async) read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0x2020) (async) 778.516731ms ago: executing program 2 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfda8, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) 776.860297ms ago: executing program 3 (id=685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x38}}, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r3}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x41844) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f00000003c0)=0x5) socket(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4000064f) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x800000005) 730.446704ms ago: executing program 2 (id=686): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000040)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) fcntl$getflags(r4, 0x3) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000280)={0x18, r5, 0xffffffffffffcde, 0x0, &(0x7f0000000240)=[{0x0, 0x403}, {0x5, 0x100000000}]}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2, 0x0, r5}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)='%pB \x00'}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001e000100"], 0x48}}, 0x20000800) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) 727.594126ms ago: executing program 3 (id=688): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$TIOCL_PASTESEL(r0, 0x4b47, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = socket$inet6(0xa, 0x802, 0x87) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e20, 0xcc08, @empty}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='~', 0x1, 0x40804, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x400000000000272, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xb5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getgroups(0x0, &(0x7f0000000280)) recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x40, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="20003300d0000000080211000001080211000000505050505050000008"], 0x3c}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r9, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8000, 0x80}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 725.635343ms ago: executing program 2 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x84, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x80, 0xfe}}, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1000, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}, 0x1, 0x0, 0x800000000000000}, 0x20000014) 648.249441ms ago: executing program 2 (id=691): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='loginuid\x00') mremap(&(0x7f0000946000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f00004fa000/0x2000)=nil) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x840, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32006d63, 0xfffff00a, 0xff, 0x101, 0x8, 0x200, 0xbb, 0x2, 0x3, 0xfffffffb, 0x3f, 0x3, 0x5, 0xfffffff9, 0x0, 0x7, 0x5, 0x7, 0xfffffffa, 0x800, 0x7fff, 0x4, 0x1, 0x1, 0x519f, 0x0, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x4, 0x5, 0xfffffff7, 0x7fff, 0x1, 0x8, 0x7, 0x3b1f, 0x5, 0x9, 0xb, 0x5, 0x400, 0x4, 0x3, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x68, 0x4, 0x1, 0x7, 0x5, 0x853d642, 0x3, 0x7, 0x8, 0x64b1, 0xf59, 0xa, 0x2, 0x1, 0x4, 0x36, 0x6, 0xa, 0x5, 0x4, 0x7fff, 0x7, 0x10000, 0xa, 0x200, 0x8, 0x9, 0x10, 0x3ff, 0x9, 0x9, 0x70, 0x4, 0xd, 0x1, 0xffffb0d4, 0x2, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x1, 0x1, 0x3, 0x4, 0xc, 0x8, 0xfffffffa, 0x8aa0, 0xe0f, 0x9, 0x3, 0x1000, 0xffff, 0x10000, 0x8000, 0xd, 0x5, 0xff, 0xf, 0xd0a3, 0x80, 0x7, 0x5b72, 0x0, 0x5, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x5, 0x4, 0x2, 0xb52b, 0x2, 0x3, 0x3ff, 0x1, 0x2dd9, 0x8001, 0x8, 0x5, 0x0, 0x7, 0x81, 0x80000000, 0x3, 0xe8d6, 0xffff, 0xc0eb, 0x6, 0x1, 0x7, 0x4b0, 0x8, 0x3cf1a96c, 0x6, 0x6, 0x80000000, 0x9, 0xfffffcea, 0x9, 0x10000, 0x6ce9, 0x9, 0x4e5, 0x7, 0x369c, 0x3f99, 0xffffffff, 0x4, 0x8, 0x3, 0xff, 0x1, 0x0, 0x5, 0x2, 0x5000000, 0x62, 0x10001, 0xcf8c, 0x3f18476d, 0x1f300220, 0x3, 0x4224, 0x1, 0x1, 0x2, 0x4, 0xfffffff7, 0x80000000, 0x5, 0xe, 0x5, 0x1, 0xdf60da4, 0x3, 0x82d0, 0x6, 0x4, 0x800, 0x100, 0x80000001, 0x6, 0x3, 0x7, 0x80000001, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x4, 0x9, 0x6, 0x0, 0xfffffe00, 0x39, 0x2, 0x8000, 0x80, 0x3, 0x4, 0x9, 0x8, 0x4, 0x3, 0x9, 0x100, 0x7, 0x2, 0x7, 0x2, 0x9, 0x19000000, 0x5, 0x4, 0x9, 0x3, 0x80000000, 0x2, 0x2, 0x7, 0x0, 0x7, 0xfff, 0xc83b, 0x401, 0xe4f0, 0xd09, 0x80000001, 0xfffffff7, 0x7812, 0x80, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x81, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x0, 0xc4e6, 0xfffffc01, 0x459, 0x6, 0x4, 0xc, 0x3, 0x1, 0xde8, 0x4, 0x6, 0x7, 0x2, 0x7, 0x3, 0x2, 0x5, 0x339c04a7, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x6, 0x5, 0x5, 0x9, 0x9, 0x2, 0x0, 0x80000001, 0x9, 0x84b250eb, 0x2, 0x5, 0x3, 0x4, 0x2f5, 0x10, 0x5, 0x7a4e, 0x5, 0xb9, 0xffffffff, 0x8, 0x8000, 0x8, 0x8, 0xff, 0xff, 0x4, 0x40, 0x7, 0x17, 0x80, 0x3, 0x4, 0x5, 0x7b34, 0x2ce, 0xb8, 0x3ff, 0xb46, 0x4, 0x8, 0x1, 0x2fce, 0x0, 0x5, 0x3, 0x4, 0x8, 0x5, 0x1, 0x0, 0xf, 0x2c8, 0x2, 0xffffffc0, 0x5ed96db, 0x400, 0x7, 0x6, 0x400, 0x1, 0x6, 0x0, 0x5, 0x2, 0x200, 0x1ff, 0x8163, 0x4306ded, 0x1de7, 0x831, 0x5, 0xffffffff, 0x7, 0x5, 0x10000, 0xfffffffc, 0x6cf, 0xf, 0x1, 0x1, 0x401, 0x8000, 0x80, 0xe, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xd5f3, 0x0, 0x14, 0xc23, 0xd, 0x1, 0x3, 0x1, 0x9, 0x8, 0xf, 0x800, 0x1, 0xffff, 0x9, 0xfffffff7, 0x4, 0x6, 0xc3, 0x5, 0x3, 0x2, 0x10000, 0xfff, 0x8, 0x32f4, 0x9, 0x2, 0x4, 0x0, 0xa, 0x5, 0x0, 0x3, 0x8, 0x79a9, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3e91, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x7, 0x5, 0x360c4ca1, 0x5, 0x40f, 0x8, 0x7ff, 0x7, 0x2, 0x1, 0xff, 0x96, 0x1, 0x2, 0xc95af3b, 0x6813, 0x4, 0x9, 0x3f, 0x5, 0x8, 0x7, 0x8, 0x1a74, 0x10000, 0x101, 0x8, 0x2, 0x13, 0x6, 0xff, 0x1, 0x0, 0x4, 0x9, 0xa, 0x7, 0x9, 0xffffff00, 0x9, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x1000, 0x100000, 0x80000000, 0xffffffff, 0x80000001, 0x3ed, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0xb, 0x5, 0x9, 0xd, 0x8, 0x4, 0x0, 0x1000, 0x4, 0x8, 0x5, 0x2, 0x4, 0x1, 0x0, 0xdcc, 0x7, 0x5, 0x5, 0x2, 0x10, 0x2, 0x217, 0x3ff, 0x200000, 0xd, 0xa990, 0x1, 0x9, 0x4, 0x2932, 0x5dd, 0x1ff, 0xe3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, 0x0, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x2, 0x6, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000140)=""/172) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f", 0x1f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000340)=""/60, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(r6, 0xaf02, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRES32=0x0], 0x24}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 647.889097ms ago: executing program 1 (id=692): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x2, 0x8, {{0x2b, 0x4, 0x2, 0x0, 0xac, 0x64, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x7}, @multicast1, {[@cipso={0x86, 0x51, 0x3, [{0x5, 0xf, "48481763b2be0a1bde81da60ac"}, {0x5, 0x12, "5ee5a21788e3349b44afd87a81bc1708"}, {0x1, 0x11, "6e78e3b8cd77e98d2656778dcaa6eb"}, {0x2, 0x9, "76d6c3114166dc"}, {0x5, 0x6, "5ac6ed11"}, {0x7, 0x3, "b8"}, {0x6, 0x7, "6804bef4b8"}]}, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0x5, [{@remote, 0xfffffffa}, {@loopback, 0x4ef}, {@empty, 0x1a}, {@rand_addr=0x64010101, 0x80000000}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x2}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3}]}]}}}}}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004012}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r5 = socket(0x1d, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r7, 0x133, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c040}, 0x40801) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r4, 0x9, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x10}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) sendmsg$nl_crypto(r5, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=@del={0xf8, 0x11, 0x4, 0x70bd2d, 0x25dfdbfe, {{'essiv(rfc7539esp(xchacha12,sha3-384),sha1-avx2)\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "29e847f81601231ffbcc8f1921dafe"}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000044}, 0x24000004) sendmmsg$inet(r5, &(0x7f0000000a80), 0x0, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r11, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x10}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) syz_80211_inject_frame(&(0x7f0000000c40), &(0x7f0000000c80)=@ctrl_frame=@cf_end_cf_ack={{}, {0x5}, @device_b, @broadcast}, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r3) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000001180)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000d40)={0x3e0, r12, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x154, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1180dfc9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffe6fd}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb90}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "1a516ea3d1cd80a49aaa2013d35dba844482b65bf737a54a67e4e4ea9143377d5c9525"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9db94a5943c1611a73454b83b18d709046b97d4d2b"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xba5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x416}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x80}, 0x20000044) r13 = io_uring_setup(0x54a4, &(0x7f00000011c0)={0x0, 0x6, 0xe010, 0x1, 0x1d3, 0x0, r0}) io_uring_enter(r13, 0x48c8, 0xc2d2, 0x45, &(0x7f0000001240)={[0x2]}, 0x8) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000012c0), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r14, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x30, r15, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x400, 0xffffffff, 0x7, 0xfffffffd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004860}, 0x10000840) 509.203069ms ago: executing program 0 (id=695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xfff3, 0x2}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) 358.17206ms ago: executing program 2 (id=696): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xffffffffffffffff, 0x3a, '{](/', 0x3a, '/dev/autofs\x00', 0x3a, './file0'}, 0x37) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180)=r0, 0xe9b7f68104c10fa8) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlockall(0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 290.287535ms ago: executing program 0 (id=697): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x31, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @value64}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000ff0f0000040000"]) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) 140.060789ms ago: executing program 0 (id=698): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper, 0x3}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x8, 0x5, 0x8, 0x4}, {0x8eca, 0x1, 0x4f, 0x3}, {0x9, 0x6, 0x0, 0x5}]}, 0x10) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000180)=""/128) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000200)=0x9, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000240)={r0}) connect$qrtr(r2, &(0x7f0000000280)={0x2a, 0x2, 0x8000}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f0000000380)={0x1258, r4, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xff, 0x58}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x8}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x5}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x40, 0x84, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="46e7e64c7ecf74f039ac14da83fa9739cecb4042d5b995ba4eee495816ef"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random="10"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2d30}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1150, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb2, 0x3, "abc13fc9a914fb88bcdb1b2fd84fde33c5ad77bc8589f12a85b1da64c8d7607a4b9b8fcfa048dc4fb4646f8fc53ab2e65a9fdf9a37ee7105f381104da4bc1c3bfbd5399b976872d6ca3f3d3506443c167548eb248430e535d91bedd5eff25aba7e10dbb49eed0d5a5fdf33ac89a2c3ee5d23d34551a22bb4e29e48cf3ed8a6c7d18fa06e07090a6c89f899027427d6fc7d234a3b500154ffc1926551274181d67782a67b866a6cce3d50521cac37"}, @NL80211_BAND_2GHZ={0x79, 0x0, "56c37d751d2a8360cbf4d0ccc2b8be651e5aee0036fbb611aba198acdcecd7963ac4dc9e065b3b5659690ba558225ca8a447d8a3c572a38b3502cc67ded6be8d7a994fac4817753ef27c10d41ad05979296e017951bfc2760dfc776085a5be0f985be34705e8d9949ac8304aa45514ddd384925c4a"}, @NL80211_BAND_5GHZ={0x14, 0x1, "0559b97e44d652c2f33be001a9c7b7f6"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x80, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x36, 0x2, "ad1e38060b6973cae6d0478375d57b813d413ab6cb2e6ba670938b5dc53dfc7de5cbc1d1aecd1f757037d50bdee3970ae1a6"}, @NL80211_BAND_6GHZ={0x41, 0x3, "e07578c60eadd8bbec370432952b0c6b2aae1b014bdf46abcebcad6b5ebc3b989869f8de9e8d38902a6e02382e927c0c1085f7f40036f4bec01b7043ea"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0xe}}]}, 0x1258}, 0x1, 0x0, 0x0, 0x4}, 0x4080) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000016c0)={0x3, &(0x7f0000001680)=[{0x7, 0x3, 0x6, 0x4}, {0x0, 0x7, 0x8, 0x4}, {0x5, 0x77, 0x70, 0xc000}]}, 0x10) connect$pppl2tp(r0, &(0x7f0000001700)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @empty}, 0x2, 0x4, 0x4, 0x2}}, 0x26) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001780)={0xa3, 0x0, &(0x7f0000001740)}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000001800)='veth1_to_hsr\x00') r6 = accept$alg(r0, 0x0, 0x0) listen(r6, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'netdevsim0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001900)={'syztnl1\x00', &(0x7f0000001880)={'ip6gre0\x00', r7, 0x29, 0x3, 0x4, 0x3, 0x22, @dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x40, 0x0, 0xab}}) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000001940)={{0x7fff, 0x1}, 0x44}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000001980)={@multicast, @random="4aed55cbd673", @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x3e, 0x3, 0x0, 0x0, "1cb14e19d22481aa40a4e59d24deb51576dab229741ceb8479f33c18e7b8154cdaea3150854d8b30c122ddb3afe8b0a707737a8720b887a6b528d11bae0b4adf"}}}}, &(0x7f0000001a00)={0x1, 0x2, [0x674, 0xfef, 0x125, 0x1ed]}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000001a40)={@my=0x1, 0x10001}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x5c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4004) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000001c00)=""/60, 0x3c) lseek(r3, 0xfff, 0x3) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 139.841138ms ago: executing program 0 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x84, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x80, 0xfe}}, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1000, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}, 0x1, 0x0, 0xc00000000000000}, 0x20000014) 80.015642ms ago: executing program 0 (id=700): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) 79.602503ms ago: executing program 1 (id=701): r0 = syz_io_uring_setup(0x24fc, &(0x7f00000000c0)={0x0, 0x0, 0x10100, 0x1, 0xe6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) (async) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r5) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$poke(0x5, r8, &(0x7f0000000400), 0x1) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd7000ffdbdf25140000000c00060003000000030000000c000600000000000000000008001d00", @ANYRES32, @ANYBLOB="08801c00", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000240)={@broadcast, @random, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x22, 0x5a, 0x66, 0x0, 0xe0, 0x2f, 0x0, @local, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x6]}, {0x8, 0x88be, 