last executing test programs: 7.990286596s ago: executing program 1 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1, 0x4}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0xac, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x7d, 0x6, "f70570c6faa27095d490753e5f1aebd498571ff28fd048bd0b57fa6340181663090fca08171bb01468851072f5b2298c08ea6e068d4b1b284765e14bbf0f46055e2838d01129b5a504a9d49790b13f440ec74f9563944cc4afb829e5aaa4e4cba97d749cdde153ba638421f9596d86c8da1dc6fd5cd755c1e8"}, {0xc}, {0xc}}}]}]}, 0x124}}, 0x0) 7.988642831s ago: executing program 1 (id=811): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={[&(0x7f0000000700)='veth0_to_hsr\x00', &(0x7f0000000740)='c\'.+\x00']}, 0x1000) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (rerun: 32) r1 = socket(0x22, 0x5, 0x8005) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040ec3ca1c0c33"], 0x7) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x9}, 0x8) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x178}}, 0x40) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000206000000000000fffff0000000000011000300686173683a69702c6d61726be61d0000050004000000000005000500020000000900020073797a320000000005000100070000000c0007800800084000000004"], 0x58}}, 0x0) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000280)="80676000"/16, 0x10}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="cbe36d0fc47d51f055e89bd9db6dc70018df3e1c0de20000", 0x18}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) (rerun: 32) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) (async) unshare(0x6a040000) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c010000160011040000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x11c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000000)={0x11, 0x3, 0x0, "91428555711f775fe300200001000000000000000000ad7183eb0000ff00", 0x43353039}) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 7.911051257s ago: executing program 1 (id=813): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) syz_open_pts(r1, 0x0) (async) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, &(0x7f0000002840)={0x2020}, 0x2020) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) (async) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) 7.80134998s ago: executing program 1 (id=815): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x4000) poll(&(0x7f0000000040)=[{r1, 0x822a}, {r0, 0x1090}], 0x2, 0x1fd) 7.80059706s ago: executing program 1 (id=816): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xc1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x230, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "1227e2e64de9599ecbf96c1dc42cf7c06ac4989c53b0d36a1d6bba6b1e"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "a6f95fde8e2bf18e63a1960049a3f478e7869d5bfa44faef3a6424417d29"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "8dcdcc38837ff32a11123d4033478b7d116421d649"}}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x28, 0x3, "b7cafbfe4a686d3846a4b819913d0c0373b2513957bdf5aae443cce4269b841bedcc8f7d"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x16, 0x3, "c443a7e50c6f06dfe77ff8055c88479911bc"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a6cf4ebd4e55fdf7afa30bf64ff239e28d1a860dd96f73311d43f1"}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x200c4004}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan3\x00'}) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='erofs\x00', 0x800001, &(0x7f0000000600)='nl802154\x00') close_range(r2, r2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x200c80, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000680), 0x4) r5 = openat(r2, &(0x7f00000006c0)='./file0\x00', 0x0, 0x80) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r5, 0x0) (async) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r5, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x8, 0x10, r2, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000940)=@IORING_OP_ACCEPT={0xd, 0x51, 0x1, r2, &(0x7f0000000880)=0x80, &(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x0, 0x80000, 0x1, {0x0, r10}}) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000940)=@IORING_OP_ACCEPT={0xd, 0x51, 0x1, r2, &(0x7f0000000880)=0x80, &(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x0, 0x80000, 0x1, {0x0, r10}}) keyctl$set_reqkey_keyring(0xe, 0x1) (async) keyctl$set_reqkey_keyring(0xe, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000980)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000009c0)=0x1c) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000980)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000009c0)=0x1c) r11 = getpgid(0x0) syz_open_procfs(r11, &(0x7f0000000a00)='net/netfilter\x00') (async) r12 = syz_open_procfs(r11, &(0x7f0000000a00)='net/netfilter\x00') landlock_restrict_self(r2, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2a4ac74e367d3a04}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r13, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) pipe(&(0x7f0000000c00)) (async) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_SET(r15, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x3f9, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4e090}, 0x4000) 7.700990573s ago: executing program 1 (id=818): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x3, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000002140)="b9ff030711a5268c019e14f088a847", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r4, &(0x7f0000000580)="44c394f305916c4516999da288a8", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)=0xffffffff) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000140)={0x0, "cc8f07e27bfd847bae3821b60174201abce2dfcb1d7cb7d7072316ffeacec185", 0x3, 0x0, 0x1, 0xc00000, 0x20002, 0x8}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 4.249433758s ago: executing program 3 (id=897): syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x188, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}, @IFLA_VF_PORTS={0x130, 0x18, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "43a37b95bc8ffff469a18c45bd05abc2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "02bcccc60f252654c26b217a7be2faa7"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'hash\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ae1b4e7fa4a1099243d6c4fb5492d845"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'hash\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, '%##\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'aead\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '{\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "46cddf3afb3dea2264cbf58501da3b84"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '@/\'^,\'({\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, ']$\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8cce569d51146366f08c79b3c3ee7aa6"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3ce50bfefd88b4e0f2255542f36b8c15"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9db7b447e9188174fb4ecf28d149457f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "759cb8f1a4389123ad3adae6ff8aa882"}, @IFLA_PORT_PROFILE={0x7, 0x2, '[)\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '{\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7573}]}, 0x188}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x3, 0x1, 0x0, "cdf922c1d6edb8c40b20f2d448d6662fb024cf64cea94ee5d4fa20c641c6e2e1", 0x584e4f53}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x7151, 0x0) readv(r4, &(0x7f0000000900)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r9 = mq_open(&(0x7f0000000140)='{\x00', 0x40, 0x8, 0x0) mq_notify(r9, &(0x7f0000000300)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) 3.381074869s ago: executing program 3 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000a000000140002"], 0x34}}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) r5 = openat$selinux_status(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) read(r5, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x4000003e, r6, 0x0) fanotify_mark(r7, 0x441, 0x103f, r6, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) (async) r8 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r8, 0xffff) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) socket$nl_route(0x10, 0x3, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00') (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r11}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="766cd84b112372ee0a00000000000070b950000002000018000000000065a2dcb1659b0000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x80) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="c2c1000000000000073d7b5b86dd", 0xe}, {&(0x7f0000000240)="ef4100045e8ce1d401003d56bb", 0xd}, {&(0x7f00000002c0)="cbbef7e7eadd244ee06c1e0d673247d2019608209bec88209fb84faf518a5075f6", 0x21}], 0x3) (async) fcntl$addseals(r8, 0x409, 0x7) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000c00)={{0x3, 0x4, 0x3, 0x80000000, '\x00', 0x1}, 0x1, [0x8001, 0x5, 0x7fffffff, 0x5ed5037c, 0x0, 0x5, 0x3b, 0x1, 0x100, 0x800000, 0x4, 0x101, 0x4, 0x400, 0x401, 0xb4a, 0x6, 0xffffffe000000000, 0x3, 0x5, 0x4, 0x5, 0x8, 0x10, 0x7, 0x5, 0x3, 0x1215, 0x6, 0x4, 0xd, 0x8, 0x1000, 0x109c384a, 0x3, 0x10, 0x1, 0x80, 0x5, 0x1, 0x0, 0x2, 0x1000, 0xffff, 0x6, 0x9, 0x7ff, 0x593, 0x6, 0x10, 0x36bb, 0x0, 0x1, 0x8, 0x3, 0x8, 0x1000, 0xa, 0x7, 0x4, 0x3, 0xfffffffffffffff9, 0x4, 0x7, 0x3, 0x4, 0xfffffffffffff000, 0x4, 0x6, 0x0, 0x8000, 0xb, 0x698e, 0x7, 0xd49, 0xfffffffffffffff8, 0x32, 0x3a40, 0x10, 0x2, 0x101, 0x7, 0x8000, 0xc, 0x6, 0x8001, 0x7fff, 0x4000000, 0x36b, 0x8, 0xcc, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x1, 0x401, 0x400, 0x50, 0x5, 0x5, 0x3, 0x8000000000000000, 0x6, 0x4, 0x8d, 0x7fffffffffffffff, 0x3c4, 0x4, 0x7c22, 0x1, 0x1, 0x2, 0x9, 0xfffffffffffffff7, 0x2, 0xf3, 0x9, 0x7f, 0x8, 0x0, 0x4, 0x9, 0x4, 0x1, 0x9, 0x8, 0x10000]}) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="0020000002000000", @ANYRES32=r8, @ANYBLOB="0000000000000000000000000080"]) 3.309423193s ago: executing program 3 (id=907): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) ptrace(0x4206, r1) (async) ptrace(0x4206, r1) ptrace(0x8, r1) waitid(0x0, 0x0, 0x0, 0x40000004, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x40000004, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) gettid() (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r4, 0x0}]) (async) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r4, 0x0}]) dup3(r0, r4, 0x6700000000000000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0x64, 0x4, 0x558, 0x100000c, 0x0, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x7}}]}, @common=@SET={0x60}}, {{@ip={@empty, @private, 0x0, 0x0, 'wg2\x00', 'veth0\x00'}, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}, @common=@ah={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r8, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r7, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) (async) io_submit(r8, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r7, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) ptrace$peekuser(0x3, r1, 0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="00c94000000080008a4502eda244fb8ebc15067a48d58a2321c903e644c33906a778074b348acd7b1306edb342c75cd2b7dfd38979a4ba0c8e9ae778e45309fb6acbda8d28360d0159431367771ebb273eba88f079dfd661db2a5283b8c41e32e2001f331d9a57714d174a1ab9ebf1536cd3f94acc8e85362456b6549467e321daf0c8f3df99dbf68b0900000000000000c4fa206ed9083b36b8d58de08ef281474b4d51d4986efb0505c9e5cbfecd62fd"], 0x4) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) 1.484210155s ago: executing program 0 (id=933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) close(0x3) r5 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000003a00000100"/20], 0x14}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000074d564b"]) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r6, @ANYRES32=0x1, @ANYBLOB="0000000000000000000048f420a93c2ec8aad1eb44071d881620000000000000001b0000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB='\x00'/28], 0x50) r9 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0xfc40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r11, 0x4068aea3, &(0x7f0000000400)) ioctl$SG_IO(r11, 0x5317, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000002c0)={0x10001, 0x0, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.331389685s ago: executing program 2 (id=935): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000025c0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.321246664s ago: executing program 2 (id=936): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000002080006400000000000000000000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r1 = userfaultfd(0x69a0c02e5dade87d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000d43000/0x1000)=nil, 0x1000}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 1.247735053s ago: executing program 2 (id=937): setresgid(0xee00, 0xee01, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001680)=0x7e) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, &(0x7f0000000340), &(0x7f0000000440)=""/142}, 0x20) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x4) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x81, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x1263, &(0x7f00000006c0)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000240)=[{'SPEAKER', @void}], 0x8) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000040)=0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000010}, 0x20000004) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) readv(r9, &(0x7f00000008c0)=[{&(0x7f00000000c0)=""/262, 0x106}], 0x1) 180.218977ms ago: executing program 0 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}]}]}]}, 0x2c}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xb2) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 179.918698ms ago: executing program 2 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x6, 0x4) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r5 = eventfd(0x592d) r6 = eventfd2(0x81, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r5, 0x2, 0x2, r6}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc800}, 0x4054) socket$nl_netfilter(0x10, 0x3, 0xc) 169.795224ms ago: executing program 0 (id=940): r0 = io_uring_setup(0x3e7b, &(0x7f0000000140)={0x0, 0x2a25, 0x0, 0xfffff7fe, 0xc6}) r1 = socket(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_generic(r6, 0x0, 0x800) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r2, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r1}, 0x20) recvmsg$can_bcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/158, 0x9e}], 0x1}, 0x102) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/125, &(0x7f0000000080)="8d190fdbdc63ee239df0cce4a9cbba953615662d6fb226bb4770cdd1d10d80081a6f7c3d70805642ea9068cfe3e76919117c7ff5118328908a9e6d60c803a2c12fc0294034530ce4b8879acb997f5b037fa084cf7a2ff3db8bcae2b1fad1362762f9b509b464289c7c48437ad848661e42408674b2ea4c0857af532a7e5bfd6f949471090180cd3c8bf9ecaef99a3511263f4021e569e79d42780603785dd0ff12e571749ac5b5d13b7e2bc46b152818c8", &(0x7f0000000340)="f991476599ae19dcb2f9c1e7361ec2a33c9b8d051981d03a011e4510ab6fd4f98d81018476990884093d35701f703b44b456e9de62b333f3f4c8504ce3f1cf846ff82cfd06ddf2228af4e996c473ef565c2ffe46bd5d580e481f9a554213be05a7bb6822a19c5912fef04710399221ebb59178a86ff34099f21f3598871fde3c8435c85d94ac51c3cfd5cc279230078738844c2e83f717ee68aeb6b175cf51c65e6806f903e20e823e119d9181d6c62a9149dea7aedae85adb3382d35f205c500192c15a3462bd9184d4183ed17d2062138036d80542fba92b529aacfe4a7b63d305c768b7ede9e032207ae08a35b15b08f67fcbd161479ffc2d7672f2", 0x80, r7}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) 61.278444ms ago: executing program 3 (id=941): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000004, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="c40b1b65ab4b65dbc1fa12c74705a122", 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r1, &(0x7f0000000880)}, 0x20) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="5f96565e14027386aa93a303c44b5b3b", 0x10) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffedd, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRESHEX=r0], 0xc0}}, 0x4040080) 60.578067ms ago: executing program 2 (id=942): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) close_range(r1, r1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x64, 0x0, 0x3, 0x1}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000180)="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") syz_open_procfs(r0, &(0x7f0000000000)='net/ptype\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, 0x80, 0x68408c57) 60.452276ms ago: executing program 2 (id=943): r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x38, 