last executing test programs: 3.971083395s ago: executing program 2 (id=1747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000000)) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0xffffff3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) 3.819449501s ago: executing program 2 (id=1749): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="b9004d564b0f32b9250a00000f32b8010000000f01c1c4a1fc517170c422d1a6a67268000066b863008ee8470f00d4362e2e66470ffcb1006000000f06b914080000b8b0070000ba000000000f30", 0x4e}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x94) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r2, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x8000001}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.96230328s ago: executing program 2 (id=1754): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000300)={0x18, 0x1, 0x1, 0x0, r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x1, 0x7fffffff, 0x6}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66646185}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x3, 0x2000000000000ca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x10, 0x7, 0x800, 0x5, {{0x42, 0x4, 0x0, 0x0, 0x108, 0x68, 0x0, 0x9, 0x4, 0x0, @local, @remote, {[@generic={0x82, 0xe, "1a6630c31ba14b277b67883e"}, @end, @end, @noop, @rr={0x7, 0x1f, 0x67, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x23, 0xfc, [@local, @broadcast, @loopback, @empty, @local, @empty, @rand_addr=0x64010101, @multicast1]}, @rr={0x7, 0x1f, 0x27, [@multicast2, @broadcast, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1]}, @cipso={0x86, 0x4a, 0x1, [{0x7, 0x2}, {0x6, 0x4, "600e"}, {0x6, 0xf, "2caa58dfe4c501fd0c0495a1e2"}, {0x6, 0xe, "27d1ba19c4bd39f1a9d2d928"}, {0x2, 0x2}, {0x1, 0x2}, {0x6, 0xa, "92b2bfc38b93b6a0"}, {0x6, 0x8, "e317db9a0030"}, {0x5, 0xb, "031ebcad916b55e606"}]}, @lsrr={0x83, 0x2b, 0x16, [@multicast1, @multicast2, @private=0xa010101, @remote, @local, @private=0xa010102, @loopback, @loopback, @loopback, @multicast2]}, @lsrr={0x83, 0xb, 0x4c, [@dev={0xac, 0x14, 0x14, 0x3a}, @local]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@loopback, @empty, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fcdbdf2502000000080002000700000014000680080003007f00000105000200000000004c00068008000300ac1e000108000700", @ANYRES32=r9, @ANYBLOB="14000400fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa060005004e23000008000700", @ANYRES32=r10, @ANYBLOB="050005000700000005000500000000003c000180060001000a000000060001000800000008000300ac1414400500020031000000060001000a000000050002000200000008000700", @ANYRES16=r11, @ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8808) 2.484595003s ago: executing program 2 (id=1759): r0 = syz_io_uring_setup(0x234, &(0x7f0000000080)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.482646153s ago: executing program 2 (id=1761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f0000000a80), &(0x7f0000000b40)=""/31}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r1, &(0x7f00000006c0)=[{0xe, 0x0, 0x2, 0xfd, @tick, {}, {0xe}, @queue={0xa, {0x7, 0x2}}}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000003d773308cb9ea8201400000000070000000014000200fc020000000000000000000008000001080018004e204e24140001002001f0ffffff000061000000000000015b7e9a461abb0a43951c6e91be0aaeccc4c629f6601d72c54823292f8c6a68c6e1815bdfebf6da9c8f9e6f710af4a93e907fe6496ebf3b5f6229cc778da805111d9907abbe5075dd39a296c391905d8c0974b401504505670a86731ab13c1e374805b534b702b615af76a27e3ce7"], 0x4c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020010000000000000000e0ff0000000114000200fc0200000000000000000000000000000ed98351f79e94010b943869baf51ddefb9f0a08653640a8f4e93cb9741a379e58beb9e17b9bb9c8b9b17a8f92107737f8c6a194f0d9886e580fc5e2fd5a6a93899eb23b3565dcd64e2118d500dbe30c903029fd7a0cdd46aca7331359b1e13b7f9641210b75e2858b2c91309c47a89671a1104c130e086753fbfabce337a42379ca819c6d4eee24c498"], 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f0000000a80), &(0x7f0000000b40)=""/31}, 0x20) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) write$sndseq(r1, &(0x7f00000006c0)=[{0xe, 0x0, 0x2, 0xfd, @tick, {}, {0xe}, @queue={0xa, {0x7, 0x2}}}], 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000003d773308cb9ea8201400000000070000000014000200fc020000000000000000000008000001080018004e204e24140001002001f0ffffff000061000000000000015b7e9a461abb0a43951c6e91be0aaeccc4c629f6601d72c54823292f8c6a68c6e1815bdfebf6da9c8f9e6f710af4a93e907fe6496ebf3b5f6229cc778da805111d9907abbe5075dd39a296c391905d8c0974b401504505670a86731ab13c1e374805b534b702b615af76a27e3ce7"], 0x4c}}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020010000000000000000e0ff0000000114000200fc0200000000000000000000000000000ed98351f79e94010b943869baf51ddefb9f0a08653640a8f4e93cb9741a379e58beb9e17b9bb9c8b9b17a8f92107737f8c6a194f0d9886e580fc5e2fd5a6a93899eb23b3565dcd64e2118d500dbe30c903029fd7a0cdd46aca7331359b1e13b7f9641210b75e2858b2c91309c47a89671a1104c130e086753fbfabce337a42379ca819c6d4eee24c498"], 0x5c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) (async) 2.404777716s ago: executing program 2 (id=1764): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x100, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xa, 0xffe0}, {0x0, 0xffc2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7bd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048081}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup3(r0, r1, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) r3 = socket$netlink(0x10, 0x3, 0x7) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind']) (rerun: 64) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) (async) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001400)=""/215, 0x1b}], 0x1) r8 = socket$kcm(0x2, 0xc, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000001c0)={0x9000, 0x8d800, 0x1}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2.09418951s ago: executing program 0 (id=1770): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000140)=0xfffffffd, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f00000000c0)) close(r0) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) (async) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) (async) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_CONNECTINFO(r10, 0x40085511, &(0x7f0000000100)) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) (async) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)=@newtclass={0x54c, 0x28, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0xc}, {0xfff1, 0x5}, {0x9, 0xfff3}}, [@c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x0, 0xa48, 0x0, 0xfeff, 0x9}}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa, 0x1, 0x0, 0xe, 0x75a00000, 0x7ff, 0x3, 0x39, 0x7, 0x5, 0x8, 0x1, 0x0, 0x1000, 0x2, 0x7, 0x2a2, 0x1, 0x7f, 0x6, 0x7b8, 0x9, 0x5, 0x101, 0x2f, 0xffffff01, 0x6, 0xa421, 0x6af8859d, 0x9, 0x3, 0x6, 0x2, 0x5, 0x9, 0x6dc, 0x1, 0x4, 0x3, 0x9, 0x400, 0x5, 0x9, 0x3, 0xffffffff, 0x4, 0x8c, 0xff, 0x4, 0xfffffffd, 0x4, 0x2fa, 0x3, 0x2, 0xa, 0x9, 0x5, 0x1, 0x1ff, 0xfffffffd, 0xc4ae, 0x3, 0xd, 0x4, 0x8, 0xc, 0x7, 0x9e3, 0x5, 0x6, 0x3, 0x7df8, 0x100000, 0x0, 0x9, 0x0, 0x4, 0x80, 0x8, 0xfff, 0x52, 0x0, 0x6, 0x4, 0x6, 0x0, 0xb, 0xf23b, 0x0, 0x3c1, 0x10000, 0x8001, 0x4, 0x3, 0x1, 0xf3, 0x5, 0x0, 0x4, 0x6, 0xff, 0xffff, 0xe2, 0x5, 0x3, 0x8, 0x0, 0x3, 0x800, 0x7, 0xa000, 0x40, 0x8, 0x401, 0x2, 0x9, 0xa, 0x8, 0xb14, 0x3ff, 0x10000, 0x8, 0x112c5a3c, 0xb7, 0x2, 0x4, 0x6, 0x7f, 0x81, 0x5, 0x1000, 0x10, 0x2, 0x6, 0x80000000, 0x400, 0x4, 0x8, 0x5, 0x49, 0xcee4, 0x7738, 0x10000, 0x2, 0x3b04, 0x9, 0xa, 0x935e, 0xdc1, 0x0, 0x8232, 0x6, 0x5c709967, 0x1, 0xffffffff, 0x2, 0x0, 0x7, 0x7fffffff, 0x502, 0x4, 0x5, 0x635, 0x9, 0x3, 0x5, 0x31, 0x1, 0x0, 0x4b95c4c3, 0x7f, 0xf, 0x3, 0x6, 0x401, 0x9, 0xfff, 0xf, 0x2, 0xc, 0x8, 0x3, 0x1, 0x80000001, 0x800, 0x9, 0x9, 0x80000000, 0xfff, 0x0, 0x3, 0x3, 0x4, 0xf4c2, 0x1000, 0x9, 0x8, 0x6, 0xffffffff, 0xe, 0x5, 0x100, 0x9, 0x0, 0x81, 0xffffffff, 0x2, 0xffff, 0x10000, 0x7, 0x8, 0x3, 0x7f, 0x1, 0xd7b, 0x1ff, 0x7ff0000, 0x5, 0x6, 0x9, 0xffff, 0x20, 0x4, 0x0, 0x0, 0x6, 0x1, 0x1, 0xcdce, 0x56800000, 0x4, 0xb, 0x1, 0xffffffff, 0xff, 0x9, 0x1, 0xee, 0x0, 0x9, 0x1000, 0x80000000, 0x0, 0x9, 0x774b, 0x4, 0x1000, 0x9, 0xffffffff, 0x6, 0x3, 0x8, 0x2, 0xfffffff2, 0x1d7de323, 0x8]}]}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xc, 0x1, 0x5, 0x2a, 0x0, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x92, 0x6, 0x0, 0x9, 0x9, 0x7d6a}}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r3}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x70}}}, @c_cbq={{0x8}, {0x84, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x0, 0xffff, 0x5, 0x6, 0xfffffff9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x3, 0x16, 0x4, 0x9, 0x4, 0x3, 0xd}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x10}, 0x10000, 0x9}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x0, 0x0, 0x3, 0x639567a, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x7, 0x7, 0x3, 0xd6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x7, 0x2, 0x3, 0x10001, 0x546}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x28, 0x1, 0x8, 0x0, 0x5, 0x3ff, 0x5, 0x64000000}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}]}, 0x54c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f0000000200)) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 1.954325934s ago: executing program 0 (id=1771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x7, 0x50, '\x00', 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf540000005c8c000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d3523f3b314bf0cdc3dd3aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 1.953794472s ago: executing program 0 (id=1772): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40380) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x3, 0x3b, "f700e4000000e9ffffffffffffff00", "b1808caa", "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1a0a, 0x1}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1114, 0x2}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) (async) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40380) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x3, 