0x1, {{0xc, 0x1, 0x80, 0x3, 0x1, 0x0, 0x3, 0x9}, 0x1, {0x5d}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, 0x4}, 0x2, {0x7, 0x1, 0x0, 0x5, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) write$nci(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="71050d144b3278195af40c93c0600202820c030406a7e5ea"], 0x18) 79.238949ms ago: executing program 0 (id=702): r0 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004811}, 0x8814) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000010380), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x10001) (async) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) (async) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) (async) ioctl$EVIOCGREP(r4, 0x80084524, 0x0) 261.121µs ago: executing program 1 (id=703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4440, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp], 0x1) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) 0s ago: executing program 1 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x505e8}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_MTU={0x8, 0x4, 0xfffffffa}]}, 0x5c}}, 0x810) (async) recvfrom(r0, &(0x7f0000000080)=""/101, 0x65, 0x12002, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80) 0s ago: executing program 1 (id=705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x305, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x18) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x2) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x32) (async) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x8f1, 0x0, 0xfff}]}) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58634' (ED25519) to the list of known hosts. [ 53.919191][ T40] audit: type=1400 audit(1758063738.259:62): avc: denied { name_bind } for pid=5952 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.944466][ T40] audit: type=1400 audit(1758063738.279:63): avc: denied { write } for pid=5953 comm="sh" path="pipe:[6097]" dev="pipefs" ino=6097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 53.967722][ T40] audit: type=1400 audit(1758063738.299:64): avc: denied { execute } for pid=5953 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 53.976554][ T40] audit: type=1400 audit(1758063738.299:65): avc: denied { execute_no_trans } for pid=5953 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 56.897057][ T40] audit: type=1400 audit(1758063741.229:66): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.910279][ T5953] cgroup: Unknown subsys name 'net' [ 57.062713][ T5953] cgroup: Unknown subsys name 'cpuset' [ 57.070208][ T5953] cgroup: Unknown subsys name 'rlimit' [ 57.324563][ T5963] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.134785][ T5953] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.623432][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 62.623442][ T40] audit: type=1400 audit(1758063746.959:80): avc: denied { execmem } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.947060][ T40] audit: type=1400 audit(1758063747.279:81): avc: denied { create } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.966075][ T40] audit: type=1400 audit(1758063747.279:82): avc: denied { read write } for pid=5970 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.974293][ T40] audit: type=1400 audit(1758063747.279:83): avc: denied { open } for pid=5970 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.984447][ T40] audit: type=1400 audit(1758063747.299:84): avc: denied { ioctl } for pid=5970 comm="syz-executor" path="socket:[6737]" dev="sockfs" ino=6737 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.028865][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.029688][ T5980] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.035909][ T5980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.038197][ T5986] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.043163][ T5986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.045120][ T5985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.046614][ T5986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.049735][ T5985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.050331][ T5987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.051409][ T5980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.052040][ T5987] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.052250][ T5980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.053138][ T5980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.053324][ T5980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.054327][ T5980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.058618][ T40] audit: type=1400 audit(1758063747.389:85): avc: denied { read } for pid=5970 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.059535][ T5982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.060889][ T5987] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.061234][ T5982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.064562][ T40] audit: type=1400 audit(1758063747.399:86): avc: denied { open } for pid=5970 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.066868][ T5987] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.070023][ T40] audit: type=1400 audit(1758063747.399:87): avc: denied { mounton } for pid=5970 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.112053][ T5987] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.363298][ T40] audit: type=1400 audit(1758063747.699:88): avc: denied { module_request } for pid=5981 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.470087][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 63.524020][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 63.576666][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 63.591432][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 63.624499][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.628253][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.631102][ T5981] bridge_slave_0: entered allmulticast mode [ 63.634200][ T5981] bridge_slave_0: entered promiscuous mode [ 63.643861][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.647049][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.650488][ T5981] bridge_slave_1: entered allmulticast mode [ 63.654664][ T5981] bridge_slave_1: entered promiscuous mode [ 63.866183][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.943135][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.946944][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.949447][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.951748][ T5970] bridge_slave_0: entered allmulticast mode [ 63.954378][ T5970] bridge_slave_0: entered promiscuous mode [ 63.994544][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.997495][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.000103][ T5974] bridge_slave_0: entered allmulticast mode [ 64.003775][ T5974] bridge_slave_0: entered promiscuous mode [ 64.051330][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.054297][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.057491][ T5970] bridge_slave_1: entered allmulticast mode [ 64.060939][ T5970] bridge_slave_1: entered promiscuous mode [ 64.063740][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.066214][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.070426][ T5969] bridge_slave_0: entered allmulticast mode [ 64.073690][ T5969] bridge_slave_0: entered promiscuous mode [ 64.076771][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.079235][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.081723][ T5974] bridge_slave_1: entered allmulticast mode [ 64.084524][ T5974] bridge_slave_1: entered promiscuous mode [ 64.089653][ T5981] team0: Port device team_slave_0 added [ 64.104403][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.107191][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.109810][ T5969] bridge_slave_1: entered allmulticast mode [ 64.113247][ T5969] bridge_slave_1: entered promiscuous mode [ 64.131784][ T5981] team0: Port device team_slave_1 added [ 64.153238][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.159313][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.203771][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.277879][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.329780][ T5970] team0: Port device team_slave_0 added [ 64.333903][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.359628][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.362311][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.371468][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.377830][ T5970] team0: Port device team_slave_1 added [ 64.381937][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.386096][ T5974] team0: Port device team_slave_0 added [ 64.394295][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.397461][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.407042][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.445144][ T5974] team0: Port device team_slave_1 added [ 64.496069][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.498595][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.506586][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.533183][ T5969] team0: Port device team_slave_0 added [ 64.538544][ T5969] team0: Port device team_slave_1 added [ 64.569337][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.571590][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.581241][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.608074][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.610492][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.619556][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.665673][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.669737][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.681762][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.707506][ T5981] hsr_slave_0: entered promiscuous mode [ 64.711179][ T5981] hsr_slave_1: entered promiscuous mode [ 64.714597][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.717664][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.726846][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.737367][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.740621][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.750976][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.894604][ T5970] hsr_slave_0: entered promiscuous mode [ 64.898270][ T5970] hsr_slave_1: entered promiscuous mode [ 64.901198][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 64.903633][ T5970] Cannot create hsr debugfs directory [ 64.931827][ T5974] hsr_slave_0: entered promiscuous mode [ 64.934890][ T5974] hsr_slave_1: entered promiscuous mode [ 64.937757][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 64.940346][ T5974] Cannot create hsr debugfs directory [ 64.995668][ T5969] hsr_slave_0: entered promiscuous mode [ 65.000513][ T5969] hsr_slave_1: entered promiscuous mode [ 65.003579][ T5969] debugfs: 'hsr0' already exists in 'hsr' [ 65.006160][ T5969] Cannot create hsr debugfs directory [ 65.108984][ T5987] Bluetooth: hci3: command tx timeout [ 65.110855][ T5329] Bluetooth: hci1: command tx timeout [ 65.118101][ T5329] Bluetooth: hci0: command tx timeout [ 65.198144][ T5329] Bluetooth: hci2: command tx timeout [ 65.515052][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.521889][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.526863][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.532482][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.587899][ T5970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.596057][ T5970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.605262][ T5970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.612802][ T5970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.699285][ T5974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.705936][ T5974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.717721][ T5974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.725525][ T5974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.785209][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.814793][ T5969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.819841][ T5969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.825370][ T5969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.831124][ T5969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.850162][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.862250][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.867714][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.870891][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.893047][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.895349][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.913643][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.935437][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.938514][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.957446][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.960585][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.971524][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.026528][ T40] audit: type=1400 audit(1758063750.359:89): avc: denied { sys_module } for pid=5981 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.027774][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.044582][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.047583][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.073241][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.075718][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.084227][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.106918][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.139497][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.174666][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.178012][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.193529][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.201052][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.204425][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.254500][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.287449][ T5981] veth0_vlan: entered promiscuous mode [ 66.297513][ T5981] veth1_vlan: entered promiscuous mode [ 66.330778][ T5981] veth0_macvtap: entered promiscuous mode [ 66.344635][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.353916][ T5981] veth1_macvtap: entered promiscuous mode [ 66.366534][ T5970] veth0_vlan: entered promiscuous mode [ 66.376113][ T5970] veth1_vlan: entered promiscuous mode [ 66.383102][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.393166][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.415953][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.423241][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.434265][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.439753][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.448934][ T5970] veth0_macvtap: entered promiscuous mode [ 66.464821][ T5970] veth1_macvtap: entered promiscuous mode [ 66.470863][ T5974] veth0_vlan: entered promiscuous mode [ 66.487239][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.491451][ T5974] veth1_vlan: entered promiscuous mode [ 66.496417][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.505804][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.514286][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.535459][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.540309][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.550163][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.553502][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.559720][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.584818][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.587466][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.626539][ T5974] veth0_macvtap: entered promiscuous mode [ 66.629180][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.632583][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.644368][ T5974] veth1_macvtap: entered promiscuous mode [ 66.653037][ T5981] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.669171][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.685155][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.690725][ T5969] veth0_vlan: entered promiscuous mode [ 66.693049][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.696617][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.701239][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.704656][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.712283][ T5969] veth1_vlan: entered promiscuous mode [ 66.712958][ T12] tipc: Subscription rejected, illegal request [ 66.716519][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.721075][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.776761][ T5969] veth0_macvtap: entered promiscuous mode [ 66.784741][ T5969] veth1_macvtap: entered promiscuous mode [ 66.791913][ T6063] binder: BC_ATTEMPT_ACQUIRE not supported [ 66.793676][ T6064] binder: BC_ATTEMPT_ACQUIRE not supported [ 66.794699][ T6063] binder: 6062:6063 ioctl c0306201 200000000300 returned -22 [ 66.797581][ T6064] binder: 6062:6064 ioctl c0306201 200000000300 returned -22 [ 66.808186][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.811490][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.837458][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.841609][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.896638][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.903481][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.988578][ T1146] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.991819][ T1146] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.994768][ T1146] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.997605][ T1146] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.014412][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.037451][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.041918][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.044536][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.053302][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.058115][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.061667][ T6081] pim6reg1: entered promiscuous mode [ 67.063496][ T6081] pim6reg1: entered allmulticast mode [ 67.067778][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.072070][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.083342][ T6081] 9pnet_fd: Insufficient options for proto=fd [ 67.131135][ T6089] Zero length message leads to an empty skb [ 67.175346][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.182560][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.189765][ T5329] Bluetooth: hci0: command tx timeout [ 67.191354][ T5987] Bluetooth: hci1: command tx timeout [ 67.192138][ T5329] Bluetooth: hci3: command tx timeout [ 67.206903][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.210724][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.231670][ T6096] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 67.278907][ T5329] Bluetooth: hci2: command tx timeout [ 67.309850][ T54] af_packet: tpacket_rcv: packet too big, clamped from 90 to 4294967286. macoff=82 [ 67.330221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.333925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.508087][ T6082] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 67.658283][ T6082] usb 8-1: Using ep0 maxpacket: 8 [ 67.664187][ T6082] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.667314][ T6082] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 67.671693][ T6082] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.689029][ T6082] usb 8-1: config 0 descriptor?? [ 68.107815][ T6082] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 68.110896][ T6082] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 68.113363][ T6082] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 68.116578][ T6082] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 68.120597][ T6082] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 68.123630][ T6082] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 68.154547][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 68.154564][ T40] audit: type=1400 audit(1758063752.489:158): avc: denied { setopt } for pid=6115 comm="syz.2.14" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.218637][ T40] audit: type=1400 audit(1758063752.549:159): avc: denied { unmount } for pid=5974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.262710][ T40] audit: type=1400 audit(1758063752.599:160): avc: denied { write } for pid=6118 comm="syz.1.15" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.263372][ T6119] bond0: entered allmulticast mode [ 68.271038][ T40] audit: type=1400 audit(1758063752.599:161): avc: denied { ioctl } for pid=6118 comm="syz.1.15" path="socket:[7991]" dev="sockfs" ino=7991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.272981][ T6119] bond_slave_0: entered allmulticast mode [ 68.289553][ T6119] bond_slave_1: entered allmulticast mode [ 68.313228][ T54] usb 8-1: USB disconnect, device number 2 [ 68.336257][ T6122] capability: warning: `syz.1.16' uses 32-bit capabilities (legacy support in use) [ 68.598135][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.761078][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.765630][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.770307][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.774606][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.781768][ T6122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.788349][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.991630][ T40] audit: type=1400 audit(1758063753.329:162): avc: denied { write } for pid=6120 comm="syz.1.16" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.994723][ T841] usb 6-1: USB disconnect, device number 2 [ 69.061216][ T40] audit: type=1400 audit(1758063753.399:163): avc: denied { read write } for pid=6134 comm="syz.0.21" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 69.069538][ T40] audit: type=1400 audit(1758063753.399:164): avc: denied { open } for pid=6134 comm="syz.0.21" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 69.080235][ T40] audit: type=1400 audit(1758063753.419:165): avc: denied { read } for pid=6132 comm="syz.3.20" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 69.087814][ T40] audit: type=1400 audit(1758063753.419:166): avc: denied { open } for pid=6132 comm="syz.3.20" path="/9/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 69.096033][ T40] audit: type=1400 audit(1758063753.419:167): avc: denied { ioctl } for pid=6132 comm="syz.3.20" path="/9/file0/file0" dev="fuse" ino=64 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 69.268450][ T5329] Bluetooth: hci1: command tx timeout [ 69.269009][ T5985] Bluetooth: hci3: command tx timeout [ 69.270706][ T5329] Bluetooth: hci0: command tx timeout [ 69.348340][ T5329] Bluetooth: hci2: command tx timeout [ 69.580064][ T6168] SELinux: ebitmap: start bit 64 comes after start bit 1152 [ 69.580197][ T5329] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 69.587608][ T5329] CPU: 3 UID: 0 PID: 5329 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 69.587639][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.587655][ T5329] Workqueue: hci3 hci_rx_work [ 69.587687][ T5329] Call Trace: [ 69.587695][ T5329] [ 69.587703][ T5329] dump_stack_lvl+0x16c/0x1f0 [ 69.587736][ T5329] sysfs_warn_dup+0x7f/0xa0 [ 69.587766][ T5329] sysfs_create_dir_ns+0x24b/0x2b0 [ 69.587796][ T5329] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 69.587823][ T5329] ? find_held_lock+0x2b/0x80 [ 69.587858][ T5329] ? do_raw_spin_unlock+0x172/0x230 [ 69.587884][ T5329] kobject_add_internal+0x2c4/0x9b0 [ 69.587920][ T5329] kobject_add+0x16e/0x240 [ 69.587973][ T5329] ? __pfx_kobject_add+0x10/0x10 [ 69.588004][ T5329] ? do_raw_spin_unlock+0x172/0x230 [ 69.588029][ T5329] ? kobject_put+0xab/0x5a0 [ 69.588066][ T5329] device_add+0x288/0x1aa0 [ 69.588097][ T5329] ? __pfx_dev_set_name+0x10/0x10 [ 69.588118][ T5329] ? __pfx_device_add+0x10/0x10 [ 69.588148][ T5329] ? mgmt_send_event_skb+0x2fb/0x460 [ 69.588180][ T5329] hci_conn_add_sysfs+0x17e/0x230 [ 69.588208][ T5329] le_conn_complete_evt+0x1075/0x1d70 [ 69.588228][ T5329] ? preempt_count_sub+0xb0/0x160 [ 69.588261][ T5329] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 69.588284][ T5329] ? hci_event_packet+0x459/0x11c0 [ 69.588316][ T5329] hci_le_conn_complete_evt+0x23c/0x370 [ 69.588346][ T5329] hci_le_meta_evt+0x357/0x5e0 [ 69.588369][ T5329] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 69.588396][ T5329] hci_event_packet+0x682/0x11c0 [ 69.588420][ T5329] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 69.588447][ T5329] ? __pfx_hci_event_packet+0x10/0x10 [ 69.588473][ T5329] ? kcov_remote_start+0x3c9/0x6d0 [ 69.588497][ T5329] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.588531][ T5329] hci_rx_work+0x2c5/0x16b0 [ 69.588559][ T5329] ? rcu_is_watching+0x12/0xc0 [ 69.588592][ T5329] process_one_work+0x9cc/0x1b70 [ 69.588629][ T5329] ? __pfx_process_one_work+0x10/0x10 [ 69.588662][ T5329] ? assign_work+0x1a0/0x250 [ 69.588686][ T5329] worker_thread+0x6c8/0xf10 [ 69.588724][ T5329] ? __pfx_worker_thread+0x10/0x10 [ 69.588748][ T5329] kthread+0x3c2/0x780 [ 69.588771][ T5329] ? __pfx_kthread+0x10/0x10 [ 69.588794][ T5329] ? rcu_is_watching+0x12/0xc0 [ 69.588822][ T5329] ? __pfx_kthread+0x10/0x10 [ 69.588845][ T5329] ret_from_fork+0x56a/0x730 [ 69.588865][ T5329] ? __pfx_kthread+0x10/0x10 [ 69.588887][ T5329] ret_from_fork_asm+0x1a/0x30 [ 69.588937][ T5329] [ 69.591613][ T6168] SELinux: failed to load policy [ 69.593967][ T5329] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 69.688260][ T5329] Bluetooth: hci3: failed to register connection device [ 69.775590][ T6183] overlayfs: failed to resolve './file0:verity=off': -2 [ 69.781559][ T6183] ceph: Unknown parameter 'acl>µ P€¢h3̣:Îç~ä#Aøu-W†“\' [ 69.808961][ T6186] xt_policy: neither incoming nor outgoing policy selected [ 69.854983][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 69.885476][ T6195] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 69.892487][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'. [ 69.933647][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'. [ 69.957335][ T6201] netlink: 'syz.3.41': attribute type 10 has an invalid length. [ 69.960222][ T6201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.41'. [ 69.963075][ T6201] dummy0: entered promiscuous mode [ 69.963888][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 69.965811][ T6201] bridge0: port 3(dummy0) entered blocking state [ 69.968823][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 69.972230][ T6201] bridge0: port 3(dummy0) entered disabled state [ 69.976037][ T6201] dummy0: entered allmulticast mode [ 69.979181][ T6201] bridge0: port 3(dummy0) entered blocking state [ 69.981369][ T6201] bridge0: port 3(dummy0) entered forwarding state [ 69.987220][ T6201] binder: BC_ATTEMPT_ACQUIRE not supported [ 69.990684][ T6201] binder: 6200:6201 ioctl c0306201 200000000300 returned -22 [ 69.995539][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.998831][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.001652][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.004815][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.061487][ T6212] capability: warning: `syz.1.45' uses deprecated v2 capabilities in a way that may be insecure [ 70.307315][ T6232] netlink: 32 bytes leftover after parsing attributes in process `syz.3.51'. [ 70.338326][ T6232] Bluetooth: MGMT ver 1.23 [ 70.339839][ T6232] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 70.376993][ T6239] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.53'. [ 70.423806][ T6243] process 'syz.0.54' launched './file0' with NULL argv: empty string added [ 70.475622][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 70.479644][ T6248] veth1_to_hsr: entered allmulticast mode [ 70.484681][ T6248] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.525238][ T6250] tipc: Started in network mode [ 70.528071][ T6250] tipc: Node identity ac14140f, cluster identity 4711 [ 70.531009][ T6250] tipc: New replicast peer: 255.255.255.255 [ 70.533230][ T6250] tipc: Enabled bearer , priority 10 [ 70.535728][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 70.598158][ T6257] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 70.617618][ T6259] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 70.630979][ T6259] fuseblk: Unknown parameter 'r0' [ 70.658305][ T6260] loop6: detected capacity change from 0 to 2560 [ 70.661685][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.664374][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.667499][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.672363][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.676078][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.680012][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.683413][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.686720][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.690796][ T6260] ldm_validate_partition_table(): Disk read failed. [ 70.694354][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.698739][ T6260] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.702364][ T6260] Dev loop6: unable to read RDB block 0 [ 70.704985][ T6260] loop6: unable to read partition table [ 70.708338][ T6260] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 70.803394][ T6269] 0ªX¹¦À: renamed from caif0 [ 70.807560][ T6269] 0ªX¹¦À: entered allmulticast mode [ 70.809549][ T6269] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 70.957746][ T6275] uprobe: syz.2.67:6275 failed to unregister, leaking uprobe [ 71.066174][ T6280] netlink: 'syz.1.68': attribute type 5 has an invalid length. [ 71.349177][ T5987] Bluetooth: hci0: command tx timeout [ 71.349287][ T5329] Bluetooth: hci3: command tx timeout [ 71.351943][ T5985] Bluetooth: hci1: command tx timeout [ 71.428106][ T5985] Bluetooth: hci2: command tx timeout [ 71.438519][ T70] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 71.528907][ T6121] tipc: Node number set to 2886997007 [ 71.599636][ T70] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 71.603311][ T70] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 71.607357][ T70] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.612199][ T70] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.615321][ T70] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.618063][ T53] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.618499][ T70] usb 6-1: Product: syz [ 71.622286][ T70] usb 6-1: Manufacturer: syz [ 71.624065][ T70] usb 6-1: SerialNumber: syz [ 71.627810][ T70] usb 6-1: config 0 descriptor?? [ 71.636988][ T70] hub 6-1:0.0: bad descriptor, ignoring hub [ 71.639712][ T70] hub 6-1:0.0: probe with driver hub failed with error -5 [ 71.644169][ T70] usb 6-1: selecting invalid altsetting 0 [ 71.663465][ T6301] vlan2: entered promiscuous mode [ 71.665693][ T6301] bridge0: entered promiscuous mode [ 71.768063][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 71.772756][ T53] usb 7-1: config 1 has an invalid interface number: 10 but max is 0 [ 71.775563][ T53] usb 7-1: config 1 has no interface number 0 [ 71.777847][ T53] usb 7-1: config 1 interface 10 altsetting 218 bulk endpoint 0xD has invalid maxpacket 1023 [ 71.782280][ T53] usb 7-1: config 1 interface 10 altsetting 218 bulk endpoint 0x6 has invalid maxpacket 64 [ 71.787128][ T53] usb 7-1: config 1 interface 10 altsetting 218 has a duplicate endpoint with address 0x6, skipping [ 71.791655][ T53] usb 