0x0, &(0x7f0000000140)) (async) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x20000000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, 0x0, 0x0, &(0x7f0000000140)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_int(r3, 0x1, 0x8, 0x0, &(0x7f0000000280)) (async) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) 57.763766ms ago: executing program 0 (id=944): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0xaf, &(0x7f0000000100)}, 0x10) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0x11, 0x1, 0x4db8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0x11, 0x1, 0x4db8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]}, 0x40) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000500)=@newchain={0x43c, 0x64, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x0, 0xd}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3f, 0x9, 0x9, 0x0, 0xd153, 0x1, 0x0, 0x200, 0xea90, 0x861, 0x1000, 0x5, 0x9, 0xb, 0x1, 0x7, 0x1, 0x0, 0x6090, 0x2000000, 0x6, 0x9, 0x4, 0x7fff, 0x7, 0x7, 0x6a, 0x8, 0xb, 0xa962, 0x932, 0x8, 0x6bf1, 0x480a, 0x6, 0x9da, 0x5, 0x100, 0x9, 0xec6, 0x100, 0xfff, 0x81, 0x7, 0x6, 0xd, 0x6, 0x682, 0x9b2, 0x6, 0x957, 0xfffffbdd, 0x1, 0x7, 0x7, 0x1, 0x3, 0x252b0000, 0x100, 0xfffffffd, 0x401, 0x0, 0x5, 0x401, 0x3, 0x1, 0x5, 0x1, 0x80008, 0x7, 0xffffffff, 0xe, 0x10000000, 0x1, 0x400, 0xd, 0x0, 0x80000001, 0xcb3, 0x7f, 0x1, 0x81, 0x4, 0x0, 0xffffffff, 0x1, 0x27180000, 0x8, 0x7fff, 0xbcf9, 0xf, 0x0, 0x2, 0x4, 0xb5c, 0x6, 0x4ec, 0x3, 0x3, 0x6, 0x9, 0x8, 0x7fffffff, 0x81, 0xabc0, 0x7e, 0x6, 0x2, 0x0, 0x0, 0xf, 0x2, 0x9, 0xff, 0x7631, 0x2, 0x37, 0x81, 0x101, 0x6, 0x3, 0x5, 0xfffffffe, 0x6, 0x5, 0x8, 0x5, 0x6, 0xe8f, 0x4d9a, 0x0, 0x800, 0x7, 0x7f, 0x9, 0x0, 0x6, 0x80, 0xd, 0x4, 0x0, 0xe9e, 0x2, 0x1000, 0x9, 0x4, 0x9, 0x100, 0x3, 0x6, 0x0, 0x6, 0x1ff, 0x7ff, 0xfffff9db, 0x0, 0x6, 0x80, 0x4, 0x200, 0x3, 0x5, 0x3302, 0x7, 0x1, 0x8, 0x9, 0xe, 0x7ac2, 0x6, 0x6, 0x81, 0xfffffffb, 0x2407, 0x2, 0x80000001, 0x8, 0xfffff0d1, 0x3, 0x401, 0x9, 0x5, 0x9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x6, 0x81, 0x1, 0x8, 0x0, 0x8, 0xe, 0x0, 0x100, 0x0, 0x1000, 0x3, 0x0, 0x4, 0x7, 0xff, 0x2, 0x4, 0xe, 0x2a, 0x90, 0x2, 0x0, 0x7fffffff, 0x8, 0x6, 0x4, 0x7, 0x7fffffff, 0x9e, 0x3993, 0x9, 0x6f, 0x2, 0x4, 0x934c, 0x5, 0xfff, 0x4, 0x3, 0xfffffff9, 0x1, 0x1, 0x1, 0x1, 0x5, 0x3, 0x0, 0x1, 0x101, 0x0, 0x4, 0x8, 0x1, 0x8, 0xfffff001, 0x7a, 0x2, 0x6, 0x2, 0x1, 0x1, 0x4, 0x80000001, 0xb, 0xfc, 0x4, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r0, 0x0) 968.716µs ago: executing program 3 (id=945): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) modify_ldt$read(0x0, 0x0, 0x0) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4820}, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000040), 0x2) (rerun: 64) 638.486µs ago: executing program 0 (id=946): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x280a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 419.433µs ago: executing program 3 (id=947): futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f00000000c0)=0x2, 0xfffffffd) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r3, 0x28543634fae43ad, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd8e00fcdbdf250c000000340201800c000700000000002200000006000400069bb312e7c39efd55e6f698462000000800050003cb0000060004004e220000"], 0x48}, 0x1, 0x0, 0x0, 0x4014}, 0x400c4) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) bind$tipc(r4, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x10, 0xfffffffe}, 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002ac0), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000003340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wpan0\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r13) sendmsg$NL802154_CMD_GET_WPAN_PHY(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r15, 0x305, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000100}, 0x40840) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x68, r8, 0x5ef96ac97d3cb529, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 0 (id=948): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = inotify_init1(0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$proc_mixer(r5, 0x0, 0x0) (async) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021) (async) read(r4, 0x0, 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000001}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa0000) ioctl$EVIOCGMTSLOTS(r11, 0x8040450a, &(0x7f0000000040)=""/160) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="840000001900000425bd7000fbdbdf250a00148bff03fd06002000000c00090007001009", @ANYRES32=r10, @ANYBLOB="080010007ebb00002c0008806bea9bbcc309745cad29e8ac98518db1285de1c958872e36d6fc7a89971f6dede88b4262ec5def890c00090000c00014", @ANYRES32=r10, @ANYBLOB="3d08008008000740fbffffff080004008fe54821c1af0d35a6f45486731ce016cb359fd39f8966a20d571d9ae67cb845ca57ebca11b05f9aa10084ef5837b3b286cdd572fd5c6b98f9331f18808e2a66be001e144ecaee468e0c05000000e93cdd6a765bac177c283b0e27f9a51b8dac833a1e1addae6fbbc34a8e993624b1a1bc2d7ece26d2daa919758e2412cee2eef8148b82c69400"/167, @ANYBLOB="b46fbe64a5ae13fff55cf3d0ee68b139d07dde0531e8f2b1775663512b29df22b8d6154af231dd8cab3837bc232478f0f0386182077f5001a2f064b2afe60d1e68eec044b2c7052f78dfeacad3f0401180109ff10b28b9b1e78aee7c8ae6142070d85a38742e7ccb13b798a4c2d95464f3d2a051023db9ce5402bb248d8ea540bbb060a43c92966002db352b008d5628ee9339a49a1bfc2cab0405f27ae6c37742ebeb7728664f82deadb94ae532817a248d4617", @ANYRES8], 0x84}, 0x1, 0x0, 0x0, 0x20000004}, 0x4050) 0s ago: executing program 0 (id=950): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev}) kernel console output (not intermixed with test programs): la_validate_parse: 8 callbacks suppressed [ 53.863751][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 53.880990][ T6424] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 53.884651][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 53.892003][ T6424] overlay: ./file0 is not a directory [ 53.955186][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 53.972022][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 54.012355][ T6439] overlayfs: missing 'lowerdir' [ 54.013571][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.163972][ T5301] Bluetooth: hci2: command tx timeout [ 54.165528][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.169155][ T24] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.171749][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.177289][ T24] usb 8-1: config 0 descriptor?? [ 54.198923][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 54.201403][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 54.207824][ T6443] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.210399][ T6443] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.213684][ T6443] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.216211][ T6443] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.220712][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 54.224239][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 54.323669][ T5301] Bluetooth: hci3: command tx timeout [ 54.384274][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 54.385978][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 54.389278][ T24] usb 8-1: USB disconnect, device number 2 [ 54.403747][ T5301] Bluetooth: hci1: command tx timeout [ 54.729300][ T6449] netlink: 'syz.0.116': attribute type 10 has an invalid length. [ 54.732676][ T6449] bridge0: entered promiscuous mode [ 54.734916][ T6449] bridge0: entered allmulticast mode [ 54.763039][ T6452] cgroup: Invalid name [ 54.815300][ T6457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.833591][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.878901][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 54.966491][ T6476] netlink: 'syz.1.126': attribute type 1 has an invalid length. [ 54.968610][ T6476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.970601][ T6476] IPv6: NLM_F_CREATE should be set when creating new route [ 54.973067][ T6477] netlink: 'syz.1.126': attribute type 1 has an invalid length. [ 54.976357][ T6477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.014592][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 55.017662][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.020591][ T24] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 55.023572][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.028340][ T24] usb 8-1: config 0 descriptor?? [ 55.079317][ T6492] capability: warning: `syz.1.130' uses deprecated v2 capabilities in a way that may be insecure [ 55.089249][ T6494] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 55.095680][ T6494] syz.2.131: attempt to access beyond end of device [ 55.095680][ T6494] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 55.100511][ T6494] EXT4-fs (nbd2): unable to read superblock [ 55.112703][ T6494] IPVS: set_ctl: invalid protocol: 255 172.30.0.3:20001 [ 55.235328][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.295743][ T6510] syz.2.137: attempt to access beyond end of device [ 55.295743][ T6510] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 55.299213][ T6510] EXT4-fs (nbd2): unable to read superblock [ 55.305978][ T6510] netlink: 'syz.2.137': attribute type 1 has an invalid length. [ 55.308420][ T6510] netlink: 224 bytes leftover after parsing attributes in process `syz.2.137'. [ 55.316979][ T6510] program syz.2.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.393776][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 55.397900][ T5953] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 55.400768][ T5953] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.404916][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.408332][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.412231][ T5953] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.417562][ T5953] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 55.420824][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.632371][ T5953] usb 5-1: usb_control_msg returned -32 [ 55.634029][ T5953] usbtmc 5-1:16.0: can't read capabilities [ 55.692055][ T5988] usb 5-1: USB disconnect, device number 3 [ 55.784782][ T6527] capability: warning: `syz.0.142' uses 32-bit capabilities (legacy support in use) [ 55.846133][ T6532] netlink: 'syz.0.144': attribute type 39 has an invalid length. [ 55.953590][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 55.958121][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 55.962203][ T24] usb 8-1: USB disconnect, device number 3 [ 56.003978][ T6541] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.008924][ T6542] vivid-001: disconnect [ 56.012263][ T6540] vivid-001: reconnect [ 56.145199][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 56.145209][ T40] audit: type=1400 audit(1744321619.091:345): avc: denied { name_connect } for pid=6546 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 56.147561][ T6548] sctp: failed to load transform for md5: -2 [ 56.152009][ T40] audit: type=1400 audit(1744321619.091:346): avc: denied { accept } for pid=6546 comm="syz.0.149" lport=33008 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.160211][ T40] audit: type=1400 audit(1744321619.091:347): avc: denied { listen } for pid=6546 comm="syz.0.149" lport=33008 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.204596][ T40] audit: type=1400 audit(1744321619.151:348): avc: denied { create } for pid=6557 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.211903][ T40] audit: type=1400 audit(1744321619.151:349): avc: denied { read write } for pid=6557 comm="syz.0.151" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.219686][ T40] audit: type=1400 audit(1744321619.151:350): avc: denied { open } for pid=6557 comm="syz.0.151" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.227322][ T40] audit: type=1400 audit(1744321619.151:351): avc: denied { ioctl } for pid=6557 comm="syz.0.151" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.330527][ T6563] input: syz0 as /devices/virtual/input/input5 [ 56.336863][ T40] audit: type=1400 audit(1744321619.281:352): avc: denied { read } for pid=5345 comm="acpid" name="event4" dev="devtmpfs" ino=2798 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.342928][ T40] audit: type=1400 audit(1744321619.281:353): avc: denied { open } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2798 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.349378][ T40] audit: type=1400 audit(1744321619.281:354): avc: denied { ioctl } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2798 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.453626][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.627915][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 56.631230][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.635549][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.639065][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.642670][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.650926][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.654368][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.657959][ T6570] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 56.862449][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 56.865417][ T24] usbtmc 5-1:16.0: can't read capabilities [ 56.893586][ T833] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 57.046481][ T833] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 57.049775][ T833] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 57.052556][ T833] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 57.056752][ T833] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 57.060667][ T833] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 57.063679][ T833] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 57.066605][ T833] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.070081][ T833] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 57.072478][ T833] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 57.074669][ T833] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 57.075016][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.077751][ T833] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 57.081260][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.083191][ T833] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 57.086256][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.086288][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.089131][ T833] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 57.092141][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.095316][ T833] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.098944][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.102231][ T833] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 57.104705][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.104735][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.104760][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.105764][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.107916][ T833] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 57.110892][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.114794][ T833] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 57.117030][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.120158][ T833] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 57.122794][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.125280][ T833] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 57.128293][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.130072][ T833] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 57.132304][ T6581] xt_CONNSECMARK: invalid mode: 0 [ 57.132436][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 57.135872][ T833] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.138159][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 57.144284][ T833] usb 8-1: string descriptor 0 read error: -22 [ 57.149745][ T29] usb 5-1: USB disconnect, device number 4 [ 57.151717][ T833] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 57.165060][ T833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.174757][ T833] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 57.689820][ T10] usb 8-1: USB disconnect, device number 4 [ 57.765773][ T6607] netlink: 'syz.0.167': attribute type 3 has an invalid length. [ 57.807730][ T6612] netlink: 'syz.0.168': attribute type 5 has an invalid length. [ 57.987183][ T6629] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.163317][ T6648] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 58.166547][ T6649] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 58.777410][ T6629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.779262][ T6629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.785621][ T6629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.791589][ T6629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.793364][ T6629] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.796349][ T6629] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.799059][ T6629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.800808][ T6629] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.803178][ T6629] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.806407][ T6629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.808134][ T6629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.810420][ T6629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.872346][ T6695] bridge2: entered promiscuous mode [ 58.874303][ T6695] bridge2: entered allmulticast mode [ 58.890939][ T6699] JFS: charset not found [ 58.892710][ T6699] __nla_validate_parse: 16 callbacks suppressed [ 58.892719][ T6699] netlink: 825 bytes leftover after parsing attributes in process `syz.3.193'. [ 58.897097][ T6699] netlink: 130144 bytes leftover after parsing attributes in process `syz.3.193'. [ 59.086366][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.088660][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.090662][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.092724][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.095425][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.097473][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.099553][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.101657][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.105881][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 59.106885][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.110463][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.112486][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.114967][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.117013][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.119075][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.121075][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.123347][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.125542][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.127660][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.129757][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.131996][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.134080][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.136147][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.138246][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.140296][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.142333][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.144407][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.146458][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.148495][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.150599][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.152726][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.154895][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.156920][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.158962][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.161061][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.163552][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.165642][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.167718][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.169773][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.171847][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.173980][ T833] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 59.178335][ T833] hid-generic 0004:FFFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 59.313643][ T58] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 59.427524][ T6740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=244 sclass=netlink_route_socket pid=6740 comm=syz.2.205 [ 59.454330][ T833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.465222][ T58] usb 8-1: config 0 has no interfaces? [ 59.467232][ T58] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 59.469713][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.473196][ T58] usb 8-1: config 0 descriptor?? [ 59.485677][ T6741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=6741 comm=syz.2.205 [ 59.491438][ T6741] netlink: 'syz.2.205': attribute type 29 has an invalid length. [ 59.613778][ T6285] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.616063][ T833] usb 6-1: Using ep0 maxpacket: 8 [ 59.621191][ T833] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 59.624381][ T833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.626705][ T833] usb 6-1: Product: syz [ 59.627901][ T833] usb 6-1: Manufacturer: syz [ 59.629208][ T833] usb 6-1: SerialNumber: syz [ 59.631720][ T833] usb 6-1: config 0 descriptor?? [ 59.763658][ T6285] usb 5-1: Using ep0 maxpacket: 32 [ 59.766916][ T6285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.769920][ T6285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.772734][ T6285] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 59.776939][ T6285] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 59.779400][ T6285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.784539][ T6285] usb 5-1: config 0 descriptor?? [ 59.887645][ T833] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 59.952563][ T6746] block device autoloading is deprecated and will be removed. [ 59.996855][ T6285] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input6 [ 60.057484][ T6285] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input7 [ 60.093667][ T5301] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.587016][ T6764] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 60.590690][ T6764] cramfs: wrong magic [ 60.615684][ T6766] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 60.701141][ T5301] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 60.805046][ T5301] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.805091][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.887616][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.964404][ T833] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 61.033653][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.093762][ T6795] netlink: 256 bytes leftover after parsing attributes in process `syz.0.221'. [ 61.129129][ T6799] tmpfs: Bad value for 'huge' [ 61.203811][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 61.207171][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.210170][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.213132][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 61.216826][ T24] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 61.219306][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.222648][ T24] usb 7-1: config 0 descriptor?? [ 61.230114][ T6802] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.236013][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 61.634203][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0004/input/input8 [ 61.696280][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0004/input/input9 [ 61.891442][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 61.891456][ T40] audit: type=1400 audit(1744321624.831:415): avc: denied { mount } for pid=6779 comm="syz.2.217" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.912933][ T6780] overlayfs: conflicting options: userxattr,metacopy=on [ 61.915989][ T6780] loop6: detected capacity change from 0 to 524288000 [ 62.019025][ T10] usb 6-1: USB disconnect, device number 2 [ 62.088483][ T1456] usb 8-1: USB disconnect, device number 5 [ 62.098378][ T6285] kye 0003:0458:5011.0003: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 62.111765][ T24] kye 0003:0458:5011.0004: input,hiddev1,hidraw2: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 62.117020][ T6285] usb 5-1: USB disconnect, device number 5 [ 62.134479][ T24] usb 7-1: USB disconnect, device number 2 [ 62.164310][ T6817] netlink: 56 bytes leftover after parsing attributes in process `syz.3.228'. [ 62.170114][ T6817] overlay: Unknown parameter 'fsmagic' [ 62.174362][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.176927][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 62.179546][ T40] audit: type=1400 audit(1744321625.121:416): avc: denied { create } for pid=6816 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.197536][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 62.246236][ T40] audit: type=1400 audit(1744321625.191:417): avc: denied { create } for pid=6820 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.253736][ T40] audit: type=1400 audit(1744321625.191:418): avc: denied { bind } for pid=6820 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.314766][ T6824] overlayfs: failed to resolve './file0': -2 [ 62.444140][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.523876][ T6285] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 62.623651][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 62.634283][ T29] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 62.636781][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 62.639657][ T29] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 62.642459][ T29] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 62.646166][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 62.650094][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 62.652536][ T29] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 62.660816][ T29] usb 6-1: Product: syz [ 62.661970][ T29] usb 6-1: Manufacturer: syz [ 62.663253][ T29] usb 6-1: SerialNumber: syz [ 62.679171][ T29] usb 6-1: config 0 descriptor?? [ 62.682764][ T29] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 62.691908][ T40] audit: type=1400 audit(1744321625.641:419): avc: denied { read } for pid=6836 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.693086][ T29] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 62.694181][ T6285] usb 5-1: Using ep0 maxpacket: 8 [ 62.695358][ T6285] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 62.695371][ T6285] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.696970][ T6285] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.696983][ T6285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.696995][ T6285] usb 5-1: Product: Ф [ 62.697006][ T6285] usb 5-1: Manufacturer: ꯖ拊䴞뷯àºë•¤èœ®æ£’ [ 62.697018][ T6285] usb 5-1: SerialNumber: à ’ [ 62.699333][ T40] audit: type=1400 audit(1744321625.641:420): avc: denied { bind } for pid=6836 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.725028][ T40] audit: type=1400 audit(1744321625.641:421): avc: denied { accept } for pid=6836 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.827475][ T6841] batman_adv: batadv0: Adding interface: dummy0 [ 62.829355][ T6841] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.836146][ T6841] batman_adv: batadv0: Interface activated: dummy0 [ 62.839075][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 62.883690][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.886982][ T29] usb 6-1: USB disconnect, device number 3 [ 62.891698][ T29] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 62.893982][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.963876][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.027040][ T6850] syzkaller1: entered promiscuous mode [ 63.028591][ T6850] syzkaller1: entered allmulticast mode [ 63.105749][ T40] audit: type=1400 audit(1744321626.051:422): avc: denied { read } for pid=6804 comm="syz.0.224" path="socket:[13871]" dev="sockfs" ino=13871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.158004][ T40] audit: type=1400 audit(1744321626.101:423): avc: denied { create } for pid=6804 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 63.167933][ T40] audit: type=1400 audit(1744321626.111:424): avc: denied { getopt } for pid=6860 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 63.199724][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 63.649430][ T6886] 9pnet_virtio: no channels available for device syz [ 63.651617][ T6886] 9pnet_virtio: no channels available for device syz [ 63.654055][ T6886] 9pnet_virtio: no channels available for device syz [ 63.656207][ T6886] 9pnet_virtio: no channels available for device syz [ 63.658239][ T6886] 9pnet_virtio: no channels available for device syz [ 63.660114][ T6886] 9pnet_virtio: no channels available for device syz [ 63.663042][ T6886] 9pnet_virtio: no channels available for device syz [ 63.665117][ T6886] 9pnet_virtio: no channels available for device syz [ 63.667089][ T6886] 9pnet_virtio: no channels available for device syz [ 63.669221][ T6886] 9pnet_virtio: no channels available for device syz [ 63.671121][ T6886] 9pnet_virtio: no channels available for device syz [ 63.673044][ T6886] 9pnet_virtio: no channels available for device syz [ 63.676024][ T6886] 9pnet_virtio: no channels available for device syz [ 63.678010][ T6886] 9pnet_virtio: no channels available for device syz [ 63.679980][ T6886] 9pnet_virtio: no channels available for device syz [ 63.681953][ T6886] 9pnet_virtio: no channels available for device syz [ 63.684090][ T6886] 9pnet_virtio: no channels available for device syz [ 63.686078][ T6886] 9pnet_virtio: no channels available for device syz [ 63.688051][ T6886] 9pnet_virtio: no channels available for device syz [ 63.689999][ T6886] 9pnet_virtio: no channels available for device syz [ 63.691937][ T6886] 9pnet_virtio: no channels available for device syz [ 63.694175][ T6886] 9pnet_virtio: no channels available for device syz [ 63.696376][ T6886] 9pnet_virtio: no channels available for device syz [ 63.698414][ T6886] 9pnet_virtio: no channels available for device syz [ 63.700401][ T6886] 9pnet_virtio: no channels available for device syz [ 63.702351][ T6886] 9pnet_virtio: no channels available for device syz [ 63.704533][ T6886] 9pnet_virtio: no channels available for device syz [ 63.706470][ T6886] 9pnet_virtio: no channels available for device syz [ 63.708429][ T6886] 9pnet_virtio: no channels available for device syz [ 63.710368][ T6886] 9pnet_virtio: no channels available for device syz [ 63.712331][ T6886] 9pnet_virtio: no channels available for device syz [ 63.714432][ T6886] 9pnet_virtio: no channels available for device syz [ 63.723905][ T1456] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 63.875215][ T1456] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 63.877615][ T1456] usb 8-1: config 0 has no interface number 0 [ 63.881139][ T1456] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.891272][ T1456] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 63.894435][ T1456] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 63.897712][ T1456] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 63.900722][ T1456] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 63.905423][ T1456] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.909274][ T1456] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 63.911770][ T1456] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.917298][ T1456] usb 8-1: config 0 descriptor?? [ 63.919198][ T6880] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 63.921773][ T6880] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 63.934017][ T1456] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 63.986043][ T6900] rdma_op ffff8880297d91f0 conn xmit_rdma 0000000000000000 [ 64.128991][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.132203][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.136223][ T10] usb 8-1: USB disconnect, device number 6 [ 64.140630][ T10] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 64.253631][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.328672][ T6913] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 64.377852][ T6285] usb 5-1: 0:2 : does not exist [ 64.396631][ T6285] usb 5-1: USB disconnect, device number 6 [ 64.520839][ T6929] loop9: detected capacity change from 0 to 8 [ 64.524371][ T6929] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 64.526640][ T6929] loop9: partition table partially beyond EOD, truncated [ 64.529808][ T6929] loop9: p1 size 81768186 extends beyond EOD, truncated [ 64.542284][ T6814] udevd[6814]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 64.605609][ T6814] udevd[6814]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.751067][ T6941] __nla_validate_parse: 1 callbacks suppressed [ 64.751083][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 64.753757][ T6934] kvm: kvm [6933]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000052) = 0x0 [ 