0x3b, "f700e4000000e9ffffffffffffff00", "b1808caa", "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1a0a, 0x1}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r7, r6, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1114, 0x2}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.854475566s ago: executing program 0 (id=1773): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r0, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="4df069d64970996b9472d4", 0xb}], 0x10000000000001bf) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r4, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x7d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000080) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r7}, 0x10, &(0x7f00000005c0)={&(0x7f0000000500)=@can={{0x1, 0x1, 0x0, 0x1}, 0xa, 0x1, 0x0, 0x0, "e300000000002000"}, 0x10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r9, &(0x7f0000000180)=""/174, 0xae) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x48004) r13 = dup2(r11, r10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) sendmsg$can_j1939(r13, &(0x7f0000000440)={&(0x7f0000000080)={0x1d, r7, 0x1, {0x2, 0xf0, 0x1}}, 0x18, &(0x7f0000000340)={&(0x7f0000000280)="edf753bccc0bd3de0b7653c9b97499d696c75e6b408c7c6c4c5d7c8d21226954d3284779363b7715b2d5d8b8e6975cd4e74c3de4d0a95782bc1851bd49a4f9bb9d0817edb0dbea0db205d293c81c4ec165f4857bfd454b2fef0579a72431cd3bd67a442858b969cd7d87fcfb21e9fc134db5bea870b4d7beff338903634ea7e8902ab361a7b04c6c9eb11de7000f4b91d8a7e1283defabdb709642f0399a15ddcf67ad8b", 0xa4}, 0x1, 0x0, 0x0, 0x8059cfe800c78852}, 0x48000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$NFT_MSG_GETOBJ(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="ffff00000000020000000800034000020001"], 0x1c}}, 0x4040040) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r8, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c0002800600020092350000050017000000000008000100", @ANYRES32=r8, @ANYBLOB="5bb718e97cf4620f9d5d4b2cf136476a71c568e1b0902a71e43618433bf56f387f8d237b20efaa99e453717c14089d9991f06c28706d7e99856faf1c17933d196de026688d00cb38103bd57f23439009a44349441e34cb1cc940fcd184f27e8bd61c0077faadbb82fcfe30b24333c4c80c2e51afdacaf15e97e92195151d77adb54f6f7bc2eb3e5623744970fab473bfda935c6be2abcb"], 0x4c}}, 0x0) 1.762995927s ago: executing program 0 (id=1774): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x16) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRESHEX=r0, @ANYBLOB="00000000da44000024003a8020000a8013fffd00fe8000000009000000020040000000000500080002000000140003007866726d30", @ANYRES16=r1], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0xaf759e90cd61cd21) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b0000efff0000000000000007000000000000a000479f262a59c76ccb746dc19aff3f097367b9a9d2c7105dc47c6869354fa0a49d1100000000008e3a4aca532fbe06ac2f47d42475ffeb4f", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000400"/28], 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b0000efff0000000000000007000000000000a000479f262a59c76ccb746dc19aff3f097367b9a9d2c7105dc47c6869354fa0a49d1100000000008e3a4aca532fbe06ac2f47d42475ffeb4f", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000400"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)='%-010d \x00'}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000100"/28], 0x50) r6 = syz_open_dev$vcsn(&(0x7f0000000400), 0x55, 0x40081) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b54f964860d79aceb45a253cb88140d721fe5d6840ff070000deac24ef", @ANYRES16=r8, @ANYBLOB="310704000000fedbdf2538000000080001007063690011000200303030303a30303a31302e300000000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x60}, 0x1, 0x2, 0x0, 0x80}, 0x0) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="220928db7000fdb0491800007063f1e2879fefc13a30313a31"], 0x30}, 0x1, 0x0, 0x0, 0x28008005}, 0x4000010) (async) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="220928db7000fdb0491800007063f1e2879fefc13a30313a31"], 0x30}, 0x1, 0x0, 0x0, 0x28008005}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbe1c, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @exit, @jmp={0x5, 0x0, 0x6, 0x7, 0xa, 0x18}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x0, 0x3, 0x2, 0xa, 0x6, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r11, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r11, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r11, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r11, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r11, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) (async) r12 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) ioctl$CEC_DQEVENT(r12, 0xc0506107, &(0x7f0000000040)={0x0, 0x0, 0x0, @lost_msgs}) sendmmsg$inet6(r10, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @loopback={0x0, 0x7ffffffe}, 0x5}, 0x1c, 0x0}}], 0x1, 0x20000001) (async) sendmmsg$inet6(r10, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @loopback={0x0, 0x7ffffffe}, 0x5}, 0x1c, 0x0}}], 0x1, 0x20000001) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6) open_by_handle_at(r2, &(0x7f0000000740)=@raw={0x70, 