7-1: config 1 interface 10 has no altsetting 0 [ 71.797238][ T53] usb 7-1: New USB device found, idVendor=12d1, idProduct=b7b0, bcdDevice=30.dd [ 71.800960][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.803823][ T53] usb 7-1: Product: ᇮ惡譄䙩陥몠떤匆ਛ稲肱ë‹èˆ·å²¤æ£†ë‹ï¼ƒî£–É ă™̃·ă°³æ‘¶äŒ•â¥ ă…âŒ́½™æ˜€å¿î¥¹éŸ™ê¶’çê½­ïµ6茌ᣱ́®¢î“å„鴥ቧï¹ä»ë©’ïˆà¶Œï­¾ï«£ä½æ­µï¶æ… ë—·æ­«́´­ä¦âœ„æ‚á˜âƒà¼…́´¢î‹±æ¨†ç¤¿åª²ă½‹àº¬ê¼¨ă—¿è©³ë»¬â ºă¼Ưæ’ࡢ幣沢诿́‰¢î¼ªâ¶Ÿë˜—á—§æ´²ă€ [ 71.813300][ T53] usb 7-1: Manufacturer: ĐŒ [ 71.815609][ T53] usb 7-1: SerialNumber: è‘氖æ–冈䯮䄀́…ƒè‹Ÿæ»¹é²‡è˜â ”ͳ爈ä³ä£†à°¡æ¶¼è«¦ê’µæ›ë²¥î¯‡è°”ਃ֛Ⴟᬶ⼄́¿Œ́Ÿ¶æ®“妵ï›à¿œá⻸ëæ«ÛœƯྦ熀ᄇ⻦姂䲸æ¢ë¸°ä²«î³˜ç²¹æ»®ê™å é§¹æ°é é¥”ä⹅먮ᓸíœåŒ¯ă‚攷墪 [ 71.835807][ T6292] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.843537][ T6292] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.846719][ T6292] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.943556][ T6310] netlink: 'syz.3.79': attribute type 13 has an invalid length. [ 71.949255][ T6311] netlink: 'syz.3.79': attribute type 13 has an invalid length. [ 72.049080][ T6290] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 72.056430][ T53] option 7-1:1.10: GSM modem (1-port) converter detected [ 72.065232][ T53] usb 7-1: USB disconnect, device number 2 [ 72.070259][ T53] option 7-1:1.10: device disconnected [ 72.201502][ T6290] usb 6-1: device firmware changed [ 72.204528][ T6082] usb 6-1: USB disconnect, device number 3 [ 72.348114][ T6082] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.499652][ T6082] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 72.503147][ T6082] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 72.507302][ T6082] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.512868][ T6082] usb 6-1: string descriptor 0 read error: -22 [ 72.515687][ T6082] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.519977][ T6082] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.526646][ T6082] usb 6-1: config 0 descriptor?? [ 72.531219][ T6082] hub 6-1:0.0: bad descriptor, ignoring hub [ 72.533716][ T6082] hub 6-1:0.0: probe with driver hub failed with error -5 [ 72.539692][ T6082] usb 6-1: selecting invalid altsetting 0 [ 72.645957][ T6321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.766866][ T6335] syz.0.86 (6335): attempted to duplicate a private mapping with mremap. This is not supported. [ 72.772537][ T6334] ======================================================= [ 72.772537][ T6334] WARNING: The mand mount option has been deprecated and [ 72.772537][ T6334] and is ignored by this kernel. Remove the mand [ 72.772537][ T6334] option from the mount to silence this warning. [ 72.772537][ T6334] ======================================================= [ 72.785458][ T6334] FAT-fs (nullb0): bogus number of reserved sectors [ 72.788441][ T6334] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 72.839169][ T6082] usb 6-1: USB disconnect, device number 4 [ 72.853769][ T6340] 9pnet_fd: Insufficient options for proto=fd [ 72.932258][ T6349] loop7: detected capacity change from 0 to 7 [ 72.972673][ T6349] Dev loop7: unable to read RDB block 7 [ 72.975112][ T6349] loop7: unable to read partition table [ 72.977525][ T6349] loop7: partition table beyond EOD, truncated [ 72.980084][ T6349] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾Cêj̀–ă¢P=Ă½?ă}X‹ºĐ œëÜ%ơ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkƯ) failed (rc=-5) [ 72.984019][ T6354] tipc: Started in network mode [ 72.987454][ T6354] tipc: Node identity ac14140f, cluster identity 4711 [ 72.990726][ T6354] tipc: New replicast peer: 255.255.255.255 [ 72.993918][ T6354] tipc: Enabled bearer , priority 10 [ 73.155576][ T6366] overlay: ./file0 is not a directory [ 73.182995][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 73.183011][ T40] audit: type=1400 audit(1758063757.519:263): avc: denied { read } for pid=6373 comm="syz.3.99" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.188320][ T6375] syzkaller0: entered promiscuous mode [ 73.193530][ T40] audit: type=1400 audit(1758063757.519:264): avc: denied { open } for pid=6373 comm="syz.3.99" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.198243][ T6375] syzkaller0: entered allmulticast mode [ 73.279181][ T40] audit: type=1400 audit(1758063757.619:265): avc: denied { ioctl } for pid=6377 comm="syz.0.100" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 73.364874][ T40] audit: type=1400 audit(1758063757.699:266): avc: denied { append } for pid=6384 comm="syz.1.102" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.370382][ T6387] nbd: must specify at least one socket [ 73.527502][ T40] audit: type=1400 audit(1758063757.859:267): avc: denied { setattr } for pid=6390 comm="syz.3.104" name="" dev="pipefs" ino=3978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 73.575966][ T5985] Bluetooth: to_multiplier 54284 > 3200 [ 73.581318][ T6401] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 73.590631][ T6400] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 73.596964][ T6400] overlayfs: overlapping lowerdir path [ 73.625595][ T40] audit: type=1400 audit(1758063757.959:268): avc: denied { connect } for pid=6404 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.636707][ T40] audit: type=1400 audit(1758063757.959:269): avc: denied { write } for pid=6404 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.645197][ T40] audit: type=1400 audit(1758063757.959:270): avc: denied { read } for pid=6404 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.686565][ T6410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.689312][ T6410] IPv6: NLM_F_CREATE should be set when creating new route [ 73.691824][ T6410] IPv6: NLM_F_CREATE should be set when creating new route [ 73.725608][ T40] audit: type=1400 audit(1758063758.059:271): avc: denied { setopt } for pid=6414 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.733828][ T6415] tty tty1: ldisc open failed (-12), clearing slot 0 [ 73.736068][ T40] audit: type=1400 audit(1758063758.059:272): avc: denied { setopt } for pid=6414 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.826532][ T6429] overlayfs: failed to set uuid (22/file0, err=-1); falling back to uuid=null. [ 73.832157][ T6429] overlayfs: failed to verify upper root origin [ 73.839679][ T6434] kAFS: No cell specified [ 73.842717][ T6434] xt_policy: neither incoming nor outgoing policy selected [ 73.856469][ T6434] binder: 6433:6434 ioctl c0306201 200000000540 returned -22 [ 74.068150][ T6060] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 74.108082][ T53] tipc: Node number set to 2886997007 [ 74.198131][ T6060] usb 6-1: device descriptor read/64, error -71 [ 74.458309][ T6060] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 74.598124][ T6060] usb 6-1: device descriptor read/64, error -71 [ 74.638938][ T6472] can0: slcan on ttyS3. [ 74.700090][ T6471] can0 (unregistered): slcan off ttyS3. [ 74.708291][ T6060] usb usb6-port1: attempt power cycle [ 75.058400][ T6060] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 75.078643][ T6060] usb 6-1: device descriptor read/8, error -71 [ 75.328046][ T6060] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 75.349085][ T6060] usb 6-1: device descriptor read/8, error -71 [ 75.463509][ T6060] usb usb6-port1: unable to enumerate USB device [ 75.588229][ T5985] Bluetooth: hci1: command tx timeout [ 76.426967][ T6525] netlink: 'syz.3.141': attribute type 5 has an invalid length. [ 76.472977][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.475678][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.599831][ T6121] IPVS: starting estimator thread 0... [ 76.688184][ T6547] IPVS: using max 44 ests per chain, 105600 per kthread [ 76.964964][ T6564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6564 comm=syz.1.155 [ 77.055413][ T6568] netlink: 'syz.2.156': attribute type 7 has an invalid length. [ 77.059382][ T6568] __nla_validate_parse: 9 callbacks suppressed [ 77.059397][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 77.090539][ T6568] bridge1: port 1(bond1) entered blocking state [ 77.093664][ T6568] bridge1: port 1(bond1) entered disabled state [ 77.096854][ T6568] bond1: entered allmulticast mode [ 77.131306][ T6573] Bluetooth: MGMT ver 1.23 [ 77.134686][ T6573] FAT-fs (nullb0): bogus number of reserved sectors [ 77.137085][ T6573] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 77.166633][ T5985] Bluetooth: Wrong link type (-71) [ 77.170621][ T5985] Bluetooth: Wrong link type (-71) [ 77.173234][ T5985] Bluetooth: Wrong link type (-71) [ 77.175776][ T5985] Bluetooth: Wrong link type (-71) [ 77.178297][ T5985] Bluetooth: Wrong link type (-71) [ 77.180559][ T5985] Bluetooth: Wrong link type (-71) [ 77.182723][ T5985] Bluetooth: Wrong link type (-71) [ 77.184968][ T5985] Bluetooth: Wrong link type (-71) [ 77.187128][ T5985] Bluetooth: Wrong link type (-71) [ 77.190716][ T5985] Bluetooth: Wrong link type (-71) [ 77.193050][ T5985] Bluetooth: Wrong link type (-71) [ 77.195393][ T5985] Bluetooth: Wrong link type (-71) [ 77.198072][ T5985] Bluetooth: Wrong link type (-71) [ 77.200346][ T5985] Bluetooth: Wrong link type (-71) [ 77.203042][ T5985] Bluetooth: Wrong link type (-71) [ 77.205639][ T5985] Bluetooth: Wrong link type (-71) [ 77.209292][ T5985] Bluetooth: Wrong link type (-71) [ 77.211900][ T5985] Bluetooth: Wrong link type (-71) [ 77.214578][ T5985] Bluetooth: Wrong link type (-71) [ 77.216540][ T5985] Bluetooth: Wrong link type (-71) [ 77.218716][ T5985] Bluetooth: Wrong link type (-71) [ 77.220762][ T5985] Bluetooth: Wrong link type (-71) [ 77.222720][ T5985] Bluetooth: Wrong link type (-71) [ 77.224557][ T5985] Bluetooth: Wrong link type (-71) [ 77.226371][ T5985] Bluetooth: Wrong link type (-71) [ 77.228508][ T5985] Bluetooth: Wrong link type (-71) [ 77.231326][ T5985] Bluetooth: Wrong link type (-71) [ 77.233588][ T5985] Bluetooth: Wrong link type (-71) [ 77.236043][ T5985] Bluetooth: Wrong link type (-71) [ 77.238704][ T5985] Bluetooth: Wrong link type (-71) [ 77.241154][ T5985] Bluetooth: Wrong link type (-71) [ 77.243486][ T5985] Bluetooth: Wrong link type (-71) [ 77.245825][ T5985] Bluetooth: Wrong link type (-71) [ 77.247909][ T5985] Bluetooth: Wrong link type (-71) [ 77.250701][ T5985] Bluetooth: Wrong link type (-71) [ 77.252727][ T5985] Bluetooth: Wrong link type (-71) [ 77.254671][ T5985] Bluetooth: Wrong link type (-71) [ 77.256395][ T5985] Bluetooth: Wrong link type (-71) [ 77.258442][ T5985] Bluetooth: Wrong link type (-71) [ 77.260702][ T5985] Bluetooth: Wrong link type (-71) [ 77.262988][ T5985] Bluetooth: Wrong link type (-71) [ 77.264738][ T5985] Bluetooth: Wrong link type (-71) [ 77.266776][ T5985] Bluetooth: Wrong link type (-71) [ 77.269321][ T5985] Bluetooth: Wrong link type (-71) [ 77.272973][ T5985] Bluetooth: Wrong link type (-71) [ 77.276682][ T5985] Bluetooth: Wrong link type (-71) [ 77.280437][ T5985] Bluetooth: Wrong link type (-71) [ 77.283340][ T5985] Bluetooth: Wrong link type (-71) [ 77.285705][ T5985] Bluetooth: Wrong link type (-71) [ 77.287192][ T6583] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.288138][ T5985] Bluetooth: Wrong link type (-71) [ 77.294938][ T5985] Bluetooth: Wrong link type (-71) [ 77.295500][ T6586] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 77.297006][ T5985] Bluetooth: Wrong link type (-71) [ 77.302402][ T5985] Bluetooth: Wrong link type (-71) [ 77.304708][ T5985] Bluetooth: Wrong link type (-71) [ 77.307114][ T5985] Bluetooth: Wrong link type (-71) [ 77.310141][ T5985] Bluetooth: Wrong link type (-71) [ 77.313096][ T5985] Bluetooth: Wrong link type (-71) [ 77.315605][ T5985] Bluetooth: Wrong link type (-71) [ 77.318060][ T5985] Bluetooth: Wrong link type (-71) [ 77.320382][ T5985] Bluetooth: Wrong link type (-71) [ 77.322686][ T5985] Bluetooth: Wrong link type (-71) [ 77.325905][ T5985] Bluetooth: Wrong link type (-71) [ 77.328324][ T5985] Bluetooth: Wrong link type (-71) [ 77.332624][ T5985] Bluetooth: Wrong link type (-71) [ 77.334739][ T5985] Bluetooth: Wrong link type (-71) [ 77.362192][ T6596] netlink: 'syz.3.165': attribute type 5 has an invalid length. [ 77.785208][ T6630] netlink: 56 bytes leftover after parsing attributes in process `syz.1.172'. [ 77.789514][ T6630] xt_policy: neither incoming nor outgoing policy selected [ 77.853493][ T6644] overlayfs: overlapping lowerdir path [ 77.857780][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 77.864627][ T6644] macsec1: entered promiscuous mode [ 77.941633][ T6654] netlink: 596 bytes leftover after parsing attributes in process `syz.0.178'. [ 77.946537][ T5378] pmem0: [POWERTEC] [ 78.050197][ T6646] warning: `syz.2.175' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.135991][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 78.141934][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.183'. [ 78.145891][ T6672] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 78.157146][ T6672] cramfs: wrong magic [ 78.192157][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 78.192168][ T40] audit: type=1400 audit(1758063762.529:318): avc: denied { create } for pid=6675 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.197642][ T6678] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 78.202365][ T40] audit: type=1400 audit(1758063762.529:319): avc: denied { write } for pid=6675 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.202483][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 78.204360][ T6678] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 78.211381][ T40] audit: type=1400 audit(1758063762.529:320): avc: denied { ioctl } for pid=6675 comm="syz.0.185" path="socket:[12592]" dev="sockfs" ino=12592 ioctlcmd=0x500b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.216956][ T6678] vhci_hcd vhci_hcd.0: Device attached [ 78.217274][ T40] audit: type=1400 audit(1758063762.529:321): avc: denied { create } for pid=6676 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.231750][ T6679] vhci_hcd: connection closed [ 78.237042][ T40] audit: type=1400 audit(1758063762.529:322): avc: denied { bind } for pid=6676 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.242060][ T46] vhci_hcd: stop threads [ 78.248752][ T46] vhci_hcd: release socket [ 78.250336][ T46] vhci_hcd: disconnect device [ 78.254047][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 78.308547][ T40] audit: type=1400 audit(1758063762.649:323): avc: denied { write } for pid=6676 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.462259][ T6689] syz.2.189 uses obsolete (PF_INET,SOCK_PACKET) [ 78.465774][ T40] audit: type=1400 audit(1758063762.799:324): avc: denied { getopt } for pid=6688 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.602439][ T40] audit: type=1400 audit(1758063762.939:325): avc: denied { append } for pid=6697 comm="syz.2.191" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.602599][ T6698] random: crng reseeded on system resumption [ 78.612608][ T40] audit: type=1400 audit(1758063762.939:326): avc: denied { open } for pid=6697 comm="syz.2.191" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.630916][ T40] audit: type=1400 audit(1758063762.969:327): avc: denied { ioctl } for pid=6697 comm="syz.2.191" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.631135][ T6698] Restarting kernel threads ... [ 78.644569][ T6698] Done restarting kernel threads. [ 78.649026][ T6060] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.830587][ T6060] usb 8-1: Using ep0 maxpacket: 8 [ 78.835998][ T6060] usb 8-1: config 0 interface 0 has no altsetting 0 [ 78.839000][ T6060] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 78.842854][ T6060] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.848567][ T6060] usb 8-1: config 0 descriptor?? [ 79.033071][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 79.117197][ T6060] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 79.120331][ T6060] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 