64.756188][ T6941] netlink: 'syz.1.264': attribute type 19 has an invalid length. [ 64.761209][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 64.854821][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 64.965475][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.965838][ T5301] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.976709][ T6969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.053686][ T5301] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.056409][ T6987] 9pnet_fd: p9_fd_create_unix (6987): problem connecting socket: ./file1: -111 [ 65.056620][ T6969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.138196][ T6969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.245638][ T6969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.336467][ T6969] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.353398][ T6969] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.373718][ T6969] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.390301][ T6969] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.427106][ T7036] af_packet: tpacket_rcv: packet too big, clamped from 154 to 4294967286. macoff=82 [ 65.660383][ T7070] block nbd0: not configured, cannot reconfigure [ 65.973639][ T835] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 66.059165][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.061240][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.063277][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.067322][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.069280][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.071237][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.073220][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.075885][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.078368][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.080466][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.082618][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.085675][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.087726][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.089813][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.091828][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.094550][ T29] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.099402][ T29] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz1 [ 66.123623][ T835] usb 8-1: device descriptor read/64, error -71 [ 66.248113][ T7127] xt_ecn: cannot match TCP bits for non-tcp packets [ 66.293810][ T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.331209][ T7132] syz.0.301: attempt to access beyond end of device [ 66.331209][ T7132] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 66.335746][ T7132] befs: (nbd0): unable to read superblock [ 66.374596][ T835] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 66.424380][ T7134] sp0: Synchronizing with TNC [ 66.464496][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 66.468377][ T59] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 66.470546][ T59] usb 6-1: can't read configurations, error -61 [ 66.513614][ T835] usb 8-1: device descriptor read/64, error -71 [ 66.541834][ T7134] futex_wake_op: syz.0.302 tries to shift op by -1; fix this program [ 66.593616][ T59] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.623767][ T835] usb usb8-port1: attempt power cycle [ 66.755076][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 66.765894][ T59] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 66.765912][ T59] usb 6-1: can't read configurations, error -61 [ 66.766050][ T59] usb usb6-port1: attempt power cycle [ 66.806226][ T7142] xt_ecn: cannot match TCP bits for non-tcp packets [ 66.899940][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 66.899951][ T40] audit: type=1400 audit(1744321629.841:447): avc: denied { mounton } for pid=7143 comm="syz.2.305" path="/76/file0" dev="proc" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 66.903186][ T7144] fuse: Bad value for 'fd' [ 66.930132][ T7154] vti0: entered promiscuous mode [ 66.956328][ T7156] nbd: must specify at least one socket [ 66.973921][ T835] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 66.979619][ T7159] overlayfs: failed to resolve './file0': -2 [ 66.981225][ T40] audit: type=1400 audit(1744321629.921:448): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.995219][ T835] usb 8-1: device descriptor read/8, error -71 [ 67.014791][ T7163] loop9: detected capacity change from 0 to 8 [ 67.017347][ T40] audit: type=1400 audit(1744321629.961:449): avc: denied { ioctl } for pid=7162 comm="syz.2.311" path="socket:[15871]" dev="sockfs" ino=15871 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 67.017468][ T7163] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 67.026775][ T7163] loop9: partition table partially beyond EOD, truncated [ 67.029443][ T7163] loop9: p1 size 81768186 extends beyond EOD, truncated [ 67.029814][ T7167] netlink: 'syz.0.312': attribute type 4 has an invalid length. [ 67.032717][ T7163] netlink: 'syz.2.311': attribute type 2 has an invalid length. [ 67.038017][ T7163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.311'. [ 67.078401][ T6814] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 67.078604][ T40] audit: type=1400 audit(1744321630.021:450): avc: denied { name_bind } for pid=7170 comm="syz.0.314" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 67.080398][ T6814] loop9: partition table partially beyond EOD, truncated [ 67.089555][ T6814] loop9: p1 size 81768186 extends beyond EOD, truncated [ 67.096774][ T6814] udevd[6814]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 67.103611][ T59] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 67.103751][ T7164] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 67.107944][ T7164] loop9: partition table partially beyond EOD, truncated [ 67.110533][ T7164] loop9: p1 size 81768186 extends beyond EOD, truncated [ 67.125388][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 67.128442][ T59] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 67.130516][ T59] usb 6-1: can't read configurations, error -61 [ 67.137659][ T7177] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 67.139763][ T7177] netlink: 44 bytes leftover after parsing attributes in process `syz.0.316'. [ 67.152735][ T7177] block device autoloading is deprecated and will be removed. [ 67.233787][ T835] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 67.237938][ T7188] 9p: Unknown access argument clienv: -22 [ 67.253688][ T59] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 67.256020][ T835] usb 8-1: device descriptor read/8, error -71 [ 67.274507][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 67.277545][ T59] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 67.279659][ T59] usb 6-1: can't read configurations, error -61 [ 67.281508][ T59] usb usb6-port1: unable to enumerate USB device [ 67.363785][ T835] usb usb8-port1: unable to enumerate USB device [ 67.538343][ T40] audit: type=1400 audit(1744321630.481:451): avc: denied { mount } for pid=7201 comm="syz.0.323" name="/" dev="autofs" ino=15963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 67.544519][ T40] audit: type=1400 audit(1744321630.491:452): avc: denied { watch watch_reads } for pid=7201 comm="syz.0.323" path="/115/file1" dev="autofs" ino=15963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 67.623127][ T40] audit: type=1400 audit(1744321630.561:453): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 67.677154][ T7205] input: syz0 as /devices/virtual/input/input10 [ 67.876290][ T7210] netlink: 'syz.0.325': attribute type 2 has an invalid length. [ 67.878387][ T7210] netlink: 'syz.0.325': attribute type 2 has an invalid length. [ 67.880424][ T7210] netlink: 'syz.0.325': attribute type 1 has an invalid length. [ 67.882490][ T7210] netlink: 'syz.0.325': attribute type 2 has an invalid length. [ 68.001590][ T7218] virtio-fs: tag <(null)> not found [ 68.206081][ T40] audit: type=1400 audit(1744321631.151:454): avc: denied { getopt } for pid=7241 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 68.381884][ T7250] overlayfs: missing 'lowerdir' [ 68.679017][ T40] audit: type=1400 audit(1744321631.621:455): avc: denied { kexec_image_load } for pid=7260 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 69.029917][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802a52d000: rx timeout, send abort [ 69.083934][ T7283] No buffer was provided with the request [ 69.088527][ T40] audit: type=1400 audit(1744321632.031:456): avc: denied { mount } for pid=7282 comm="syz.1.344" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.119013][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 69.133626][ T833] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 69.182613][ T7292] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 69.285535][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 69.289783][ T833] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 69.292643][ T833] usb 5-1: config 179 has no interface number 0 [ 69.293983][ T5301] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 69.296852][ T5301] Bluetooth: hci0: unexpected event for opcode 0x042d [ 69.297189][ T833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 69.301414][ T7299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 69.302751][ T833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 69.310284][ T833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.315265][ T833] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 69.319739][ T833] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 69.322886][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.328039][ T7270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.414973][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 69.457262][ T7310] netlink: set zone limit has 8 unknown bytes [ 69.461516][ T7310] netlink: 'syz.1.352': attribute type 10 has an invalid length. [ 69.464487][ T7310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.352'. [ 69.473838][ T7310] team0: Port device geneve0 added [ 69.500136][ T7312] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.530218][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802a52d400: rx timeout, send abort [ 69.533929][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802a52d000: abort rx timeout. Force session deactivation [ 69.540615][ T5988] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input11 [ 69.577785][ T7314] tun0: tun_chr_ioctl cmd 1074025675 [ 69.579651][ T7314] tun0: persist enabled [ 69.581509][ T7314] netlink: 'syz.1.354': attribute type 30 has an invalid length. [ 69.586833][ T7314] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 69.589748][ T7314] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 69.601683][ T7314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 69.697215][ T7326] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 69.737318][ T1456] usb 5-1: USB disconnect, device number 7 [ 69.737452][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 69.741212][ C3] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 69.741383][ T1456] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 69.870649][ T5301] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 70.029095][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802eb07800: rx timeout, send abort [ 70.032435][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802eb07800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 70.038405][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802a52d400: abort rx timeout. Force session deactivation [ 70.044739][ T5988] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.064303][ T7356] netlink: 'syz.3.366': attribute type 2 has an invalid length. [ 70.088456][ T7358] __nla_validate_parse: 3 callbacks suppressed [ 70.088465][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 70.193859][ T5988] usb 6-1: Using ep0 maxpacket: 16 [ 70.195526][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 70.198224][ T5988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 70.199016][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 70.202591][ T5988] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 70.205941][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.207951][ T5988] usb 6-1: Product: syz [ 70.209138][ T5988] usb 6-1: Manufacturer: syz [ 70.210382][ T5988] usb 6-1: SerialNumber: syz [ 70.212821][ T5988] usb 6-1: config 0 descriptor?? [ 70.216449][ T5988] hub 6-1:0.0: bad descriptor, ignoring hub [ 70.218005][ T5988] hub 6-1:0.0: probe with driver hub failed with error -5 [ 70.222577][ T5988] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 70.276507][ T7369] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 70.278330][ T7369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.280952][ T7369] vhci_hcd vhci_hcd.0: Device attached [ 70.449120][ T7370] vhci_hcd: connection closed [ 70.450579][ T12] vhci_hcd: stop threads [ 70.453193][ T12] vhci_hcd: release socket [ 70.455118][ T12] vhci_hcd: disconnect device [ 70.474707][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'. [ 70.513871][ T835] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 70.516627][ T835] usb 43-1: enqueue for inactive port 0 [ 70.533618][ T6285] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 70.593735][ T835] vhci_hcd: vhci_device speed not set [ 70.655392][ T5988] usb 6-1: USB disconnect, device number 8 [ 70.694912][ T6285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.698253][ T6285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.700940][ T6285] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.705704][ T6285] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.708108][ T6285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.713824][ T6285] usb 5-1: config 0 descriptor?? [ 71.120332][ T6285] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 71.128087][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.130265][ T6285] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 71.130434][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.214800][ T7414] sctp: [Deprecated]: syz.1.380 (pid 7414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.214800][ T7414] Use struct sctp_sack_info instead [ 71.428261][ T7421] syz.0.371: attempt to access beyond end of device [ 71.428261][ T7421] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 71.431934][ T7421] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 71.618280][ T7427] Bluetooth: MGMT ver 1.23 [ 72.030018][ T7437] 9pnet_fd: Insufficient options for proto=fd [ 72.092613][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 72.092624][ T40] audit: type=1400 audit(1744321635.031:482): avc: denied { append } for pid=7439 comm="syz.1.389" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.127971][ T7440] loop2: detected capacity change from 0 to 7 [ 72.132501][ T7440] Dev loop2: unable to read RDB block 7 [ 72.134083][ T7440] loop2: unable to read partition table [ 72.135728][ T7440] loop2: partition table beyond EOD, truncated [ 72.137378][ T7440] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 72.643086][ T7457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 72.651061][ T40] audit: type=1400 audit(1744321635.591:483): avc: denied { write } for pid=7456 comm="syz.2.395" name="file2" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.663589][ T40] audit: type=1400 audit(1744321635.591:484): avc: denied { add_name } for pid=7456 comm="syz.2.395" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.668928][ T40] audit: type=1400 audit(1744321635.601:485): avc: denied { read write } for pid=7456 comm="syz.2.395" name="file0" dev="overlay" ino=36831515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.668951][ T40] audit: type=1400 audit(1744321635.601:486): avc: denied { open } for pid=7456 comm="syz.2.395" path="/101/bus/file2/file0" dev="overlay" ino=36831515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.668975][ T40] audit: type=1400 audit(1744321635.601:487): avc: denied { create } for pid=7456 comm="syz.2.395" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.668998][ T40] audit: type=1400 audit(1744321635.601:488): avc: denied { associate } for pid=7456 comm="syz.2.395" name="#d" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.669018][ T40] audit: type=1400 audit(1744321635.601:489): avc: denied { setattr } for pid=7456 comm="syz.2.395" name="#d" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.669038][ T40] audit: type=1400 audit(1744321635.601:490): avc: denied { rename } for pid=7456 comm="syz.2.395" name="#d" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.708067][ T40] audit: type=1400 