0x71, {"d6fd72e44b94a5e9e309721daa0965a0a06f61e0d8c89968dd59cc661fd6453d07e84624e3a21ada431e24a3475fd24e596ca2d4000f84fafbb970f0a18f9446e67dcba2f8d7d492f16d92339b21bf45a798f1610c8edd64c0705b0dd501b267e1e79849a86a9c2cd1f4710179"}}, 0x2) (async) open_by_handle_at(r2, &(0x7f0000000740)=@raw={0x70, 0x71, {"d6fd72e44b94a5e9e309721daa0965a0a06f61e0d8c89968dd59cc661fd6453d07e84624e3a21ada431e24a3475fd24e596ca2d4000f84fafbb970f0a18f9446e67dcba2f8d7d492f16d92339b21bf45a798f1610c8edd64c0705b0dd501b267e1e79849a86a9c2cd1f4710179"}}, 0x2) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b40)={0xdc, r13, 0x824, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3a4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x47fc}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x16, 0x3, "50d8f43991b7055d6958d0e149da26f6f918"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ID={0x17, 0x3, "5a7d5bdc89c6c05cbd65914336334a32e1b6d3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, &(0x7f00000035c0)='quota') 883.839518ms ago: executing program 0 (id=1786): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000f40)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x98, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x9, 0x5, 0x9, 0x9, 0x2]}, @CTA_LABELS={0x4}]}, 0x98}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001400000000000000000090003"], 0xd4}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="110000000400fffb0400a142c346186087dc0000455ace21f3871f6b65516173f53f405a75d0a18db13d6cab1c132b8a4b8df69679158356dff885b321c9108e1838888931f2f2cc881befcdfa216e641d6f8e6593443cdae8e54b9ded89757ee119d599ac081936d8afb2a42ec24ca561bb2867acf58260163f8f2a20d8a05eef83c0407d43a383c5db44569727d752edc7538a8b37fc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f00000003c0), 0x0}, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffffffffffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="01022abd7000fadbdf250900000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20021010}, 0x8080) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000280)=0x2) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000001300)}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = dup(r4) r12 = syz_open_dev$dri(&(0x7f0000001380), 0x4, 0xe0000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r13, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r12, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0x5, 0x0, 0x0, r14}) write$UHID_INPUT(r11, &(0x7f00000001c0)={0xf, {"a2e3ad21e08eeb661b5d350987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496b17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56f0700dcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 324.71935ms ago: executing program 1 (id=1790): r0 = socket$inet(0xa, 0x801, 0x84) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x58, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2000, @fd=r1, 0x6, 0x0, 0x0, 0x8, 0x0, {0x3}}) 323.84397ms ago: executing program 1 (id=1791): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f", 0x7) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) socket$unix(0x1, 0x2, 0x0) 244.098893ms ago: executing program 1 (id=1793): r0 = socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "23f39b62b1578fcd9033f17737021338"}]}}}}}}}}, 0x0) (async) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5883, 0x10, 0x3, 0x2c1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x7f, "391e4ad9799dae82964c606546ff2bca276df03e8088408d6fbe2e53d12e42721fdd50da6eb13407e0a38e20b2dd0a72bc7e604fc2cf86cbe92742e76c22b7288ce435349a700827aecec2fba797ed8cdf3c14d18e91a43d9526db7e98ff712b0181eb0ec49c119036d45038ee8594d7f5eab5931377b224acfbc74ae6fea2"}, &(0x7f0000000180)=0x87) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r5, 0xfffffffd}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) write$binfmt_script(r7, &(0x7f0000000400)={'#! ', './file0', [{}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '/dev/net/tun\x00'}], 0xa, "7fef309471ab43f75d9cc5d5b4a00089e883a4f15b69872ca2fa3a7f7fca21edf60037f916ef029b25e12a13dcc090cc4c475e24a5bb4103c69bbea3c7e758b797d85f0bb8c6285ad1f5dc170de53a10d319a29b1fd094a14235605f8b7d84af43c882b2b36c33a6a1c8e434dfa807c6f536a210c3ef8cf8a73141a1a205f759f58414074a107c4ee953525a5445ee56dc51bd658ebd5ba3bf9f1dfffd12a802f097c634fecd7fc645b43304cbbe554f22e68962a1a86c084094edf8a4a22c07edcb12f75f45a094ff8cab9b6c5101f5b52d8e33b91e8b8a8958a0"}, 0xfb) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001a00010000000000000000000a", @ANYBLOB="3fffe967b84f3c94f15cc57cc0995ba05c18e944c09e10dfe1c10a121310baa4d18bde3bf45d7c3a2cff4239b7b9740e25c6c601f3a4d5d9a887da36a844e2d6f8d82100201344ad610fdaef6dc6a5954d00", @ANYBLOB="c38a5992b24e4ecef8d9115ea1dc94a7593897f794e094b1392278b73318e28341e0704f93c734f6c1bc700730ca30f7c3156944ddb4ddaa5e88c1d29b91e7f4928b7609504cd5093633810a6ce36700387dc3badd0af7452c02887d9b6a1577f73238d3aa14c5d475ffcf059ed3b8beecbefdf556d54e2e79ddfd3cbd49826c36f72f00b4989ed8fb9606568d1bc6e8a3e5791cfe6f7e7011f3238111ff916b87832fc72862f001dcea914ebb2251e830b62b4ce13f275e8c6dd1d756c2c609a71daacfa1b466680bac61e46fd5c494d55e27cd58036374c48dca6eef59ee", @ANYRESHEX=r7], 0x38}}, 