79.122655][ T6060] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 79.125003][ T6060] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 79.127709][ T6060] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 79.136050][ T6060] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 79.192439][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 79.314259][ T6686] i2c i2c-2: unsupported multi-msg i2c transaction [ 79.320410][ T6687] i2c i2c-2: unsupported multi-msg i2c transaction [ 79.402054][ T6060] usb 8-1: USB disconnect, device number 3 [ 79.457773][ T6752] tmpfs: Bad value for 'mpol' [ 79.467629][ T6752] ipvlan2: entered promiscuous mode [ 79.473397][ T6752] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 79.477340][ T6752] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 79.694085][ T6763] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 79.698803][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.702672][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.965658][ T6784] NILFS (nbd0): device size too small [ 79.998161][ T6785] IPVS: set_ctl: invalid protocol: 0 172.20.20.34:20004 [ 80.029242][ T6785] trusted_key: encrypted_key: master key parameter 'ecr…ptfs' is invalid [ 80.118957][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 80.258433][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 80.279777][ T53] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.285435][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 80.293237][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.298648][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.304340][ T53] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.315046][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.326496][ T53] usb 6-1: config 0 descriptor?? [ 80.337056][ T6778] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.343640][ T6790] tipc: Enabled bearer , priority 0 [ 80.346752][ T6790] syzkaller0: MTU too low for tipc bearer [ 80.349193][ T6790] tipc: Disabling bearer [ 80.390109][ T29] usb 7-1: device descriptor read/64, error -71 [ 80.658412][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 80.690992][ T6801] netem: change failed [ 80.748735][ T53] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 80.763331][ T53] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 80.798197][ T29] usb 7-1: device descriptor read/64, error -71 [ 80.815250][ T6802] sp0: Synchronizing with TNC [ 80.908907][ T29] usb usb7-port1: attempt power cycle [ 81.039087][ T53] usb 6-1: USB disconnect, device number 9 [ 81.240464][ T6807] /dev/sr0: Can't open blockdev [ 81.258062][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 81.279304][ T29] usb 7-1: device descriptor read/8, error -71 [ 81.284090][ T6810] netlink: 'syz.3.228': attribute type 13 has an invalid length. [ 81.393846][ T6813] fuse: Invalid rootmode [ 81.528575][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 81.550611][ T29] usb 7-1: device descriptor read/8, error -71 [ 81.673524][ T29] usb usb7-port1: unable to enumerate USB device [ 81.885001][ T6849] overlayfs: failed to resolve './file0': -2 [ 81.901443][ T6848] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 81.944392][ T6851] openvswitch: netlink: Flow key attr not present in new flow. [ 82.095901][ T6859] syzkaller0: entered promiscuous mode [ 82.099520][ T6859] syzkaller0: entered allmulticast mode [ 82.107170][ T6858] tipc: Started in network mode [ 82.110675][ T6858] tipc: Node identity 26fcaf45c3a2, cluster identity 4711 [ 82.113981][ T6858] tipc: Enabled bearer , priority 0 [ 82.134762][ T6858] tipc: Resetting bearer [ 82.147697][ T6858] tipc: Disabling bearer [ 82.409604][ T6869] bond0: Caught tx_queue_len zero misconfig [ 82.726620][ T6883] __nla_validate_parse: 6 callbacks suppressed [ 82.726635][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 82.727251][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 82.792408][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 82.800735][ T6883] block nbd1: Attempted send on invalid socket [ 82.803220][ T6883] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.807177][ T6883] block nbd1: Attempted send on invalid socket [ 82.810166][ T6883] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.814643][ T6883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 82.820611][ T6883] block nbd1: Attempted send on invalid socket [ 82.823250][ T6883] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.826366][ T6883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 82.831124][ T6883] block nbd1: Attempted send on invalid socket [ 82.833307][ T6883] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.837006][ T6883] block nbd1: Attempted send on invalid socket [ 82.839411][ T6883] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.843118][ T6883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 82.846748][ T6883] block nbd1: Attempted send on invalid socket [ 82.849106][ T6883] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.852611][ T6883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 82.856449][ T6883] block nbd1: Attempted send on invalid socket [ 82.858904][ T6883] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.862571][ T6883] block nbd1: Attempted send on invalid socket [ 82.865075][ T6883] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.869328][ T6883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 82.872842][ T6883] block nbd1: Attempted send on invalid socket [ 82.875018][ T6883] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.878713][ T6883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 82.882327][ T6883] block nbd1: Attempted send on invalid socket [ 82.884646][ T6883] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.888211][ T6883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 82.891838][ T6883] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 82.895289][ T6883] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 83.119070][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 83.122308][ T6905] netlink: 1 bytes leftover after parsing attributes in process `syz.1.258'. [ 83.200123][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 83.200138][ T40] audit: type=1400 audit(1758063767.539:372): avc: denied { read } for pid=6910 comm="syz.1.260" lport=50071 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.272486][ T40] audit: type=1400 audit(1758063767.609:373): avc: denied { getopt } for pid=6910 comm="syz.1.260" lport=50071 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.301115][ T6912] tipc: Enabled bearer , priority 0 [ 83.304972][ T40] audit: type=1400 audit(1758063767.639:374): avc: denied { ioctl } for pid=6910 comm="syz.1.260" path="socket:[15018]" dev="sockfs" ino=15018 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.305786][ T6912] nilfs2: Unknown parameter 'barrier´´s₫ɈÊ' [ 83.315212][ T40] audit: type=1400 audit(1758063767.639:375): avc: denied { write } for pid=6910 comm="syz.1.260" lport=50071 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.362129][ T1146] tipc: Resetting bearer [ 83.482640][ T6920] FAULT_INJECTION: forcing a failure. [ 83.482640][ T6920] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.490128][ T6920] CPU: 0 UID: 0 PID: 6920 Comm: syz.0.263 Not tainted syzkaller #0 PREEMPT(full) [ 83.490154][ T6920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.490164][ T6920] Call Trace: [ 83.490170][ T6920] [ 83.490178][ T6920] dump_stack_lvl+0x16c/0x1f0 [ 83.490236][ T6920] should_fail_ex+0x512/0x640 [ 83.490270][ T6920] _copy_from_user+0x2e/0xd0 [ 83.490296][ T6920] copy_msghdr_from_user+0x98/0x160 [ 83.490319][ T6920] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 83.490353][ T6920] ___sys_sendmsg+0xfe/0x1d0 [ 83.490376][ T6920] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.490428][ T6920] __sys_sendmsg+0x16d/0x220 [ 83.490451][ T6920] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.490482][ T6920] ? fput+0x9b/0xd0 [ 83.490509][ T6920] do_syscall_64+0xcd/0x4e0 [ 83.490541][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.490559][ T6920] RIP: 0033:0x7f7e0518eba9 [ 83.490573][ T6920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.490590][ T6920] RSP: 002b:00007f7e05fc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.490608][ T6920] RAX: ffffffffffffffda RBX: 00007f7e053d5fa0 RCX: 00007f7e0518eba9 [ 83.490620][ T6920] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 83.490631][ T6920] RBP: 00007f7e05fc3090 R08: 0000000000000000 R09: 0000000000000000 [ 83.490641][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.490652][ T6920] R13: 00007f7e053d6038 R14: 00007f7e053d5fa0 R15: 00007ffc5828cd48 [ 83.490675][ T6920] [ 83.567561][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.605963][ T40] audit: type=1400 audit(1758063767.939:376): avc: denied { ioctl } for pid=6932 comm="syz.2.268" path="socket:[15393]" dev="sockfs" ino=15393 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.617304][ T40] audit: type=1400 audit(1758063767.949:377): avc: denied { getopt } for pid=6932 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.625891][ T40] audit: type=1400 audit(1758063767.959:378): avc: denied { map } for pid=6932 comm="syz.2.268" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 83.634851][ T40] audit: type=1400 audit(1758063767.959:379): avc: denied { execute } for pid=6932 comm="syz.2.268" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 83.655989][ T40] audit: type=1400 audit(1758063767.989:380): avc: denied { relabelfrom } for pid=6939 comm="syz.0.270" name="" dev="pipefs" ino=14095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 83.704826][ T6951] FAULT_INJECTION: forcing a failure. [ 83.704826][ T6951] name failslab, interval 1, probability 0, space 0, times 1 [ 83.709315][ T6951] CPU: 2 UID: 0 PID: 6951 Comm: syz.2.274 Not tainted syzkaller #0 PREEMPT(full) [ 83.709330][ T6951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.709337][ T6951] Call Trace: [ 83.709340][ T6951] [ 83.709344][ T6951] dump_stack_lvl+0x16c/0x1f0 [ 83.709362][ T6951] should_fail_ex+0x512/0x640 [ 83.709400][ T6951] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 83.709419][ T6951] should_failslab+0xc2/0x120 [ 83.709437][ T6951] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 83.709448][ T6951] ? __alloc_skb+0x2b2/0x380 [ 83.709461][ T6951] ? avc_has_perm+0x144/0x1f0 [ 83.709474][ T6951] __alloc_skb+0x2b2/0x380 [ 83.709486][ T6951] ? __pfx___alloc_skb+0x10/0x10 [ 83.709497][ T6951] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 83.709512][ T6951] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 83.709531][ T6951] netlink_alloc_large_skb+0x69/0x130 [ 83.709547][ T6951] netlink_sendmsg+0x6a1/0xdd0 [ 83.709563][ T6951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.709583][ T6951] ____sys_sendmsg+0xa95/0xc70 [ 83.709602][ T6951] ? copy_msghdr_from_user+0x10a/0x160 [ 83.709621][ T6951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.709651][ T6951] ___sys_sendmsg+0x134/0x1d0 [ 83.709671][ T6951] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.709710][ T6951] __sys_sendmsg+0x16d/0x220 [ 83.709729][ T6951] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.709762][ T6951] do_syscall_64+0xcd/0x4e0 [ 83.709782][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.709797][ T6951] RIP: 0033:0x7fb5dd58eba9 [ 83.709809][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.709824][ T6951] RSP: 002b:00007fb5de4e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.709840][ T6951] RAX: ffffffffffffffda RBX: 00007fb5dd7d5fa0 RCX: 00007fb5dd58eba9 [ 83.709850][ T6951] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 83.709860][ T6951] RBP: 00007fb5de4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 83.709866][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.709872][ T6951] R13: 00007fb5dd7d6038 R14: 00007fb5dd7d5fa0 R15: 00007fffd33f4468 [ 83.709885][ T6951] [ 83.726895][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 83.747660][ T40] audit: type=1400 audit(1758063768.079:381): avc: denied { append } for pid=6955 comm="syz.2.277" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.749266][ T6956] program syz.2.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.031259][ T6910] tipc: Resetting bearer [ 84.849914][ T6910] tipc: Disabling bearer [ 84.887824][ T6997] netlink: 100 bytes leftover after parsing attributes in process `syz.2.288'. [ 84.908851][ T6997] binder: BINDER_SET_CONTEXT_MGR already set [ 84.913693][ T6997] binder: 6996:6997 ioctl 4018620d 200000000040 returned -16 [ 84.916910][ T7005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.291'. [ 84.930920][ T7005] netdevsim netdevsim0: Direct firmware load for . [ 84.930920][ T7005] failed with error -2 [ 84.934688][ T7005] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 84.934688][ T7005] [ 84.982420][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 85.010159][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 85.065398][ T7026] FAULT_INJECTION: forcing a failure. [ 85.065398][ T7026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.070973][ T7026] CPU: 0 UID: 0 PID: 7026 Comm: syz.2.298 Not tainted syzkaller #0 PREEMPT(full) [ 85.070995][ T7026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.071004][ T7026] Call Trace: [ 85.071016][ T7026] [ 85.071022][ T7026] dump_stack_lvl+0x16c/0x1f0 [ 85.071076][ T7026] should_fail_ex+0x512/0x640 [ 85.071109][ T7026] _copy_from_iter+0x29f/0x1720 [ 85.071136][ T7026] ? __alloc_skb+0x200/0x380 [ 85.071156][ T7026] ? __pfx__copy_from_iter+0x10/0x10 [ 85.071176][ T7026] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 85.071214][ T7026] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 85.071245][ T7026] netlink_sendmsg+0x829/0xdd0 [ 85.071271][ T7026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.071301][ T7026] ____sys_sendmsg+0xa95/0xc70 [ 85.071326][ T7026] ? copy_msghdr_from_user+0x10a/0x160 [ 85.071346][ T7026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.071381][ T7026] ___sys_sendmsg+0x134/0x1d0 [ 85.071402][ T7026] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.071450][ T7026] __sys_sendmsg+0x16d/0x220 [ 85.071470][ T7026] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.071505][ T7026] do_syscall_64+0xcd/0x4e0 [ 85.071535][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.071551][ T7026] RIP: 0033:0x7fb5dd58eba9 [ 85.071564][ T7026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.071579][ T7026] RSP: 002b:00007fb5de4e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.071595][ T7026] RAX: ffffffffffffffda RBX: 00007fb5dd7d5fa0 RCX: 00007fb5dd58eba9 [ 85.071605][ T7026] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 85.071615][ T7026] RBP: 00007fb5de4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 85.071624][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.071633][ T7026] R13: 00007fb5dd7d6038 R14: 00007fb5dd7d5fa0 R15: 00007fffd33f4468 [ 85.071654][ T7026] [ 85.145998][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.174485][ T7030] virtio-fs: tag not found [ 85.285964][ T7038] afs: Unknown parameter 'd÷îđ' [ 85.571563][ T7060] FAULT_INJECTION: forcing a failure. [ 85.571563][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 85.576947][ T7060] CPU: 1 UID: 0 PID: 7060 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT(full) [ 85.576971][ T7060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.576981][ T7060] Call Trace: [ 85.576987][ T7060] [ 85.576994][ T7060] dump_stack_lvl+0x16c/0x1f0 [ 85.577048][ T7060] should_fail_ex+0x512/0x640 [ 85.577087][ T7060] should_failslab+0xc2/0x120 [ 85.577108][ T7060] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 85.577127][ T7060] ? skb_clone+0x190/0x3f0 [ 85.577153][ T7060] skb_clone+0x190/0x3f0 [ 85.577175][ T7060] netlink_deliver_tap+0xabd/0xd30 [ 85.577204][ T7060] netlink_unicast+0x64c/0x870 [ 85.577230][ T7060] ? __pfx_netlink_unicast+0x10/0x10 [ 85.577262][ T7060] netlink_sendmsg+0x8d1/0xdd0 [ 85.577289][ T7060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.577321][ T7060] ____sys_sendmsg+0xa95/0xc70 [ 85.577348][ T7060] ? copy_msghdr_from_user+0x10a/0x160 [ 85.577393][ T7060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.577431][ T7060] ___sys_sendmsg+0x134/0x1d0 [ 85.577454][ T7060] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.577507][ T7060] __sys_sendmsg+0x16d/0x220 [ 85.577529][ T7060] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.577561][ T7060] ? fput+0x9b/0xd0 [ 85.577588][ T7060] do_syscall_64+0xcd/0x4e0 [ 85.577619][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.577636][ T7060] RIP: 0033:0x7f20dad8eba9 [ 85.577649][ T7060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.577664][ T7060] RSP: 002b:00007f20dbb6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.577681][ T7060] RAX: ffffffffffffffda RBX: 00007f20dafd5fa0 RCX: 00007f20dad8eba9 [ 85.577694][ T7060] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 85.577704][ T7060] RBP: 00007f20dbb6a090 R08: 0000000000000000 R09: 0000000000000000 [ 85.577715][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.577725][ T7060] R13: 00007f20dafd6038 R14: 00007f20dafd5fa0 R15: 00007fff1f0c86a8 [ 85.577750][ T7060] [ 85.751761][ T7068] netlink: 'syz.1.309': attribute type 11 has an invalid length. [ 86.029786][ T7089] loop5: detected capacity change from 0 to 7 [ 86.035390][ T7089] Dev loop5: unable to read RDB block 7 [ 86.037211][ T7089] loop5: AHDI p1 p2 p3 [ 86.039054][ T7089] loop5: partition table partially beyond EOD, truncated [ 86.042011][ T7089] loop5: p1 start 1601398130 is beyond EOD, truncated [ 86.044661][ T7089] loop5: p2 start 1702059890 is beyond EOD, truncated [ 86.070155][ T7094] program syz.1.