audit(1744321635.601:491): avc: denied { reparent } for pid=7456 comm="syz.2.395" name="#d" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.735453][ T7457] could not allocate digest TFM handle crct10dif [ 72.784539][ T7462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.397'. [ 72.839976][ T7466] QAT: Stopping all acceleration devices. [ 73.027444][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 73.029933][ T7493] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 73.061402][ T7498] veth1_macvtap: left promiscuous mode [ 73.062963][ T7498] macsec0: entered promiscuous mode [ 73.064792][ T7498] macsec0: entered allmulticast mode [ 73.071073][ T7498] veth1_macvtap: entered promiscuous mode [ 73.072678][ T7498] veth1_macvtap: entered allmulticast mode [ 73.074845][ T7498] macsec0: left promiscuous mode [ 73.076298][ T7498] macsec0: left allmulticast mode [ 73.077683][ T7498] veth1_macvtap: left allmulticast mode [ 73.080919][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 73.106932][ T29] usb 5-1: USB disconnect, device number 8 [ 73.204286][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.407'. [ 73.224881][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.409'. [ 73.239523][ T7514] sg_write: data in/out 730525833/245 bytes for SCSI command 0xda-- guessing data in; [ 73.239523][ T7514] program syz.2.410 not setting count and/or reply_len properly [ 73.248907][ T7514] sg_write: data in/out 730525833/245 bytes for SCSI command 0xda-- guessing data in; [ 73.248907][ T7514] program syz.2.410 not setting count and/or reply_len properly [ 73.364547][ T68] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 73.367076][ T68] Bluetooth: hci0: Injecting HCI hardware error event [ 73.369624][ T68] Bluetooth: hci0: hardware error 0x00 [ 74.001427][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 74.291673][ T835] IPVS: starting estimator thread 0... [ 74.392555][ T7559] SELinux: ebitmap: empty map [ 74.394901][ T7551] IPVS: using max 46 ests per chain, 110400 per kthread [ 74.400387][ T7559] SELinux: failed to load policy [ 74.480655][ T7570] netlink: 'syz.2.428': attribute type 2 has an invalid length. [ 74.529574][ T7580] usb usb9: check_ctrlrecip: process 7580 (syz.0.430) requesting ep 01 but needs 81 [ 74.532301][ T7580] usb usb9: usbfs: process 7580 (syz.0.430) did not claim interface 0 before use [ 74.858633][ T7596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7596 comm=syz.3.436 [ 74.935094][ T7605] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 74.937187][ T7605] netlink: 'syz.0.440': attribute type 3 has an invalid length. [ 74.939220][ T7605] NCSI netlink: No device for ifindex 0 [ 74.961359][ T7607] Invalid source name [ 74.962547][ T7607] UBIFS error (pid: 7607): cannot open "/dev/sg0", error -22 [ 75.121762][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.127319][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.130092][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.133128][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.135920][ T7622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.139120][ T7622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.188564][ T7626] tmpfs: Bad value for 'mpol' [ 75.283609][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.290652][ T7638] dvmrp1: left allmulticast mode [ 75.444271][ T68] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 75.500503][ T7651] overlayfs: upper fs does not support file handles, falling back to index=off. [ 75.503072][ T7651] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 75.709544][ T7667] __nla_validate_parse: 6 callbacks suppressed [ 75.709554][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 75.714010][ T7667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.458'. [ 75.816482][ T7678] Invalid logical block size (3) [ 75.820440][ T7676] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=271 sclass=netlink_xfrm_socket pid=7676 comm=syz.2.461 [ 75.893083][ T7691] 9pnet_virtio: no channels available for device syz [ 76.056126][ T7718] netlink: 57 bytes leftover after parsing attributes in process `syz.0.473'. [ 76.060884][ T7718] netlink: 64 bytes leftover after parsing attributes in process `syz.0.473'. [ 76.287085][ T7733] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 76.315581][ T7733] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 76.317439][ T7733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.319571][ T7733] vhci_hcd vhci_hcd.0: Device attached [ 76.321613][ T7734] vhci_hcd: cannot find a urb of seqnum 2097152 max seqnum 0 [ 76.324041][ T1145] vhci_hcd: stop threads [ 76.325316][ T1145] vhci_hcd: release socket [ 76.326573][ T1145] vhci_hcd: disconnect device [ 76.441348][ T7737] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 76.443620][ T7737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.481'. [ 76.464709][ T5953] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 76.478686][ T7743] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 76.510703][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 76.539139][ T7751] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 76.539913][ T7752] program syz.2.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.613669][ T5953] usb 5-1: Invalid ep0 maxpacket: 64 [ 76.743843][ T5953] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 76.890089][ T7715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.903709][ T5953] usb 5-1: Invalid ep0 maxpacket: 64 [ 76.906611][ T5953] usb usb5-port1: attempt power cycle [ 76.915521][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 76.950731][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 76.953134][ T7767] netlink: 'syz.3.487': attribute type 19 has an invalid length. [ 76.955352][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 77.059977][ T7778] [U] [ 77.061242][ T7778] [U] [ 77.062043][ T7778] [U] [ 77.062858][ T7778] [U] [ 77.064033][ T7778] [U] [ 77.064849][ T7778] [U] [ 77.065633][ T7778] [U] [ 77.066412][ T7778] [U] [ 77.067275][ T7778] [U] [ 77.068060][ T7778] [U] [ 77.068844][ T7778] [U] [ 77.069631][ T7778] [U] [ 77.070462][ T7778] [U] [ 77.071250][ T7778] [U] [ 77.072063][ T7778] [U] [ 77.072850][ T7778] [U] [ 77.243600][ T5953] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 77.264596][ T5953] usb 5-1: Invalid ep0 maxpacket: 64 [ 77.413662][ T5953] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 77.434015][ T5953] usb 5-1: Invalid ep0 maxpacket: 64 [ 77.439158][ T5953] usb usb5-port1: unable to enumerate USB device [ 77.468158][ T40] kauditd_printk_skb: 48917 callbacks suppressed [ 77.468174][ T40] audit: type=1400 audit(77.364:49409): avc: denied { read } for pid=7786 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 77.479531][ T7788] syz.1.492: attempt to access beyond end of device [ 77.479531][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.487809][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.490537][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.493211][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.497285][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.507638][ T7788] syz.1.492: attempt to access beyond end of device [ 77.507638][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.512369][ T7788] (syz.1.492,7788,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.515705][ T7788] (syz.1.492,7788,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.518487][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.521713][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.527055][ T7788] syz.1.492: attempt to access beyond end of device [ 77.527055][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.530610][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.532793][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.534983][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.538306][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.549193][ T7788] syz.1.492: attempt to access beyond end of device [ 77.549193][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.552847][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.555483][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.557672][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.560584][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.571912][ T7788] syz.1.492: attempt to access beyond end of device [ 77.571912][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.576823][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.579782][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.582768][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.586050][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.591355][ T7788] syz.1.492: attempt to access beyond end of device [ 77.591355][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.596560][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.599460][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.602216][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.605873][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.614415][ T7788] syz.1.492: attempt to access beyond end of device [ 77.614415][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.619250][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.622125][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.625022][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.628203][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.635582][ T7788] syz.1.492: attempt to access beyond end of device [ 77.635582][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.639705][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.641759][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.643934][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.646300][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.654245][ T7788] syz.1.492: attempt to access beyond end of device [ 77.654245][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.658413][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.660542][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.662619][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.666103][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.675248][ T7788] syz.1.492: attempt to access beyond end of device [ 77.675248][ T7788] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.679729][ T7788] (syz.1.492,7788,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.682444][ T7788] (syz.1.492,7788,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.685398][ T7788] (syz.1.492,7788,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.688752][ T7788] (syz.1.492,7788,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.694080][ T7788] (syz.1.492,7788,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.697141][ T7788] (syz.1.492,7788,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.699808][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.702902][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.706848][ T7788] (syz.1.492,7788,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.709599][ T7788] (syz.1.492,7788,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.712233][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.715425][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.719806][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.722752][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.725648][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.728854][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.733029][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.736066][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.738737][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.741883][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.745843][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.748734][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.751543][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.754907][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.764601][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.767532][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.770269][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.773453][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.785267][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.788148][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.790899][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.794223][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.799804][ T7788] (syz.1.492,7788,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.802606][ T7788] (syz.1.492,7788,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.805457][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.808548][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.814458][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.816616][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.818619][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.820933][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.825758][ T7788] (syz.1.492,7788,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.828559][ T7788] (syz.1.492,7788,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.831228][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.833752][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.837326][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.840326][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.840701][ T7776] [U] [ 77.843120][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.847033][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.854645][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.858667][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.861477][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.864171][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.873260][ T7788] (syz.1.492,7788,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.876820][ T7788] (syz.1.492,7788,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.879576][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.882755][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.883032][ T40] audit: type=1400 audit(77.774:49410): avc: denied { relabelfrom } for pid=7795 comm="syz.3.494" name="" dev="pipefs" ino=18838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 77.894222][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.896299][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.898277][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.900634][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.908904][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.911057][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.913273][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.916346][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.924381][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.926574][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.928626][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.930926][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.934238][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.936292][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.938221][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.940520][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.944181][ T7788] (syz.1.492,7788,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.946290][ T7788] (syz.1.492,7788,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.948397][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.950826][ T7788] (syz.1.492,7788,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.954499][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.956609][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.958663][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.961446][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.966604][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.968773][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.970804][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.973458][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.977765][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.979915][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.981997][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.985335][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.988197][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 