0x0) (async) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a090000cd95a69c00000000000000000000ffff"], 0x4c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r1, 0x3516, 0x701f, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) 194.549613ms ago: executing program 3 (id=1794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x859b}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaabbb86dd6012000800703afffe8000000008000000000000000000bbff02000000000000000000000000000186009078ff0000000000000000000000030aa78ce54004598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001ffffffffff60000000000000"], 0x0) 194.279451ms ago: executing program 1 (id=1795): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) keyctl$join(0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 193.442875ms ago: executing program 3 (id=1796): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140)=0x8, 0x4) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000180)={'trans=virtio,', {[{@access_user}]}}) 94.468181ms ago: executing program 3 (id=1797): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc, 0x7}}}, 0x24}}, 0x78d3c6816a7ebac5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc, 0x7}}}, 0x24}}, 0x78d3c6816a7ebac5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4) (async) 94.1196ms ago: executing program 3 (id=1798): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x581400, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)) read(r0, &(0x7f0000000080)=""/150, 0x96) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x411, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_disconnect={0x4}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x9, 0x2}) r4 = eventfd(0x7) close_range(r4, r2, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x8, 0x0, [{0x290, 0x0, 0x8}, {0x24f, 0x0, 0x101}, {0x60, 0x0, 0x120b3bc7}, {0x239, 0x0, 0x2}, {0xa3f, 0x0, 0x4ef}, {0x2d7, 0x0, 0x2}, {0x33a, 0x0, 0xd}, {0xa84, 0x0, 0x91e0}]}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000300)=0x1, 0x2) r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8800, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x8, 0xe000, 0x10001, 0x5, 0x5, 0x6, 0x7, 0xffff, 0xfc1, 0x48cc, 0x2, 0xffffffff, 0x8, 0xb, 0xf0e, 0x4], 0xeeef0000, 0x8040}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x401, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = getuid() fstat(r9, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r10, r11) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000940)={0x1, 0x140, 0x200, &(0x7f0000000540)=[0x2a9588c9, 0x6, 0x1, 0x1, 0x9, 0x5, 0x1, 0x6, 0x56e2, 0x1, 0xf, 0x400, 0x0, 0xffffffffffffffff, 0xe85e000, 0x80, 0x7, 0x10, 0x2, 0x8000000000000000, 0x2, 0x4, 0x3, 0x7, 0x4, 0xffffffffffffff80, 0x4, 0xc00000000000, 0xd00, 0x7fffffff, 0x800, 0x321, 0x5d, 0x0, 0xbc6c, 0xc1, 0x6, 0x6fb, 0xbc, 0x3, 0x8, 0x1, 0x3, 0x8, 0x9, 0x8, 0x7, 0x2, 0xb, 0x4, 0x1, 0x2, 0x39, 0x100000000, 0x401, 0x3, 0x91, 0xd, 0x7fff, 0x10001, 0x9, 0x2, 0x2, 0x58, 0xb5, 0x1, 0xfffffffffffffff5, 0xfffffffffffffffe, 0x10001, 0x200, 0x401, 0xc93d, 0x6, 0x3b, 0x5, 0x42, 0x6, 0xf, 0x8e, 0x100, 0x8ff, 0x5ea5, 0x1, 0x5, 0xbb, 0x49bf, 0x19, 0x7fff, 0x0, 0xd, 0x1, 0x3, 0x7, 0x0, 0x8, 0x5000000000000000, 0x3a, 0x6, 0x1, 0x0, 0x7, 0xd0, 0x2e1b, 0x3, 0xd96, 0x7, 0x2, 0x7, 0x3, 0x3, 0x8, 0x8000, 0x7a37, 0x3, 0xe, 0x3, 0xfffffffffffffabb, 0xadd, 0x8, 0x10000, 0x5, 0x5, 0x6, 0xaf1, 0x9, 0x8001, 0x6, 0xfffffffffffffffa]}) fsetxattr$security_ima(r7, &(0x7f0000000980), &(0x7f00000009c0)=@v1={0x2, "2e1093c2926a8d8a9e14953e1e"}, 0xe, 0x3) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000a00)={0xa4, 0x0, 0x1}) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000b40)={r9, r8, 0xb65, 0x93, &(0x7f0000000a80)="8dd25a2f03989cba49bcfb3547ed0ece125bae3414313d7673472fa4d6d75ac61bfd72d853e7d0439b9400bf4b427e454fb3bd8db48a9ed6307d541c7d3027194ff4ae8292cca816d6986c232a4b37df7db5ec72268767d6faf50625e26b17096f632394437a091e0a72f1ed7858aa7d03ed264ec974e135961e033a40d852e889614b21df5cc1a15d4173eb6d1207bf5d3936", 0x3, 0x0, 0x1, 0x400, 0xd, 0x0, 0x8, 'syz0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000000c00)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f0000000c40)={0x18, r12}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001080)={0x0, "28bf256495fcb36a5b5e06862804cd20"}) 1.718824ms ago: executing program 3 (id=1799): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000022c0), 0x0, 0x40800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001014000125bd7000fedfdf2508004b0013ef6900080001000100000008004a0002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x48801) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.109713ms ago: executing program 1 (id=1800): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000500)={0x6, 0x4, 0x0, 0x8001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x8200, 0x401, 0x9}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000500)={0x3ff, 0x0, 