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.178228][ T70] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 86.270205][ T7103] FAULT_INJECTION: forcing a failure. [ 86.270205][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 86.275549][ T7103] CPU: 2 UID: 0 PID: 7103 Comm: syz.0.319 Not tainted syzkaller #0 PREEMPT(full) [ 86.275570][ T7103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.275580][ T7103] Call Trace: [ 86.275586][ T7103] [ 86.275592][ T7103] dump_stack_lvl+0x16c/0x1f0 [ 86.275618][ T7103] should_fail_ex+0x512/0x640 [ 86.275638][ T7103] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 86.275658][ T7103] should_failslab+0xc2/0x120 [ 86.275677][ T7103] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 86.275694][ T7103] ? __alloc_skb+0x2b2/0x380 [ 86.275716][ T7103] __alloc_skb+0x2b2/0x380 [ 86.275734][ T7103] ? __pfx___alloc_skb+0x10/0x10 [ 86.275752][ T7103] ? genl_rcv_msg+0x480/0x800 [ 86.275782][ T7103] ? genl_rcv_msg+0x4bb/0x800 [ 86.275811][ T7103] netlink_ack+0x15d/0xb80 [ 86.275839][ T7103] netlink_rcv_skb+0x332/0x420 [ 86.275860][ T7103] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.275885][ T7103] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.275916][ T7103] ? netlink_deliver_tap+0x1ae/0xd30 [ 86.275935][ T7103] ? selinux_netlink_send+0x578/0x830 [ 86.275957][ T7103] ? is_vmalloc_addr+0x86/0xa0 [ 86.275976][ T7103] genl_rcv+0x28/0x40 [ 86.275997][ T7103] netlink_unicast+0x5a7/0x870 [ 86.276021][ T7103] ? __pfx_netlink_unicast+0x10/0x10 [ 86.276052][ T7103] netlink_sendmsg+0x8d1/0xdd0 [ 86.276077][ T7103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.276108][ T7103] ____sys_sendmsg+0xa95/0xc70 [ 86.276133][ T7103] ? copy_msghdr_from_user+0x10a/0x160 [ 86.276153][ T7103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.276188][ T7103] ___sys_sendmsg+0x134/0x1d0 [ 86.276209][ T7103] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.276259][ T7103] __sys_sendmsg+0x16d/0x220 [ 86.276281][ T7103] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.276320][ T7103] do_syscall_64+0xcd/0x4e0 [ 86.276343][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.276360][ T7103] RIP: 0033:0x7f7e0518eba9 [ 86.276374][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.276389][ T7103] RSP: 002b:00007f7e05fc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.276406][ T7103] RAX: ffffffffffffffda RBX: 00007f7e053d5fa0 RCX: 00007f7e0518eba9 [ 86.276417][ T7103] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 86.276427][ T7103] RBP: 00007f7e05fc3090 R08: 0000000000000000 R09: 0000000000000000 [ 86.276436][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.276446][ T7103] R13: 00007f7e053d6038 R14: 00007f7e053d5fa0 R15: 00007ffc5828cd48 [ 86.276469][ T7103] [ 86.376986][ T70] usb 7-1: device descriptor read/64, error -71 [ 86.590613][ T7124] FAT-fs (sr0): bogus number of reserved sectors [ 86.592921][ T7124] FAT-fs (sr0): Can't find a valid FAT filesystem [ 86.601135][ T7119] netlink: 'syz.0.327': attribute type 2 has an invalid length. [ 86.604497][ T7119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.648048][ T70] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 86.687660][ T7128] netlink: 'syz.0.330': attribute type 20 has an invalid length. [ 86.704256][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.704341][ T7128] netlink: 'syz.0.330': attribute type 20 has an invalid length. [ 86.708295][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.714139][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.717872][ T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.724890][ T9] cfg80211: failed to load regulatory.db [ 86.778356][ T70] usb 7-1: device descriptor read/64, error -71 [ 86.898627][ T70] usb usb7-port1: attempt power cycle [ 86.941540][ T7148] nfs: Unknown parameter 'f’.' [ 87.049908][ T7158] FAULT_INJECTION: forcing a failure. [ 87.049908][ T7158] name failslab, interval 1, probability 0, space 0, times 0 [ 87.055153][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.1.340 Not tainted syzkaller #0 PREEMPT(full) [ 87.055174][ T7158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.055184][ T7158] Call Trace: [ 87.055190][ T7158] [ 87.055196][ T7158] dump_stack_lvl+0x16c/0x1f0 [ 87.055251][ T7158] should_fail_ex+0x512/0x640 [ 87.055280][ T7158] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 87.055300][ T7158] should_failslab+0xc2/0x120 [ 87.055318][ T7158] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 87.055335][ T7158] ? __alloc_skb+0x2b2/0x380 [ 87.055357][ T7158] __alloc_skb+0x2b2/0x380 [ 87.055374][ T7158] ? __pfx___alloc_skb+0x10/0x10 [ 87.055391][ T7158] ? genl_rcv_msg+0x480/0x800 [ 87.055413][ T7158] ? genl_rcv_msg+0x4bb/0x800 [ 87.055458][ T7158] netlink_ack+0x15d/0xb80 [ 87.055590][ T7158] netlink_rcv_skb+0x332/0x420 [ 87.055610][ T7158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.055633][ T7158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.055663][ T7158] ? netlink_deliver_tap+0x1ae/0xd30 [ 87.055685][ T7158] genl_rcv+0x28/0x40 [ 87.055705][ T7158] netlink_unicast+0x5a7/0x870 [ 87.055729][ T7158] ? __pfx_netlink_unicast+0x10/0x10 [ 87.055758][ T7158] netlink_sendmsg+0x8d1/0xdd0 [ 87.055783][ T7158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.055812][ T7158] ____sys_sendmsg+0xa95/0xc70 [ 87.055839][ T7158] ? copy_msghdr_from_user+0x10a/0x160 [ 87.055858][ T7158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.055892][ T7158] ___sys_sendmsg+0x134/0x1d0 [ 87.055912][ T7158] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.055960][ T7158] __sys_sendmsg+0x16d/0x220 [ 87.055980][ T7158] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.056020][ T7158] do_syscall_64+0xcd/0x4e0 [ 87.056050][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.056066][ T7158] RIP: 0033:0x7f20dad8eba9 [ 87.056079][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.056093][ T7158] RSP: 002b:00007f20dbb6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.056109][ T7158] RAX: ffffffffffffffda RBX: 00007f20dafd5fa0 RCX: 00007f20dad8eba9 [ 87.056119][ T7158] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 87.056128][ T7158] RBP: 00007f20dbb6a090 R08: 0000000000000000 R09: 0000000000000000 [ 87.056137][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.056146][ T7158] R13: 00007f20dafd6038 R14: 00007f20dafd5fa0 R15: 00007fff1f0c86a8 [ 87.056168][ T7158] [ 87.164028][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.239228][ T70] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 87.240391][ T7178] team_slave_1: Caught tx_queue_len zero misconfig [ 87.259262][ T70] usb 7-1: device descriptor read/8, error -71 [ 87.353240][ T7185] unsupported nla_type 4111 [ 87.360337][ T7185] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 87.367157][ T7185] netlink: 'syz.3.350': attribute type 3 has an invalid length. [ 87.370100][ T7185] NCSI netlink: No device for ifindex 0 [ 87.420115][ T7187] bridge0: entered promiscuous mode [ 87.422315][ T7187] macsec1: entered promiscuous mode [ 87.435457][ T7187] erspan0: entered promiscuous mode [ 87.498471][ T70] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 87.516752][ T7194] trusted_key: encrypted_key: insufficient parameters specified [ 87.530122][ T70] usb 7-1: device descriptor read/8, error -71 [ 87.638396][ T70] usb usb7-port1: unable to enumerate USB device [ 87.912328][ T7207] 9pnet: Could not find request transport: fÿ [ 87.932498][ T7207] 9pnet: Could not find request transport: gd2r`d\o=0x0000000000000005 [ 88.209899][ T7226] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 88.305533][ T7230] __nla_validate_parse: 7 callbacks suppressed [ 88.305552][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.365'. [ 88.312487][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 88.312498][ T40] audit: type=1400 audit(1758063772.649:423): avc: denied { read } for pid=7229 comm="syz.1.365" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.366769][ T40] audit: type=1400 audit(1758063772.699:424): avc: denied { map } for pid=7229 comm="syz.1.365" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 88.444285][ T40] audit: type=1400 audit(1758063772.779:425): avc: denied { mounton } for pid=7234 comm="syz.1.366" path="/proc/303/task" dev="proc" ino=17485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 88.447698][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 88.463477][ T40] audit: type=1400 audit(1758063772.799:426): avc: denied { associate } for pid=7234 comm="syz.1.366" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.464959][ T7235] netlink: 'syz.1.366': attribute type 50 has an invalid length. [ 88.839104][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 88.842437][ T7248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'. [ 88.873677][ T40] audit: type=1400 audit(1758063773.209:427): avc: denied { ioctl } for pid=7249 comm="syz.1.371" path="socket:[18569]" dev="sockfs" ino=18569 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.882494][ T40] audit: type=1400 audit(1758063773.209:428): avc: denied { shutdown } for pid=7249 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.891673][ T40] audit: type=1400 audit(1758063773.209:429): avc: denied { getopt } for pid=7249 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.913260][ T40] audit: type=1400 audit(1758063773.249:430): avc: denied { mounton } for pid=7251 comm="syz.1.372" path="/112/file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 88.922083][ T40] audit: type=1400 audit(1758063773.249:431): avc: denied { write } for pid=7251 comm="syz.1.372" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.930024][ T40] audit: type=1400 audit(1758063773.249:432): avc: denied { write } for pid=7251 comm="syz.1.372" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 88.969057][ T7255] openvswitch: netlink: Key type 16383 is out of range max 32 [ 89.013709][ T7257] FAULT_INJECTION: forcing a failure. [ 89.013709][ T7257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.019430][ T7257] CPU: 3 UID: 0 PID: 7257 Comm: syz.1.373 Not tainted syzkaller #0 PREEMPT(full) [ 89.019452][ T7257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.019462][ T7257] Call Trace: [ 89.019468][ T7257] [ 89.019474][ T7257] dump_stack_lvl+0x16c/0x1f0 [ 89.019500][ T7257] should_fail_ex+0x512/0x640 [ 89.019525][ T7257] _copy_to_user+0x32/0xd0 [ 89.019551][ T7257] simple_read_from_buffer+0xcb/0x170 [ 89.019571][ T7257] proc_fail_nth_read+0x197/0x240 [ 89.019591][ T7257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.019612][ T7257] ? rw_verify_area+0xcf/0x6c0 [ 89.019637][ T7257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.019656][ T7257] vfs_read+0x1e4/0xcf0 [ 89.019676][ T7257] ? __pfx___mutex_lock+0x10/0x10 [ 89.019698][ T7257] ? __pfx_vfs_read+0x10/0x10 [ 89.019721][ T7257] ? __fget_files+0x20e/0x3c0 [ 89.019747][ T7257] ksys_read+0x12a/0x250 [ 89.019763][ T7257] ? __pfx_ksys_read+0x10/0x10 [ 89.019785][ T7257] ? fput+0x9b/0xd0 [ 89.019810][ T7257] do_syscall_64+0xcd/0x4e0 [ 89.019834][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.019850][ T7257] RIP: 0033:0x7f20dad8d5bc [ 89.019864][ T7257] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.019879][ T7257] RSP: 002b:00007f20dbb6a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.019895][ T7257] RAX: ffffffffffffffda RBX: 00007f20dafd5fa0 RCX: 00007f20dad8d5bc [ 89.019906][ T7257] RDX: 000000000000000f RSI: 00007f20dbb6a0a0 RDI: 0000000000000004 [ 89.019915][ T7257] RBP: 00007f20dbb6a090 R08: 0000000000000000 R09: 0000000000000000 [ 89.019924][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.019933][ T7257] R13: 00007f20dafd6038 R14: 00007f20dafd5fa0 R15: 00007fff1f0c86a8 [ 89.019956][ T7257] [ 89.026027][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 89.403973][ T70] IPVS: starting estimator thread 0... [ 89.406721][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 89.504876][ T7278] overlayfs: missing 'lowerdir' [ 89.508450][ T7276] IPVS: using max 44 ests per chain, 105600 per kthread [ 89.513414][ T7278] binder: Bad value for 'max' [ 89.536811][ T5378] pmem0: [POWERTEC] [ 89.668818][ T1125] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 89.672116][ T1125] sr 2:0:0:0: [sr0] tag#21 Sense Key : Illegal Request [current] [ 89.675139][ T1125] sr 2:0:0:0: [sr0] tag#21 Add. Sense: Invalid command operation code [ 89.678880][ T1125] sr 2:0:0:0: [sr0] tag#21 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 89.682411][ T1125] blk_print_req_error: 2 callbacks suppressed [ 89.682423][ T1125] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 89.689533][ T1125] buffer_io_error: 11 callbacks suppressed [ 89.689544][ T1125] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 90.017863][ T7303] selinux_netlink_send: 1 callbacks suppressed [ 90.017880][ T7303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7303 comm=syz.2.390 [ 90.087687][ T7309] SELinux: failed to load policy [ 90.107153][ T7304] team0: Port device team_slave_0 removed [ 90.127589][ T5985] Bluetooth: Unexpected start frame (len 16) [ 90.132481][ T5985] Bluetooth: Unknown LE signaling command 0x85 [ 90.135312][ T5985] Bluetooth: Wrong link type (-22) [ 90.173513][ T7315] loop4: detected capacity change from 0 to 2560 [ 90.182397][ T5971] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.186818][ T5971] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.190891][ T5971] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.194596][ T5971] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.199053][ T5971] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.219957][ T7315] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 90.224693][ T7315] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 90.225446][ T7322] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 90.230208][ T7315] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 90.231993][ T7322] overlayfs: failed to set xattr on upper [ 90.236285][ T7315] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 90.238303][ T7322] overlayfs: ...falling back to redirect_dir=nofollow. [ 90.243926][ T7322] overlayfs: ...falling back to index=off. [ 90.245865][ T7322] overlayfs: ...falling back to uuid=null. [ 90.249022][ T7322] overlayfs: ...falling back to xino=off. [ 90.451447][ T7348] Illegal XDP return value 3146499768 on prog (id 50) dev N/A, expect packet loss! [ 90.486827][ T7350] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 90.552005][ T7354] netlink: 'syz.3.410': attribute type 11 has an invalid length. [ 90.591409][ T7359] netlink: 72 bytes leftover after parsing attributes in process `syz.2.412'. [ 91.264405][ T7373] nbd_handle_cmd: 2 callbacks suppressed [ 91.264418][ T7373] block nbd0: Attempted send on invalid socket [ 91.269536][ T7373] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 91.273726][ T7373] EXT4-fs (nbd0): unable to read superblock [ 91.542824][ T7370] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.587112][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.428'. [ 91.712050][ T7422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.898677][ T6082] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 91.921073][ T70] IPVS: starting estimator thread 0... [ 91.924856][ T7438] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 91.925658][ T7439] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 91.935490][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 92.013044][ T7455] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 92.017945][ T7455] cramfs: wrong magic [ 92.018076][ T7440] IPVS: using max 44 ests per chain, 105600 per kthread [ 92.079455][ T6082] usb 7-1: config index 0 descriptor too short (expected 12288, got 45) [ 92.082317][ T6082] usb 7-1: config 48 has too many interfaces: 120, using maximum allowed: 32 [ 92.085278][ T6082] usb 7-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 92.089680][ T6082] usb 7-1: config 48 has 0 interfaces, different from the descriptor's value: 120 [ 92.095224][ T6082] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 92.098276][ T6082] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.100909][ T6082] usb 7-1: Product: syz [ 92.102230][ T6082] usb 7-1: Manufacturer: syz [ 92.103710][ T6082] usb 7-1: SerialNumber: syz [ 92.309205][ T7412] mmap: syz.2.430 (7412) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.316625][ T6082] usb 7-1: USB disconnect, device number 11 [ 92.319897][ T5971] udevd[5971]: setting mode of /dev/bus/usb/007/011 to 020664 failed: No such file or directory [ 92.324891][ T5971] udevd[5971]: setting owner of /dev/bus/usb/007/011 to uid=0, gid=0 failed: No such file or directory [ 92.379245][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 92.456464][ T7491] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 92.518396][ T7495] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 92.533139][ T7495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.536388][ T7497] bond0: entered allmulticast mode [ 92.538810][ T7497] bond_slave_0: entered allmulticast mode [ 92.541434][ T7497] bond_slave_1: entered allmulticast mode [ 92.552882][ T7495] bond1: (slave erspan1): making interface the new active one [ 92.557579][ T7495] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 92.719351][ T5985] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.724287][ T7513] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.727869][ T7513] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.835695][ T7513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.840590][ T7513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.854540][ T7525] .: renamed from bond0 (while UP) [ 92.920597][ T7513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.928166][ T7513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.992903][ T7513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.996143][ T7513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.113913][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.117245][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.131913][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.134677][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.146554][ T1149] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.149795][ T1149] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.164651][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.169039][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.188087][ T5983] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 93.340068][ T5983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.345162][ T5983] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.349756][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.356971][ T5983] usb 8-1: config 0 descriptor?? [ 93.358413][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 93.358426][ T40] audit: type=1400 audit(1758063777.689:482): avc: denied { write } for pid=7557 comm="syz.1.477" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.422259][ T40] audit: type=1400 audit(1758063777.759:483): avc: denied { ioctl } for pid=7562 comm="syz.2.479" path="socket:[19003]" dev="sockfs" ino=19003 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.434309][ T40] audit: type=1400 audit(1758063777.759:484): avc: denied { setopt } for pid=7562 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.441492][ T40] audit: type=1400 audit(1758063777.759:485): avc: denied { getopt } for pid=7563 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.550593][ T7569] __nla_validate_parse: 2 callbacks suppressed [ 93.550611][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 93.578639][ T5983] usbhid 8-1:0.0: can't add hid device: -71 [ 93.582742][ T5983] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 93.599158][ T5983] usb 8-1: USB disconnect, device number 4 [ 93.630250][ T7576] overlay: Unknown parameter 'fowner>00000000000000000000' [ 93.632929][ T40] audit: type=1400 audit(1758063777.969:486): avc: denied { connect } for pid=7573 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.644274][ T7578] overlay: Unknown parameter 'fowner>00000000000000000000' [ 93.679056][ T6057] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 93.712097][ T40] audit: type=1400 audit(1758063778.049:487): avc: denied { setopt } for pid=7583 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.714522][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 93.723087][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 93.726990][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 93.730859][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 93.734546][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 93.738560][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 93.801688][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 93.805168][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 93.849565][ T6057] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.854818][ T6057] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.857795][ T6057] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.861229][ T6057] usb 7-1: SerialNumber: syz [ 93.951993][ T7600] binder: 7599:7600 ioctl c0306201 2000000003c0 returned -22 [ 93.956133][ T7600] binder: 7599:7600 ioctl c0306201 2000000005c0 returned -14 [ 93.968381][ T7603] netlink: 'syz.3.489': attribute type 1 has an invalid length. [ 93.970952][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.489'. [ 93.974264][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.977174][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.979687][ T7603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.079251][ T6057] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 94.086957][ T6057] usb 7-1: USB disconnect, device number 12 [ 94.279573][ T54] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 94.326267][ T7620] macvlan0: entered promiscuous mode [ 94.331601][ T7620] batadv_slave_0: entered promiscuous mode [ 94.449627][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 94.453812][ T54] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 94.458175][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.463370][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.466879][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.470147][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.475252][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.479529][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.620003][ T40] audit: type=1400 audit(1758063778.959:488): avc: denied { write } for pid=7636 comm="syz.2.499" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.692705][ T54] usb 6-1: GET_CAPABILITIES returned 0 [ 94.695272][ T54] usbtmc 6-1:16.0: can't read capabilities [ 94.816201][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.828529][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.896301][ T6082] usb 6-1: USB disconnect, device number 10 [ 94.949028][ T70] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 94.978072][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.982012][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.988320][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.991075][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.128053][ T70] usb 8-1: Invalid ep0 maxpacket: 32 [ 95.152445][ T40] audit: type=1400 audit(1758063779.489:489): avc: denied { checkpoint_restore } for pid=7643 comm="syz.2.500" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.161602][ T40] audit: type=1400 audit(1758063779.489:490): avc: denied { append } for pid=7643 comm="syz.2.500" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.208904][ T40] audit: type=1400 audit(1758063779.549:491): avc: denied { map } for pid=7643 comm="syz.2.500" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.268256][ T70] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 95.418186][ T70] usb 8-1: Invalid ep0 maxpacket: 32 [ 95.421159][ T70] usb usb8-port1: attempt power cycle [ 95.495447][ T7676] gfs2: gfs2 mount does not exist [ 95.768197][ T70] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 95.801562][ T70] usb 8-1: Invalid ep0 maxpacket: 32 [ 95.819058][ T7695] program syz.2.516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.822580][ T7695] ata1.00: non-matching transfer count (10063/0) [ 95.870212][ T7699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7699 comm=syz.2.518 [ 95.938047][ T70] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 95.953229][ T7705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7705 comm=syz.0.521 [ 95.958676][ T70] usb 8-1: Invalid ep0 maxpacket: 32 [ 95.961481][ T70] usb usb8-port1: unable to enumerate USB device [ 95.970963][ T7705] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3258028803 (208513843392 ns) > initial count (20015448384 ns). Using initial count to start timer. [ 95.986894][ T7705] kvm: pic: level sensitive irq not supported [ 95.987675][ T7705] kvm: pic: non byte read [ 95.994609][ T7705] kvm: pic: level sensitive irq not supported [ 95.994952][ T7705] kvm: pic: non byte read [ 96.319994][ T7734] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.326149][ T7734] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 96.333837][ T7734] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 96.765087][ T7759] netlink: 'syz.0.540': attribute type 3 has an invalid length. [ 96.765103][ T7759] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 97.089685][ T7768] team0: Port device team_slave_0 removed [ 97.105749][ T7777] 9pnet: Could not find request transport: virtioà>˜sion=9p2000.u [ 97.499130][ T7792] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.503276][ T7792] qnx4: unable to read the superblock [ 97.565882][ T7796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.688111][ T6060] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.693187][ T7788] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 97.860714][ T6060] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 97.861234][ T7820] netlink: 'syz.1.558': attribute type 2 has an invalid length. [ 97.864423][ T6060] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.873698][ T6060] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.877268][ T6060] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.881116][ T6060] usb 5-1: Manufacturer: syz [ 97.886133][ T6060] usb 5-1: config 0 descriptor?? [ 97.958820][ T6060] rc_core: IR keymap rc-hauppauge not found [ 97.961102][ T6060] Registered IR keymap rc-empty [ 97.964970][ T6060] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 97.969187][ T6060] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 98.096448][ T841] usb 5-1: USB disconnect, device number 2 [ 98.303879][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.307213][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.626623][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 98.626638][ T40] audit: type=1400 audit(2000000000.230:514): avc: denied { listen } for pid=7857 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.688338][ T40] audit: type=1400 audit(2000000000.290:515): avc: denied { mount } for pid=7867 comm="syz.0.572" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 98.694666][ T7868] __nla_validate_parse: 8 callbacks suppressed [ 98.694681][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 98.695472][ T40] audit: type=1400 audit(2000000000.300:516): avc: denied { mounton } for pid=7867 comm="syz.0.572" path="/122/file0" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.712045][ T40] audit: type=1400 audit(2000000000.300:517): avc: denied { read } for pid=7867 comm="syz.0.572" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.721621][ T40] audit: type=1400 audit(2000000000.300:518): avc: denied { open } for pid=7867 comm="syz.0.572" path="/122/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.733268][ T40] audit: type=1400 audit(2000000000.300:519): avc: denied { read } for pid=7867 comm="syz.0.572" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.742294][ T40] audit: type=1400 audit(2000000000.300:520): avc: denied { read } for pid=7867 comm="syz.0.572" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.751404][ T40] audit: type=1400 audit(2000000000.340:521): avc: denied { unmount } for pid=5981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 98.770385][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 98.782321][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 98.818298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.859448][ T40] audit: type=1400 audit(2000000000.470:522): avc: denied { getopt } for pid=7885 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.863068][ T7886] netlink: 'syz.0.577': attribute type 11 has an invalid length. [ 98.919523][ T40] audit: type=1400 audit(2000000000.530:523): avc: denied { ioctl } for pid=7889 comm="syz.0.579" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 98.959212][ T7836] delete_channel: no stack [ 99.360859][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 99.404227][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 99.415403][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 99.415563][ T1146] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.424762][ T1146] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.430767][ T1146] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.432626][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 99.433719][ T1146] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.639751][ T1125] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 99.643145][ T1125] sr 2:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 99.645814][ T1125] sr 2:0:0:0: [sr0] tag#0 Add. Sense: Logical block address out of range [ 99.648790][ T1125] sr 2:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 20 00 00 02 00 [ 99.651398][ T1125] I/O error, dev sr0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 99.654356][ T7933] gfs2: error -5 