77.990329][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.995042][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.998345][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.005575][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.007706][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.009676][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.011979][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.015882][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.017940][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.019928][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.022229][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.025437][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.027530][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.029510][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.031824][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.041647][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.044528][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.047268][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.050477][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.056346][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.059214][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.061968][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.064638][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.074108][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.079724][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.081736][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.084654][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.094033][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.096110][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.096532][ T7805] ipt_REJECT: ECHOREPLY no longer supported. [ 78.098092][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.102690][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.105863][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.107928][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.109895][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.112195][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.134131][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.136201][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.138158][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.140710][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.143881][ T7788] (syz.1.492,7788,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.146043][ T7788] (syz.1.492,7788,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.148209][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.150743][ T7788] (syz.1.492,7788,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.154494][ T7788] (syz.1.492,7788,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.157145][ T7788] (syz.1.492,7788,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.159602][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.162618][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.169151][ T7788] (syz.1.492,7788,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.171867][ T7788] (syz.1.492,7788,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.175819][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.178968][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.182588][ T7788] (syz.1.492,7788,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.185677][ T7788] (syz.1.492,7788,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.186196][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.500'. [ 78.187986][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.193188][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.196996][ T7788] (syz.1.492,7788,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.199370][ T7788] (syz.1.492,7788,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.201942][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.204821][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.208976][ T7788] (syz.1.492,7788,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.211723][ T7788] (syz.1.492,7788,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.214628][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.217679][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.222026][ T7788] (syz.1.492,7788,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.224747][ T7788] (syz.1.492,7788,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.227153][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.229023][ T40] audit: type=1400 audit(78.124:49411): avc: denied { getopt } for pid=7812 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.229518][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.235247][ T40] audit: type=1400 audit(78.134:49412): avc: denied { mounton } for pid=7812 comm="syz.3.500" path="/proc/317/task" dev="proc" ino=19919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 78.245343][ T40] audit: type=1400 audit(78.144:49413): avc: denied { module_load } for pid=7812 comm="syz.3.500" path="/sys/kernel/address_bits" dev="sysfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 78.249106][ T7788] (syz.1.492,7788,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.254396][ T7788] (syz.1.492,7788,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.256431][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.258793][ T7788] (syz.1.492,7788,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.264809][ T7788] (syz.1.492,7788,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.269099][ T7788] (syz.1.492,7788,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.271856][ T7788] (syz.1.492,7788,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.275095][ T7788] (syz.1.492,7788,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.286651][ T7788] (syz.1.492,7788,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 78.289431][ T7788] (syz.1.492,7788,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 78.292187][ T7788] (syz.1.492,7788,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.295362][ T7788] (syz.1.492,7788,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 78.471276][ T40] audit: type=1400 audit(78.364:49414): avc: denied { getopt } for pid=7827 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.497460][ T7813] block nbd3: NBD_DISCONNECT [ 78.501027][ T7813] block nbd3: Send disconnect failed -89 [ 78.503149][ T40] audit: type=1400 audit(78.394:49415): avc: denied { allowed } for pid=7829 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.772484][ T7842] kernel profiling enabled (shift: 0) [ 78.842464][ T7848] overlayfs: statfs failed on './file0' [ 78.871818][ T7850] pim6reg: entered allmulticast mode [ 78.874694][ T7850] pim6reg: left allmulticast mode [ 78.894568][ T7838] block nbd3: Disconnected due to user request. [ 78.896451][ T7838] block nbd3: shutting down sockets [ 79.155869][ T7858] netlink: 'syz.2.513': attribute type 2 has an invalid length. [ 79.279203][ T7865] kvm: pic: non byte write [ 79.459907][ T40] audit: type=1400 audit(79.354:49416): avc: denied { create } for pid=7870 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.472539][ T40] audit: type=1400 audit(79.354:49417): avc: denied { bind } for pid=7870 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.569263][ T7885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.215582][ T40] audit: type=1400 audit(80.114:49418): avc: denied { accept } for pid=7895 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.284587][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.287245][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.289385][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.291523][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.297401][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.299582][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.301706][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.307470][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.309619][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.311737][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.314324][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.316456][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.318579][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.322339][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.325253][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.327403][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.329524][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.331654][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.341715][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.344774][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.353697][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.355858][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.357975][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.360091][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.362192][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.364613][ T7921] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 80.372745][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.375081][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.377224][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.379355][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.381302][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.383878][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.386014][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 80.395223][ T6285] hid-generic 0004:FFFFFFFF:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 81.215367][ T8002] __nla_validate_parse: 6 callbacks suppressed [ 81.215378][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 81.225840][ T8002] xfrm1: entered promiscuous mode [ 81.227648][ T8002] xfrm1: entered allmulticast mode [ 81.277600][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 81.377442][ T34] cfg80211: failed to load regulatory.db [ 81.508967][ T8020] netlink: 96 bytes leftover after parsing attributes in process `syz.1.542'. [ 81.604243][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.549'. [ 81.967624][ T8064] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 81.970128][ T8064] overlayfs: missing 'lowerdir' [ 82.005148][ T8064] GUP no longer grows the stack in syz.2.556 (8064): 200000004000-20000000a000 (200000002000) [ 82.011763][ T8064] CPU: 2 UID: 0 PID: 8064 Comm: syz.2.556 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(full) [ 82.011779][ T8064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.011785][ T8064] Call Trace: [ 82.011789][ T8064] [ 82.011793][ T8064] dump_stack_lvl+0x16c/0x1f0 [ 82.011824][ T8064] gup_vma_lookup+0x1d2/0x220 [ 82.011839][ T8064] __get_user_pages+0x234/0x36f0 [ 82.011855][ T8064] ? __pfx___might_resched+0x10/0x10 [ 82.011872][ T8064] ? __pfx___get_user_pages+0x10/0x10 [ 82.011885][ T8064] ? __pfx_down_read_killable+0x10/0x10 [ 82.011904][ T8064] __gup_longterm_locked+0x20d/0x1850 [ 82.011922][ T8064] ? try_get_folio+0x1d2/0x730 [ 82.011933][ T8064] ? __pfx___gup_longterm_locked+0x10/0x10 [ 82.011948][ T8064] ? try_get_folio+0x255/0x730 [ 82.011964][ T8064] gup_fast_fallback+0x183d/0x2650 [ 82.011987][ T8064] ? __pfx_gup_fast_fallback+0x10/0x10 [ 82.012004][ T8064] ? __lock_acquire+0xaa4/0x1ba0 [ 82.012015][ T8064] get_user_pages_fast+0xa7/0xf0 [ 82.012029][ T8064] ? __pfx_get_user_pages_fast+0x10/0x10 [ 82.012043][ T8064] ? __mutex_trylock_common+0xe9/0x250 [ 82.012055][ T8064] __iov_iter_get_pages_alloc+0x83a/0x1f50 [ 82.012073][ T8064] ? rcu_is_watching+0x12/0xc0 [ 82.012085][ T8064] ? trace_contention_end+0xdd/0x130 [ 82.012094][ T8064] ? __mutex_lock+0x1ca/0xb90 [ 82.012107][ T8064] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 82.012119][ T8064] ? pipe_lock+0x64/0x80 [ 82.012130][ T8064] ? __pfx___mutex_lock+0x10/0x10 [ 82.012145][ T8064] ? import_ubuf+0x1b6/0x220 [ 82.012159][ T8064] iov_iter_get_pages2+0xa3/0x100 [ 82.012171][ T8064] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 82.012183][ T8064] ? wait_for_space+0x232/0x2e0 [ 82.012200][ T8064] __do_sys_vmsplice+0xa58/0x1210 [ 82.012213][ T8064] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 82.012226][ T8064] ? __pfx_futex_wait+0x10/0x10 [ 82.012236][ T8064] ? restore_sigcontext+0x4d1/0x6a0 [ 82.012267][ T8064] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 82.012285][ T8064] ? do_syscall_64+0xcd/0x260 [ 82.012297][ T8064] do_syscall_64+0xcd/0x260 [ 82.012311][ T8064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.012322][ T8064] RIP: 0033:0x7f951658d169 [ 82.012331][ T8064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.012340][ T8064] RSP: 002b:00007f95173b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 82.012350][ T8064] RAX: ffffffffffffffda RBX: 00007f95167a5fa0 RCX: 00007f951658d169 [ 82.012356][ T8064] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 82.012362][ T8064] RBP: 00007f951660e730 R08: 0000000000000000 R09: 0000000000000000 [ 82.012368][ T8064] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 82.012373][ T8064] R13: 0000000000000000 R14: 00007f95167a5fa0 R15: 00007fff59c2ba08 [ 82.012390][ T8064] [ 82.493566][ T8089] netlink: 'syz.2.565': attribute type 1 has an invalid length. [ 82.505404][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 82.505413][ T40] audit: type=1400 audit(82.404:49431): avc: denied { connect } for pid=8091 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.509210][ T8089] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.515286][ T8089] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.517704][ T8089] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.520884][ T8089] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.529432][ T8089] bond2: (slave geneve2): making interface the new active one [ 82.534814][ T8089] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 82.540169][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'. [ 82.545055][ T8089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.571255][ T40] audit: type=1400 audit(82.464:49432): avc: denied { setopt } for pid=8097 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.574235][ T8098] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 82.574235][ T8098] program syz.2.567 not setting count and/or reply_len properly [ 82.577786][ T40] audit: type=1400 audit(82.464:49433): avc: denied { connect } for pid=8097 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.615955][ T8103] ALSA: mixer_oss: invalid OSS volume '' [ 82.618559][ T8103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=8103 comm=syz.2.568 [ 82.657691][ T8107] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 82.666867][ T8107] team0: Device hsr_slave_0 failed to register rx_handler [ 82.817247][ T8128] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 82.820203][ T8128] netlink: 224 bytes leftover after parsing attributes in process `syz.2.577'. [ 82.823419][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 82.848173][ T40] audit: type=1400 audit(82.744:49434): avc: denied { setopt } for pid=8131 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.855731][ T40] audit: type=1400 audit(82.754:49435): avc: denied { name_bind } for pid=8133 comm="syz.0.580" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 82.857608][ T8132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.861817][ T40] audit: type=1400 audit(82.754:49436): avc: denied { ioctl } for pid=8131 comm="syz.2.579" path="socket:[19245]" dev="sockfs" ino=19245 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.863884][ T8132] IPv6: NLM_F_CREATE should be set when creating new route [ 82.866919][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'. [ 82.875651][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'. [ 82.929135][ T8136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.580'. [ 83.310897][ T40] audit: type=1400 audit(83.204:49437): avc: denied { map } for pid=8144 comm="syz.3.584" path="socket:[20849]" dev="sockfs" ino=20849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.370276][ T40] audit: type=1400 audit(83.264:49438): avc: denied { getopt } for pid=8146 comm="syz.1.