0x4, {0x9, @raw_data="e63e09b33e64369d8dae60e1e6e735d73f64ea1b51edd82d923da428ca836d3295d0c9b12d3bb819c276dfe5003698b901165421f38b48f2e58e6d50f68960de10a1d05064227456803708d41adaff2023ccc507000000b81433647f5d5aee7df2e720448f2fbfc7684178ad817581d3180327796bbec48401556e4429464b7514dcc765288d05c22b02aec6e7cf0e0991b0d8c7bae62d5c2c67542265f7197d9d534aa3f543e7563ccc4bd3e3e7f137e4fd5538e16f7aa9f3b545ae927ed6afc98f34332d0d43d7"}, 0x9}) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f00000000c0)={0x2, 0x22, &(0x7f0000000140)="d7ee8e35ce8e06a52910c1243b9b2b281f29e0d602814439b4ccbc88dce2a9189fd19705fd8bed203c871642d2e193bb13a25f89de85252331afb74d36cd0fc072ed67cb19365953249d2b62f391f05b759e7ca0c9b3f925330959dfa804554dbe6a4631405e1a65a196b13f532b13e0a432387aa1fd18a46d3491dbe22437909f", {0x3, 0x80000000, 0x31435641, 0x6, 0x5, 0x0, 0x1, 0x10001}}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x22, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}}) 928.23µs ago: executing program 3 (id=1801): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$getflags(r1, 0x1) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 0s ago: executing program 1 (id=1802): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005200010000000000000000001c000015140001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040014) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) kernel console output (not intermixed with test programs): 2637][ T34] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 65.647090][ T34] usb 5-1: config 168 interface 0 has no altsetting 0 [ 65.650635][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 65.653219][ T34] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 65.657510][ T34] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 65.661477][ T34] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.666054][ T34] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 65.669679][ T34] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 65.673329][ T34] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 65.677624][ T34] usb 5-1: config 168 interface 0 has no altsetting 0 [ 65.681961][ T34] usb 5-1: string descriptor 0 read error: -22 [ 65.684086][ T34] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 65.687237][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.695553][ T34] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 65.912761][ T24] usb 5-1: USB disconnect, device number 3 [ 65.953020][ T6804] veth1_macvtap: left promiscuous mode [ 65.964509][ T6803] : entered promiscuous mode [ 66.389656][ T6848] tipc: Started in network mode [ 66.391293][ T6848] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 66.393963][ T6848] tipc: Enabled bearer , priority 10 [ 66.564706][ T6876] block nbd1: Attempted send on invalid socket [ 66.567436][ T6876] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 66.570800][ T6876] XFS (nbd1): SB validate failed with error -5. [ 66.592801][ T6874] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 66.593931][ T6882] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 66.613585][ T6874] vlan2: entered promiscuous mode [ 66.616869][ T6874] vlan2: entered allmulticast mode [ 66.618687][ T6874] hsr_slave_1: entered allmulticast mode [ 66.657211][ T6874] team0: Port device team_slave_0 removed [ 67.029234][ T6907] __nla_validate_parse: 19 callbacks suppressed [ 67.029247][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 67.229859][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'. [ 67.371967][ T6873] overlayfs: statfs failed on './file0' [ 67.506831][ T6765] tipc: Node number set to 8432298 [ 67.509051][ T6909] kvm_intel: kvm [6908]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x65b7 [ 67.525819][ T6909] kvm: kvm [6908]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x3b7 [ 67.528702][ T6909] kvm: kvm [6908]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x14a2 [ 67.541988][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 67.541998][ T40] audit: type=1326 audit(1756139876.555:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.2.273" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x0 [ 67.554009][ T6909] kvm: kvm [6908]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xac3c [ 67.577713][ T6909] kvm: kvm [6908]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7b28 [ 67.580623][ T6909] kvm: kvm [6908]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfe14 [ 67.612946][ T6947] overlayfs: failed to clone upperpath [ 67.626251][ T40] audit: type=1400 audit(1756139876.635:437): avc: denied { mount } for pid=6946 comm="syz.3.274" name="/" dev="ramfs" ino=13021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 67.646201][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 67.780783][ T6954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.276'. [ 67.842488][ T6958] could not open pipe file descriptor [ 68.022231][ T6964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.279'. [ 68.158154][ T6979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.284'. [ 68.160995][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 68.230212][ T40] audit: type=1400 audit(1756139877.245:438): avc: denied { read append } for pid=6983 comm="syz.1.286" path="/61/file0/net_prio.prioidx" dev="9p" ino=37617800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.239710][ T40] audit: type=1400 audit(1756139877.255:439): avc: denied { setattr } for pid=6983 comm="syz.1.286" name="file0" dev="9p" ino=37617725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.247519][ T40] audit: type=1400 audit(1756139877.255:440): avc: denied { map } for pid=6983 comm="syz.1.286" path="/61/file0/net_prio.prioidx" dev="9p" ino=37617800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.257009][ T6988] netfs: Couldn't get user pages (rc=-4) [ 68.340348][ T40] audit: type=1400 audit(1756139877.355:441): avc: denied { create } for pid=7006 comm="syz.3.291" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.348315][ T40] audit: type=1400 audit(1756139877.355:442): avc: denied { mounton } for pid=7006 comm="syz.3.291" path="/90/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.356607][ T40] audit: type=1400 audit(1756139877.355:443): avc: denied { append } for pid=7006 comm="syz.3.291" name="file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.363547][ T40] audit: type=1400 audit(1756139877.355:444): avc: denied { open } for pid=7006 comm="syz.3.291" path="/90/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.371778][ T40] audit: type=1400 audit(1756139877.355:445): avc: denied { ioctl } for pid=7006 comm="syz.3.291" path="/90/file0" dev="tmpfs" ino=516 ioctlcmd=0x4806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.402409][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 68.448370][ T7014] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 68.456803][ T7014] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 68.497947][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 68.549972][ T7034] Bluetooth: MGMT ver 1.23 [ 68.654150][ T7045] overlayfs: failed to decode file handle (len=2, type=0, flags=0, err=-22) [ 68.749206][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 68.784325][ T7059] program syz.0.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.795824][ T7059] ./file0: Can't lookup blockdev [ 68.903322][ T7067] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 68.905440][ T7067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.908150][ T7067] vhci_hcd vhci_hcd.0: Device attached [ 68.911463][ T7067] netlink: 'syz.0.309': attribute type 21 has an invalid length. [ 68.980400][ T7069] vhci_hcd: connection closed [ 68.981154][ T12] vhci_hcd: stop threads [ 68.984251][ T12] vhci_hcd: release socket [ 68.986216][ T12] vhci_hcd: disconnect device [ 69.354949][ T7087] netlink: 'syz.2.312': attribute type 7 has an invalid length. [ 69.551844][ T5376] pmem0: [POWERTEC] [ 69.612909][ T7115] nfs4: Unknown parameter 'g‹$quota I [ 69.612909][ T7115] ' [ 69.663527][ T7123] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 69.697271][ T7123] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 69.705935][ T7123] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 69.751363][ T7133] gretap1: entered promiscuous mode [ 69.756704][ T7133] bond1: (slave gretap1): making interface the new active one [ 69.759496][ T7133] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 69.768960][ T7133] macvlan2: entered promiscuous mode [ 69.770751][ T7133] macvlan2: entered allmulticast mode [ 69.773652][ T7133] bond1: entered promiscuous mode [ 69.776021][ T7133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.780013][ T7133] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 69.786032][ T7133] bond1: left promiscuous mode [ 69.805495][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.955212][ T7142] geneve2: entered promiscuous mode [ 69.960090][ T7142] geneve2: entered allmulticast mode [ 69.964247][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.967854][ T6822] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.970292][ T34] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 69.971679][ T6822] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.974465][ T34] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 69.978839][ T6822] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.982203][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.988653][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 69.991578][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 69.994151][ T34] usb 6-1: Product: syz [ 69.995591][ T34] usb 6-1: Manufacturer: syz [ 69.997159][ T34] usb 6-1: SerialNumber: syz [ 70.000838][ T34] usb 6-1: config 0 descriptor?? [ 70.003931][ T34] hub 6-1:0.0: bad descriptor, ignoring hub [ 70.006165][ T34] hub 6-1:0.0: probe with driver hub failed with error -5 [ 70.012232][ T34] usb 6-1: selecting invalid altsetting 0 [ 70.051764][ T7148] netlink: 'syz.3.332': attribute type 2 has an invalid length. [ 70.054723][ T7148] netlink: 'syz.3.332': attribute type 2 has an invalid length. [ 70.091226][ T7156] devpts: Bad value for 'max' [ 70.302823][ T7176] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 70.307739][ T7176] overlayfs: missing 'lowerdir' [ 70.316990][ T6054] usb 6-1: USB disconnect, device number 3 [ 70.448150][ T7178] /dev/sr0: Can't open blockdev [ 70.531355][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 70.567836][ T7183] syz.1.341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.595631][ T5976] Bluetooth: hci1: command 0x0c24 tx timeout [ 70.595635][ T5326] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 70.721644][ T7192] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 70.977568][ T7202] binder: 7200:7202 ioctl c0306201 200000000540 returned -22 [ 71.122274][ T7208] delete_channel: no stack [ 71.239317][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.241504][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.306346][ T7216] kAFS: No cell specified [ 71.456590][ T7238] program syz.1.