reading superblock [ 99.795997][ T5985] Bluetooth: hci1: unexpected event 0x1c length: 6 > 5 [ 99.813996][ T7946] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 99.827696][ T7946] netlink: 'syz.1.598': attribute type 29 has an invalid length. [ 99.832255][ T7946] netlink: 'syz.1.598': attribute type 29 has an invalid length. [ 99.836221][ T7946] netlink: 500 bytes leftover after parsing attributes in process `syz.1.598'. [ 99.999985][ T5985] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 100.004661][ T5985] Bluetooth: hci1: Injecting HCI hardware error event [ 100.010145][ T5985] Bluetooth: hci1: hardware error 0x00 [ 100.044760][ T7965] binder: 7963:7965 ioctl c018937a 200000000300 returned -22 [ 100.051383][ T7965] binder: 7963:7965 ioctl 8818564c 2000000010c0 returned -22 [ 100.105277][ T7975] netlink: 'syz.3.608': attribute type 4 has an invalid length. [ 100.161985][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 100.306413][ T8004] netlink: 48 bytes leftover after parsing attributes in process `syz.1.617'. [ 100.398023][ T53] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 100.562606][ T53] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.565604][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.568640][ T53] usb 8-1: Product: syz [ 100.570114][ T53] usb 8-1: Manufacturer: syz [ 100.571745][ T53] usb 8-1: SerialNumber: syz [ 100.580099][ T53] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 100.610570][ T53] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 100.655274][ T5987] Bluetooth: hci3: Malformed Event: 0x2f [ 100.831130][ T34] usb 8-1: USB disconnect, device number 9 [ 100.939394][ T8052] syz.0.630 (8052) used greatest stack depth: 19576 bytes left [ 100.947941][ T8045] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig [ 100.975928][ T8056] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 101.011078][ T8056] bond1: (slave geneve2): making interface the new active one [ 101.014838][ T8056] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 101.022938][ T81] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.033424][ T81] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.036501][ T81] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.039556][ T81] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.103221][ T8065] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.127183][ T8065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.395898][ T8102] netlink: 'syz.3.646': attribute type 142 has an invalid length. [ 101.410990][ T8096] netlink: 'syz.2.643': attribute type 4 has an invalid length. [ 101.413518][ T8096] nbd: couldn't find device at index -2145452028 [ 101.417320][ T8096] No control pipe specified [ 101.513333][ T8109] Invalid ELF header magic: != ELF [ 101.555973][ T8111] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 101.560400][ T8111] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 101.561315][ T8112] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 101.579996][ T8111] bond2: entered promiscuous mode [ 101.582531][ T8111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.598386][ T8112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.601570][ T8112] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 101.605921][ T8112] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 101.612513][ T8112] bond2: (slave ip6gre1): making interface the new active one [ 101.615687][ T8112] ip6gre1: entered promiscuous mode [ 101.619178][ T8112] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 101.678391][ T53] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 101.681823][ T53] ath9k_htc: Failed to initialize the device [ 101.686050][ T34] usb 8-1: ath9k_htc: USB layer deinitialized [ 102.068101][ T5985] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 102.125662][ T8146] gfs2: not a GFS2 filesystem [ 102.222338][ T8162] trusted_key: syz.0.663 sent an empty control message without MSG_MORE. [ 102.284213][ T8167] 9pnet_virtio: no channels available for device ./file0 [ 102.336356][ T8174] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 102.339746][ T8174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.349189][ T8174] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8174 comm=syz.0.669 [ 102.392764][ T8174] binder: 8173:8174 ioctl c0306201 2000000003c0 returned -14 [ 102.650912][ T8131] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 102.654178][ T8131] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 102.760444][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.774411][ T8191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8191 comm=syz.3.672 [ 102.813045][ T8194] ip6tnl0: Caught tx_queue_len zero misconfig [ 103.211258][ T8215] validate_nla: 4 callbacks suppressed [ 103.211274][ T8215] netlink: 'syz.0.678': attribute type 2 has an invalid length. [ 103.217014][ T8215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.276344][ T5985] Bluetooth: hci0: unexpected event for opcode 0xed68 [ 103.276439][ T8217] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 103.283860][ T8217] SELinux: failed to load policy [ 103.351301][ T8223] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 103.436380][ T8234] tun0: tun_chr_ioctl cmd 1074025675 [ 103.445216][ T8234] tun0: persist enabled [ 103.447476][ T8234] tun0: tun_chr_ioctl cmd 1074025675 [ 103.449840][ T8234] tun0: persist enabled [ 103.546696][ T8249] netlink: 'syz.0.693': attribute type 4 has an invalid length. [ 103.584435][ T8254] can: request_module (can-proto-0) failed. [ 103.591233][ T8254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.643282][ T8262] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=8262 comm=syz.0.694 [ 103.881452][ T8271] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 103.886979][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 103.886995][ T40] audit: type=1400 audit(2000000005.489:550): avc: denied { relabelto } for pid=8270 comm="syz.0.697" name="154" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 103.901456][ T40] audit: type=1400 audit(2000000005.489:551): avc: denied { associate } for pid=8270 comm="syz.0.697" name="154" dev="tmpfs" ino=850 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 103.918144][ T5985] Bluetooth: hci3: command tx timeout [ 104.009234][ T40] audit: type=1400 audit(2000000005.619:552): avc: denied { remove_name } for pid=5981 comm="syz-executor" name="binderfs" dev="tmpfs" ino=854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 104.021320][ T40] audit: type=1400 audit(2000000005.619:553): avc: denied { rmdir } for pid=5981 comm="syz-executor" name="154" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 104.090766][ T8277] netlink: 'syz.0.700': attribute type 9 has an invalid length. [ 104.142454][ T8285] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 104.271588][ T8299] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 104.281236][ T8299] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 104.287391][ T8299] CPU: 2 UID: 0 PID: 8299 Comm: syz.1.705 Not tainted syzkaller #0 PREEMPT(full) [ 104.290707][ T8299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.294213][ T8299] RIP: 0010:h5_recv+0x104/0x950 [ 104.296319][ T8299] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 104.302990][ T8299] RSP: 0018:ffffc9000ec7fc00 EFLAGS: 00010293 [ 104.304978][ T8299] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b675a [ 104.307866][ T8299] RDX: ffff888047ed0000 RSI: ffffffff887b679f RDI: 0000000000000005 [ 104.310733][ T8299] RBP: ffffc9000ec7fd88 R08: 0000000000000005 R09: 0000000000000000 [ 104.313587][ T8299] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 104.316266][ T8299] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 104.318750][ T8299] FS: 00007f20dbb496c0(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 104.321572][ T8299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.323784][ T8299] CR2: 0000555584ded808 CR3: 000000003d02a000 CR4: 0000000000352ef0 [ 104.326555][ T8299] Call Trace: [ 104.327960][ T8299] [ 104.328939][ T8299] ? __pfx_h5_recv+0x10/0x10 [ 104.330460][ T8299] hci_uart_tty_receive+0x254/0x7e0 [ 104.332191][ T8299] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 104.334403][ T8299] tty_ioctl+0x580/0x1680 [ 104.336012][ T8299] ? __pfx_tty_ioctl+0x10/0x10 [ 104.337687][ T8299] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.339974][ T8299] ? hook_file_ioctl_common+0x145/0x410 [ 104.341897][ T8299] ? selinux_file_ioctl+0x180/0x270 [ 104.343771][ T8299] ? selinux_file_ioctl+0xb4/0x270 [ 104.345778][ T8299] ? __pfx_tty_ioctl+0x10/0x10 [ 104.347401][ T8299] __x64_sys_ioctl+0x18b/0x210 [ 104.349350][ T8299] do_syscall_64+0xcd/0x4e0 [ 104.351193][ T8299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.353294][ T8299] RIP: 0033:0x7f20dad8eba9 [ 104.354739][ T8299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.361501][ T8299] RSP: 002b:00007f20dbb49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.364405][ T8299] RAX: ffffffffffffffda RBX: 00007f20dafd6090 RCX: 00007f20dad8eba9 [ 104.367037][ T8299] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000006 [ 104.369525][ T8299] RBP: 00007f20dae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 104.372111][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.374645][ T8299] R13: 00007f20dafd6128 R14: 00007f20dafd6090 R15: 00007fff1f0c86a8 [ 104.377130][ T8299] [ 104.378146][ T8299] Modules linked in: [ 104.379654][ T8299] ---[ end trace 0000000000000000 ]--- [ 104.381643][ T40] audit: type=1400 audit(2000000005.989:554): avc: denied { read } for pid=5360 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.381669][ T40] audit: type=1400 audit(2000000005.989:555): avc: denied { search } for pid=5360 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.381687][ T40] audit: type=1400 audit(2000000005.989:556): avc: denied { search } for pid=5360 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.381706][ T40] audit: type=1400 audit(2000000005.989:557): avc: denied { add_name } for pid=5360 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.381722][ T40] audit: type=1400 audit(2000000005.989:558): avc: denied { create } for pid=5360 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.383493][ T8299] RIP: 0010:h5_recv+0x104/0x950 [ 104.383512][ T8299] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 104.383524][ T8299] RSP: 0018:ffffc9000ec7fc00 EFLAGS: 00010293 [ 104.383534][ T8299] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b675a [ 104.383542][ T8299] RDX: ffff888047ed0000 RSI: ffffffff887b679f RDI: 0000000000000005 [ 104.383549][ T8299] RBP: ffffc9000ec7fd88 R08: 0000000000000005 R09: 0000000000000000 [ 104.383556][ T8299] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 104.383563][ T8299] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 104.383570][ T8299] FS: 00007f20dbb496c0(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 104.383597][ T8299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.383607][ T8299] CR2: 00007fffd33f2f48 CR3: 000000003d02a000 CR4: 0000000000352ef0 [ 104.383616][ T8299] Kernel panic - not syncing: Fatal exception [ 105.469619][ T8299] Shutting down cpus with NMI [ 105.470216][ T8299] Kernel Offset: disabled VM DIAGNOSIS: 23:03:08 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff93d812a8 RCX=0000000000000002 RDX=1ffffffff1bec3d0 RSI=ffffffff8c163280 RDI=ffffffff8df61e80 RBP=0000000000000000 RSP=ffffc9000ec3f2f8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000ec3f448 R11=0000000000006b1a R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a0c3b1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7e05f816c0 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f20d8ff5f98 CR3=0000000032372000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1f0c8bb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1f0c8bb6 00007fff1f0c8bbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dafa74a8 00007f20dafa74a0 00007f20dafa7498 00007f20dafa7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dbb0d100 00007f20dafa7460 00007f20dafa7478 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dafa74b8 00007f20dafa74b0 00007f20dafa74a8 00007f20dafa74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000007ccb4 RBX=0000000000000001 RCX=ffffffff8b94bb49 RDX=ffffed100d4a6656 RSI=ffffffff8c163280 RDI=ffffffff81914111 RBP=ffffed1003bd4488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801dea2440 R14=ffffffff90ab7290 R15=0000000000000000 RIP=ffffffff8b94a68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000080 CR3=0000000024e7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555587952df0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558795b07b 000055558795a490 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558794ea13 000055558794e830 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063666e01ffffff fffffffffff70805 8003201000061000 2010000600748e1a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806060127f41e08 0003800300040020 a6800800000401c7 1000080a4aaa0078 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80a2d79008000100 000a0806060126fc 0002000703800402 d0c608000100000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01800402d0a40800 0100000a08060601 2886000200076402 0001800304100008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ffe10000aa00300 08000a980323e208 000a90030008000a 88030208000a8003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffc080040610 0040801000408010 000ffe8080040a01 42fc02808010000f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe80800400080006 017088000200070a 80041880c5ba9008 0001000008080606 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011eb83ffe10000a a0030008000a9803 23e208000a900300 08000a8803020800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a800301800402d0 a408000100000a08 0606012886000200 0764020001800304 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b815 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc9000ec7f600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000078 R14=ffffffff9b1180a0 R15=ffffffff8564b7b0 RIP=ffffffff8564b83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f20dbb496c0 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555584ded808 CR3=000000003d02a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1f0c8bb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1f0c8bb6 00007fff1f0c8bbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dae12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dafa74a8 00007f20dafa74a0 00007f20dafa7498 00007f20dafa7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dbb0d100 00007f20dafa7460 00007f20dafa7478 00007f20dafa74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20dafa74b8 00007f20dafa74b0 00007f20dafa74a8 00007f20dafa74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=fffffbfff3610a82 RBX=ffffffff9b085418 RCX=1ffffffff1beb290 RDX=0000000000001000 RSI=ffff8880139ad000 RDI=ffffffff9b085418 RBP=0000000000000286 RSP=ffffc9000e786fe8 R8 =ffffffff9b085410 R9 =0000000000002312 R10=0000000000011890 R11=0000000000005d06 R12=dffffc0000000000 R13=ffff8880139ac000 R14=ffffffff9b085410 R15=0000000000002312 RIP=ffffffff8b97606c RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f20dbb48f98 CR3=000000004e29b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd33f47f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd33f4976 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd33f4976 00007fffd33f497c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5dd612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5dd612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5dd612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5dd612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5dd612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5dd612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000