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.411485][ T8156] Bluetooth: MGMT ver 1.23 [ 83.517377][ T8168] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 83.520813][ T8168] SELinux: failed to load policy [ 83.954145][ T8194] syz.1.598 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.095065][ T40] audit: type=1400 audit(83.994:49439): avc: denied { rename } for pid=8190 comm="syz.2.597" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 84.100970][ T40] audit: type=1400 audit(83.994:49440): avc: denied { read } for pid=8205 comm="syz.1.601" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 84.147967][ T8210] overlayfs: failed to resolve './file1': -2 [ 84.150802][ T8210] fuse: Bad value for 'fd' [ 84.190451][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=8215 comm=syz.2.604 [ 84.381718][ T8228] hid-generic 0003:0627:0001.0001: pid 8228 passed too large report [ 85.204098][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.206794][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.209377][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.212418][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.216483][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.219351][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.222172][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.225192][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.227901][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.230601][ T8243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.510205][ T8262] 9pnet_virtio: no channels available for device syz [ 85.512568][ T8262] 9pnet_virtio: no channels available for device syz [ 85.515640][ T8262] 9pnet_virtio: no channels available for device syz [ 85.518553][ T8262] 9pnet_virtio: no channels available for device syz [ 85.520751][ T8262] 9pnet_virtio: no channels available for device syz [ 85.522792][ T8262] 9pnet_virtio: no channels available for device syz [ 85.525643][ T8262] 9pnet_virtio: no channels available for device syz [ 85.528341][ T8262] 9pnet_virtio: no channels available for device syz [ 85.531035][ T8262] 9pnet_virtio: no channels available for device syz [ 85.533906][ T8262] 9pnet_virtio: no channels available for device syz [ 85.536663][ T8262] 9pnet_virtio: no channels available for device syz [ 85.540071][ T8262] 9pnet_virtio: no channels available for device syz [ 85.542820][ T8262] 9pnet_virtio: no channels available for device syz [ 85.546080][ T8262] 9pnet_virtio: no channels available for device syz [ 85.548829][ T8262] 9pnet_virtio: no channels available for device syz [ 85.551557][ T8262] 9pnet_virtio: no channels available for device syz [ 85.554354][ T8262] 9pnet_virtio: no channels available for device syz [ 85.561984][ T8262] 9pnet_virtio: no channels available for device [ 85.603677][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 85.743626][ T34] usb 7-1: device descriptor read/64, error -71 [ 85.837487][ T8267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.841628][ T8267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.854314][ T5301] Bluetooth: hci4: command 0x1003 tx timeout [ 85.854453][ T68] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.983757][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.123941][ T34] usb 7-1: device descriptor read/64, error -71 [ 86.225855][ T8281] __nla_validate_parse: 7 callbacks suppressed [ 86.225866][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 86.233800][ T34] usb usb7-port1: attempt power cycle [ 86.322093][ T8289] netlink: 45 bytes leftover after parsing attributes in process `syz.0.627'. [ 86.327744][ T8289] overlayfs: failed to resolve './file0': -2 [ 86.573574][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 86.583435][ T8301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.593962][ T34] usb 7-1: device descriptor read/8, error -71 [ 86.800315][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 86.802754][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 86.810360][ T8314] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.812768][ T8314] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.815540][ T8314] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.817874][ T8314] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.821359][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 86.824018][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 86.833641][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.850179][ T8316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.636'. [ 86.853473][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.636'. [ 86.853959][ T34] usb 7-1: device descriptor read/8, error -71 [ 86.878346][ T8319] netlink: 596 bytes leftover after parsing attributes in process `syz.0.637'. [ 86.881490][ T8320] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 86.885764][ T8319] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 86.946143][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 86.963869][ T34] usb usb7-port1: unable to enumerate USB device [ 87.207100][ T8339] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.360493][ T8364] lo: entered allmulticast mode [ 87.627113][ T8394] fuse: Bad value for 'group_id' [ 87.628545][ T8394] fuse: Bad value for 'group_id' [ 87.632312][ T8396] fuse: Bad value for 'group_id' [ 87.634228][ T8396] fuse: Bad value for 'group_id' [ 87.935659][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 87.935669][ T40] audit: type=1400 audit(87.834:49457): avc: denied { ioctl } for pid=8449 comm="syz.1.668" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.968083][ T40] audit: type=1400 audit(87.864:49458): avc: denied { getopt } for pid=8454 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.023486][ T40] audit: type=1400 audit(87.914:49459): avc: denied { read } for pid=8454 comm="syz.1.669" path="socket:[22052]" dev="sockfs" ino=22052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 88.304304][ T8464] gtp0: entered promiscuous mode [ 88.351276][ T40] audit: type=1400 audit(88.244:49460): avc: denied { ioctl } for pid=8468 comm="syz.0.671" path="socket:[21290]" dev="sockfs" ino=21290 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.381555][ T40] audit: type=1400 audit(88.274:49461): avc: denied { ioctl } for pid=8475 comm="syz.0.672" path="socket:[21298]" dev="sockfs" ino=21298 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.451507][ T8488] netlink: 'syz.0.674': attribute type 5 has an invalid length. [ 88.566563][ T40] audit: type=1400 audit(88.464:49462): avc: denied { ioctl } for pid=8487 comm="syz.0.674" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.762753][ T40] audit: type=1400 audit(88.654:49463): avc: denied { create } for pid=8502 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.793830][ T8507] xt_l2tp: unknown flags: 17 [ 88.836463][ T40] audit: type=1400 audit(88.734:49464): avc: denied { setopt } for pid=8510 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.847118][ T68] Bluetooth: hci1: unexpected event for opcode 0x000b [ 88.870657][ T8519] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 88.928831][ T40] audit: type=1400 audit(88.824:49465): avc: denied { read } for pid=8531 comm="syz.2.689" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.936489][ T40] audit: type=1400 audit(88.824:49466): avc: denied { open } for pid=8531 comm="syz.2.689" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.936726][ T8533] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 88.994680][ T8540] cgroup: Invalid name [ 89.022883][ T8542] unknown channel width for channel at 909000KHz? [ 89.073586][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 89.223657][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 89.234247][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.237723][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.241196][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.244843][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.249390][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.252641][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.458421][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 89.460486][ T24] usbtmc 6-1:16.0: can't read capabilities [ 89.669846][ T5988] usb 6-1: USB disconnect, device number 9 [ 89.812298][ T8560] xt_limit: Overflow, try lower: 1207959552/384 [ 89.824201][ T8560] : entered promiscuous mode [ 89.913002][ T8566] ptrace attach of "/syz-executor exec"[8567] was attempted by "/syz-executor exec"[8566] [ 89.983247][ T8570] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 89.986677][ T8570] overlayfs: missing 'lowerdir' [ 90.363027][ T8583] dlm: no locking on control device [ 90.583279][ T8598] unknown channel width for channel at 909000KHz? [ 90.592164][ T8598] overlay: filesystem on ./bus not supported as upperdir [ 90.745242][ T8601] team_slave_0: entered promiscuous mode [ 90.755456][ T8600] team_slave_0: left promiscuous mode [ 90.891742][ T8619] netlink: 'syz.1.721': attribute type 11 has an invalid length. [ 90.895064][ T8619] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.984277][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.987705][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.060562][ T8639] macsec0: entered promiscuous mode [ 91.137153][ T8644] tipc: Started in network mode [ 91.138573][ T8644] tipc: Node identity 0a1753091737, cluster identity 4711 [ 91.140673][ T8644] tipc: Enabled bearer , priority 0 [ 91.143926][ T8644] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 91.147694][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.150940][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.159844][ T8643] tipc: Resetting bearer [ 92.014724][ T8643] tipc: Disabling bearer [ 92.101487][ T8676] __nla_validate_parse: 9 callbacks suppressed [ 92.101497][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.741'. [ 92.154339][ T8679] bridge1: entered allmulticast mode [ 92.156053][ T8676] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 92.270602][ T8705] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.272971][ T8705] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.277256][ T8705] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.280154][ T8705] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.282662][ T8705] geneve2: entered promiscuous mode [ 92.284445][ T8705] geneve2: entered allmulticast mode [ 92.523725][ T835] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 92.549143][ T8732] xt_hashlimit: size too large, truncated to 1048576 [ 92.610258][ T8735] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 92.669789][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.673614][ T835] usb 7-1: Using ep0 maxpacket: 16 [ 92.677082][ T835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.679509][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 92.679983][ T835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.682436][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 92.685345][ T835] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.692174][ T835] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 92.695354][ T835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.704282][ T835] usb 7-1: config 0 descriptor?? [ 92.720760][ T8743] ipt_REJECT: TCP_RESET invalid for non-tcp [ 92.750549][ T8744] Cannot find del_set index 85 as target [ 92.847139][ T8741] @ÿ: renamed from bond_slave_0 [ 93.060119][ T8760] netlink: 'syz.0.766': attribute type 2 has an invalid length. [ 93.062264][ T8760] netlink: 244 bytes leftover after parsing attributes in process `syz.0.766'. [ 93.102251][ T8763] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 93.111984][ T835] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 93.112439][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 93.112449][ T40] audit: type=1400 audit(93.004:49490): avc: denied { getopt } for pid=8762 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.114024][ T835] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 93.114038][ T835] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 93.114049][ T835] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 93.114060][ T835] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 93.115487][ T835] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 93.146921][ T835] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 93.149942][ T835] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 93.284749][ T40] audit: type=1400 audit(93.184:49491): avc: granted { setsecparam } for pid=8772 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 93.310537][ T40] audit: type=1400 audit(93.204:49492): avc: denied { write } for pid=8707 comm="syz.2.751" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.310682][ T8708] random: crng reseeded on system resumption [ 93.318362][ T40] audit: type=1400 audit(93.204:49493): avc: denied { ioctl } for pid=8707 comm="syz.2.751" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.422571][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.427778][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.429378][ T8779] block device autoloading is deprecated and will be removed. [ 93.430004][ T40] audit: type=1400 audit(93.324:49494): avc: denied { watch watch_with_perm } for pid=8781 comm="syz.1.773" path="/188/bus" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.432381][ T8779] bio_check_eod: 41 callbacks suppressed [ 93.432390][ T8779] syz.0.772: attempt to access beyond end of device [ 93.432390][ T8779] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 93.449276][ T5988] usb 7-1: USB disconnect, device number 7 [ 93.450874][ T29] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 93.454780][ T29] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 93.458572][ T29] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 93.463241][ T29] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 93.532572][ T8792] bond0: (slave syz_tun): Releasing backup interface [ 93.539315][ T8792] bridge_slave_0: left allmulticast mode [ 93.540923][ T8792] bridge_slave_0: left promiscuous mode [ 93.542595][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.547205][ T8792] bridge_slave_1: left allmulticast mode [ 93.548790][ T8792] bridge_slave_1: left promiscuous mode [ 93.550448][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.555512][ T8792] bond0: (slave bond_slave_0): Releasing backup interface [ 93.561463][ T8792] bond0: (slave bond_slave_1): Releasing backup interface [ 93.575249][ T8792] team0: Port device team_slave_0 removed [ 93.580161][ T8797] netlink: 'syz.1.777': attribute type 10 has an invalid length. [ 93.580494][ T8792] team0: Port device team_slave_1 removed [ 93.585232][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.587335][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.590210][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.592298][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.601563][ T8792] team0: Port device geneve0 removed [ 93.649942][ T8797] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.785250][ T8808] usb usb1: usbfs: process 8808 (syz.1.782) did not claim interface 0 before use [ 93.855220][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 93.875730][ T8822] dlm: no locking on control device [ 93.928270][ T40] audit: type=1400 audit(93.824:49495): avc: denied { getopt } for pid=8821 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.933365][ T40] audit: type=1400 audit(93.824:49496): avc: denied { mounton } for pid=8821 comm="syz.0.787" path="/225/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 94.224704][ T8871] ISOFS: Unable to identify CD-ROM format. [ 94.307616][ T8874] kvm: MWAIT instruction emulated as NOP! [ 94.315151][ T8874] program syz.1.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.424728][ T40] audit: type=1400 audit(94.324:49497): avc: denied { map } for pid=8889 comm="syz.1.799" path="socket:[25892]" dev="sockfs" ino=25892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.431431][ T40] audit: type=1400 audit(94.324:49498): avc: denied { read } for pid=8889 comm="syz.1.799" path="socket:[25892]" dev="sockfs" ino=25892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.518457][ T8894] tipc: Invalid UDP bearer configuration [ 94.518503][ T8894] tipc: Enabling of bearer rejected, failed to enable media [ 94.613580][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 94.669747][ T8898] tmpfs: Unknown parameter '' [ 94.672316][ T40] audit: type=1800 audit(94.564:49499): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.802" name="bus" dev="tmpfs" ino=1125 res=0 errno=0 [ 94.732862][ T8902] netlink: 172 bytes leftover after parsing attributes in process `syz.1.804'. [ 94.764919][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 94.768336][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.770960][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.771837][ T8908] qnx4: no qnx4 filesystem (no root dir). [ 94.774174][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.778693][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.781848][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.785035][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.787641][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.790193][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.793290][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.797502][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.799959][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.803042][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.805777][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.808856][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.811860][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.814603][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.817088][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.820119][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.822648][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.825264][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.828308][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.830900][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.833412][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.836559][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.839914][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 94.842425][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 94.844920][ T24] usb 7-1: Product: syz [ 94.846227][ T24] usb 7-1: Manufacturer: syz [ 94.848829][ T24] usb 7-1: SerialNumber: syz [ 94.856231][ T24] usb 7-1: config 0 descriptor?? [ 94.873392][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 94.969363][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 95.146884][ T8956] overlay: Unknown parameter 'obj_role' [ 95.204431][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.821'. [ 95.365709][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 95.368143][ T8984] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 95.370120][ T8984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.827'. [ 95.476120][ T8992] 9pnet_virtio: no channels available for device syz [ 95.520268][ T8995] trusted_key: syz.0.830 sent an empty control message without MSG_MORE. [ 95.567416][ T9001] xt_ecn: cannot match TCP bits for non-tcp packets [ 95.628851][ T9009] mmap: syz.0.833 (9009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.929737][ T9032] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 95.933785][ T9032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.937217][ T9032] bond0 (unregistering): Released all slaves [ 96.609139][ T9062] syz.0.849: attempt to access beyond end of device [ 96.609139][ T9062] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 96.658235][ T9067] netlink: 'syz.3.851': attribute type 2 has an invalid length. [ 96.839326][ T9079] macvlan0: entered promiscuous mode [ 96.841392][ T9079] batadv_slave_1: entered promiscuous mode [ 97.104804][ T9100] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 97.378097][ T5953] usb 7-1: USB disconnect, device number 8 [ 97.382263][ T5953] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 97.402143][ T9113] netlink: 'syz.0.868': attribute type 2 has an invalid length. [ 97.570461][ T9140] bridge_slave_0: default FDB implementation only supports local addresses [ 97.598116][ T9143] netlink: 'syz.3.877': attribute type 64 has an invalid length. [ 97.600184][ T9143] netlink: 'syz.3.877': attribute type 4 has an invalid length. [ 97.602397][ T9143] __nla_validate_parse: 14 callbacks suppressed [ 97.602404][ T9143] netlink: 152 bytes leftover after parsing attributes in process `syz.3.877'. [ 97.610493][ T9143] program syz.3.877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.642104][ T9146] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 97.644322][ T9146] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.878'. [ 97.787858][ T68] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 97.792015][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.881'. [ 97.862439][ T9168] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 98.027669][ T9177] 9pnet_virtio: no channels available for device syz [ 98.242973][ T68] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 98.384741][ T9193] program syz.0.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.562397][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 98.562408][ T40] audit: type=1400 audit(98.454:49515): avc: denied { map } for pid=9215 comm="syz.0.896" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.571221][ T40] audit: type=1400 audit(98.464:49516): avc: denied { read } for pid=9215 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.786520][ T40] audit: type=1400 audit(98.684:49517): avc: denied { nlmsg_read } for pid=9240 comm="syz.2.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.787916][ T9241] netlink: 224 bytes leftover after parsing attributes in process `syz.2.901'. [ 98.826324][ T40] audit: type=1400 audit(98.724:49518): avc: denied { connect } for pid=9249 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.833075][ T40] audit: type=1400 audit(98.724:49519): avc: denied { read } for pid=9249 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.020492][ T9267] input: syz1 as /devices/virtual/input/input17 [ 99.531408][ T40] audit: type=1400 audit(99.424:49520): avc: denied { read append } for pid=9287 comm="syz.0.906" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 99.905906][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'. [ 99.909304][ T9297] netlink: 'syz.2.908': attribute type 7 has an invalid length. [ 99.912207][ T9297] netlink: 'syz.2.908': attribute type 8 has an invalid length. [ 99.915677][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 99.923728][ T9297] erspan0: entered promiscuous mode [ 99.926909][ T9297] gretap0: entered promiscuous mode [ 99.929840][ T9297] erspan0: left promiscuous mode [ 99.932618][ T9297] gretap0: left promiscuous mode [ 100.209936][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.912'. [ 100.398410][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.402078][ T9318] bridge_slave_1: left allmulticast mode [ 100.404609][ T9318] bridge_slave_1: left promiscuous mode [ 100.406501][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.411064][ T9318] team_slave_0: left allmulticast mode [ 100.414728][ T9318] team0: Port device team_slave_0 removed [ 100.417391][ T9318] team_slave_1: left allmulticast mode [ 100.420662][ T9318] team0: Port device team_slave_1 removed [ 100.423197][ T9318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.426408][ T9318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.430368][ T9318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.435475][ T9315] netlink: 'syz.2.915': attribute type 5 has an invalid length. [ 100.472681][ T40] audit: type=1400 audit(100.364:49521): avc: denied { connect } for pid=9322 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.479497][ T40] audit: type=1400 audit(100.374:49522): avc: denied { read } for pid=9322 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.528284][ T40] audit: type=1400 audit(100.424:49523): avc: denied { write } for pid=9322 comm="syz.0.917" path="socket:[26561]" dev="sockfs" ino=26561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.934271][ T9349] Illegal XDP return value 4294967274 on prog (id 218) dev syz_tun, expect packet loss! [ 100.963473][ T9353] nbd: must specify at least one socket [ 100.993123][ T9355] syz.0.926: attempt to access beyond end of device [ 100.993123][ T9355] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 101.096145][ T9362] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 101.098843][ T9362] netlink: 'syz.0.928': attribute type 2 has an invalid length. [ 101.110794][ T9363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.112127][ T40] audit: type=1400 audit(101.004:49524): avc: denied { shutdown } for pid=9361 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.160801][ T9370] netlink: 72 bytes leftover after parsing attributes in process `syz.0.929'. [ 101.165742][ T9370] IPVS: Unknown mcast interface: netpci0 [ 101.313332][ T9374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9374 comm=syz.0.931 [ 101.399605][ T9378] tipc: Started in network mode [ 101.401517][ T9378] tipc: Node identity 6ec528605e91, cluster identity 4711 [ 101.404519][ T9378] tipc: Enabled bearer , priority 0 [ 101.439449][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 101.441967][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 101.545061][ T9390] sp0: Synchronizing with TNC [ 101.556631][ T9377] tipc: Resetting bearer [ 101.565442][ T9390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9390 comm=syz.2.937 [ 102.409515][ T59] tipc: Node number set to 810821728 [ 102.538097][ T9377] tipc: Disabling bearer [ 102.824880][ T9422] futex_wake_op: syz.3.947 tries to shift op by -1; fix this program [ 102.880059][ T9431] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000198: 0000 [#1] SMP KASAN NOPTI [ 102.883547][ T9431] KASAN: null-ptr-deref in range [0x0000000000000cc0-0x0000000000000cc7] [ 102.886096][ T9431] CPU: 2 UID: 0 PID: 9431 Comm: syz.0.950 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(full) [ 102.890748][ T9431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.893764][ T9431] RIP: 0010:addrconf_add_ifaddr+0x184/0x460 [ 102.895470][ T9431] Code: 8b b4 24 94 00 00 00 4c 89 ef e8 f7 ba 2c ff 4c 8d b0 c5 0c 00 00 48 89 c3 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <0f> b6 04 02 4c 89 f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 3c 02 00 00 [ 102.901009][ T9431] RSP: 0018:ffffc90006997aa0 EFLAGS: 00010203 [ 102.902680][ T9431] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007512000 [ 102.904815][ T9431] RDX: 0000000000000198 RSI: ffffffff89483132 RDI: ffff88804f030338 [ 102.906989][ T9431] RBP: ffffc90006997bb0 R08: 0000000000000000 R09: fffffbfff210ca62 [ 102.909130][ T9431] R10: ffffc90006997aa0 R11: 0000000000000000 R12: 1ffff92000d32f54 [ 102.911306][ T9431] R13: ffff88804f030000 R14: 0000000000000cc5 R15: ffff8880352c9980 [ 102.913373][ T9431] FS: 00007fee5dcb66c0(0000) GS:ffff8880d6bb3000(0000) knlGS:0000000000000000 [ 102.915886][ T9431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.917820][ T9431] CR2: 00007fee5cd72f00 CR3: 000000005d222000 CR4: 0000000000352ef0 [ 102.920170][ T9431] Call Trace: [ 102.921203][ T9431] [ 102.922038][ T9431] ? __pfx_addrconf_add_ifaddr+0x10/0x10 [ 102.923755][ T9431] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 102.925578][ T9431] ? kasan_quarantine_put+0x10a/0x240 [ 102.927201][ T9431] inet6_ioctl+0x103/0x2b0 [ 102.928535][ T9431] ? __pfx_inet6_ioctl+0x10/0x10 [ 102.930101][ T9431] ? tomoyo_path_number_perm+0x18d/0x580 [ 102.931654][ T9431] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.933449][ T9431] sock_do_ioctl+0x115/0x280 [ 102.934880][ T9431] ? __pfx_sock_do_ioctl+0x10/0x10 [ 102.936573][ T9431] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 102.938480][ T9431] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 102.940332][ T9431] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.942473][ T9431] sock_ioctl+0x227/0x6b0 [ 102.943796][ T9431] ? __pfx_sock_ioctl+0x10/0x10 [ 102.945268][ T9431] ? hook_file_ioctl_common+0x145/0x410 [ 102.946997][ T9431] ? selinux_file_ioctl+0x180/0x270 [ 102.948447][ T9431] ? selinux_file_ioctl+0xb4/0x270 [ 102.950063][ T9431] ? __pfx_sock_ioctl+0x10/0x10 [ 102.951513][ T9431] __x64_sys_ioctl+0x190/0x200 [ 102.952942][ T9431] do_syscall_64+0xcd/0x260 [ 102.954344][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.956162][ T9431] RIP: 0033:0x7fee5cd8d169 [ 102.957570][ T9431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.963554][ T9431] RSP: 002b:00007fee5dcb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.966111][ T9431] RAX: ffffffffffffffda RBX: 00007fee5cfa5fa0 RCX: 00007fee5cd8d169 [ 102.968748][ T9431] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 102.970863][ T9431] RBP: 00007fee5ce0e730 R08: 0000000000000000 R09: 0000000000000000 [ 102.973111][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.975567][ T9431] R13: 0000000000000000 R14: 00007fee5cfa5fa0 R15: 00007ffec180cef8 [ 102.978601][ T9431] [ 102.979812][ T9431] Modules linked in: [ 102.981157][ C2] vkms_vblank_simulate: vblank timer overrun [ 102.983282][ T9431] ---[ end trace 0000000000000000 ]--- [ 102.986079][ T9431] RIP: 0010:addrconf_add_ifaddr+0x184/0x460 [ 102.987975][ T9431] Code: 8b b4 24 94 00 00 00 4c 89 ef e8 f7 ba 2c ff 4c 8d b0 c5 0c 00 00 48 89 c3 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <0f> b6 04 02 4c 89 f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 3c 02 00 00 [ 102.993721][ T9431] RSP: 0018:ffffc90006997aa0 EFLAGS: 00010203 [ 102.995512][ T9431] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007512000 [ 102.998002][ T9431] RDX: 0000000000000198 RSI: ffffffff89483132 RDI: ffff88804f030338 [ 103.000469][ T9431] RBP: ffffc90006997bb0 R08: 0000000000000000 R09: fffffbfff210ca62 [ 103.002911][ T9431] R10: ffffc90006997aa0 R11: 0000000000000000 R12: 1ffff92000d32f54 [ 103.005889][ T9431] R13: ffff88804f030000 R14: 0000000000000cc5 R15: ffff8880352c9980 [ 103.008288][ T9431] FS: 00007fee5dcb66c0(0000) GS:ffff8880d6bb3000(0000) knlGS:0000000000000000 [ 103.011008][ T9431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.013004][ T9431] CR2: 00007fee5cd72f00 CR3: 000000005d222000 CR4: 0000000000352ef0 [ 103.015617][ T9431] Kernel panic - not syncing: Fatal exception [ 103.017863][ T9431] Kernel Offset: disabled [ 103.019277][ T9431] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:47:45 Registers: info registers vcpu 0 CPU#0 RAX=000000000009a854 RBX=0000000000000000 RCX=ffffffff8b723439 RDX=ffffed100d4865be RSI=ffffffff8bf46540 RDI=ffffffff8191a7f1 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90865310 R15=0000000000000000 RIP=ffffffff8b721ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6a2df11f98 CR3=0000000029916000 CR4=00352ef0 DR0=0000000000000001 DR1=0000000000000239 DR2=0000000000010001 DR3=000000000000000b DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff59c2bd90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f951660f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f951660f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f951660f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f951660f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f951660f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f951660f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=00000000000001a1 RCX=ffffffff8207fe56 RDX=1ffff11006a1fc7a RSI=ffffffff8207fe71 RDI=ffff8880350fe3d0 RBP=ffff8880350fe3c0 RSP=ffffc9000396fd90 R8 =0000000000000007 R9 =fffffffffffff000 R10=ffff8880350fe3c0 R11=0000000000000000 R12=ffff8880350fe440 R13=00007f6a2d3772d8 R14=ffff88802aca2800 R15=1ffff9200072dfb8 RIP=ffffffff8207fe90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558c69f500 ffffffff 00c00000 GS =0000 ffff8880d6ab3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6a2d3772d8 CR3=000000004aa2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff17b23c10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a2d20f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a2d20f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a2d20f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a2d20f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a2d20f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a2d20f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0d05 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc90006997410 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9ae254a0 R15=ffffffff854e0ca0 RIP=ffffffff854e0d2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fee5dcb66c0 ffffffff 00c00000 GS =0000 ffff8880d6bb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fee5cd72f00 CR3=000000005d222000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5cf7d488 00007fee5cf7d480 00007fee5cf7d478 00007fee5cf7d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5dadd100 00007fee5cf7d440 00007fee5cf7d458 00007fee5cf7d4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5cf7d498 00007fee5cf7d490 00007fee5cf7d488 00007fee5cf7d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000bc1ec RBX=0000000000000003 RCX=ffffffff8b723439 RDX=ffffed100d4e65be RSI=ffffffff8bf46540 RDI=ffffffff8191a7f1 RBP=ffffed1003bd3000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801de98000 R14=ffffffff90865310 R15=0000000000000000 RIP=ffffffff8b721ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c28929f CR3=000000005d222000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5ce0f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5cf7d488 00007fee5cf7d480 00007fee5cf7d478 00007fee5cf7d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5dadd100 00007fee5cf7d440 00007fee5cf70004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee5cf7d498 00007fee5cf7d490 00007fee5cf7d488 00007fee5cf7d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000