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.496164][ T7242] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 71.519837][ T7242] bond2: (slave bridge3): making interface the new active one [ 71.522514][ T7242] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 71.745667][ T6006] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 71.851566][ T7267] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 71.859132][ T7267] selinux_netlink_send: 56 callbacks suppressed [ 71.859142][ T7267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7267 comm=syz.3.366 [ 71.875995][ T6006] usb 6-1: device descriptor read/64, error -71 [ 71.972492][ T7288] pimreg3: entered allmulticast mode [ 71.974739][ T7291] tmpfs: Unknown parameter 'subj_user' [ 71.977776][ T7292] tmpfs: Unknown parameter 'subj_user' [ 72.125875][ T6006] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 72.255769][ T6006] usb 6-1: device descriptor read/64, error -71 [ 72.365720][ T6006] usb usb6-port1: attempt power cycle [ 72.715551][ T6006] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 72.736958][ T6006] usb 6-1: device descriptor read/8, error -71 [ 72.985688][ T6006] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 73.006759][ T6006] usb 6-1: device descriptor read/8, error -71 [ 73.115783][ T6006] usb usb6-port1: unable to enumerate USB device [ 73.160137][ T7339] overlay: ./file0 is not a directory [ 73.191642][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 73.191652][ T40] audit: type=1400 audit(1756139882.205:501): avc: denied { setopt } for pid=7340 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.220289][ T40] audit: type=1400 audit(1756139882.235:502): avc: denied { read } for pid=7343 comm="syz.0.388" path="socket:[16658]" dev="sockfs" ino=16658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.262207][ T7341] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 73.333183][ T7354] 9pnet: Found fid 0 not clunked [ 73.427157][ T7356] program syz.2.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.527052][ T7368] __nla_validate_parse: 10 callbacks suppressed [ 73.527063][ T7368] netlink: 248 bytes leftover after parsing attributes in process `syz.2.397'. [ 73.718887][ T7406] cgroup: Name too long [ 73.719145][ T40] audit: type=1400 audit(1756139882.735:503): avc: denied { mounton } for pid=7405 comm="syz.2.406" path="/102/file0" dev="9p" ino=37617724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.728022][ T40] audit: type=1400 audit(1756139882.735:504): avc: denied { associate } for pid=7405 comm="syz.2.406" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.801233][ T7418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9001 sclass=netlink_route_socket pid=7418 comm=syz.3.409 [ 74.399133][ T40] audit: type=1400 audit(1756139883.415:505): avc: denied { mount } for pid=7429 comm="syz.0.411" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.408228][ T40] audit: type=1400 audit(1756139883.415:506): avc: denied { unmount } for pid=7429 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.500433][ T7440] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.413'. [ 74.535011][ T7440] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 74.538066][ T7440] netlink: 224 bytes leftover after parsing attributes in process `syz.0.413'. [ 74.600279][ T40] audit: type=1400 audit(1756139883.615:507): avc: denied { accept } for pid=7443 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 74.689237][ T7462] netlink: 272 bytes leftover after parsing attributes in process `syz.3.418'. [ 74.701834][ T7463] netlink: 27 bytes leftover after parsing attributes in process `syz.2.415'. [ 74.725994][ T7465] fuse: Unknown parameter 'default_permissionsHÇÀ' [ 75.021108][ T40] audit: type=1400 audit(1756139884.035:508): avc: denied { setopt } for pid=7471 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.036773][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 75.038506][ T7476] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 75.043016][ T7476] netlink: 224 bytes leftover after parsing attributes in process `syz.2.421'. [ 75.046651][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.420'. [ 75.084181][ T40] audit: type=1400 audit(1756139884.095:509): avc: denied { ioctl } for pid=7475 comm="syz.2.421" path="socket:[16237]" dev="sockfs" ino=16237 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 75.139853][ T7489] netlink: 'syz.2.423': attribute type 5 has an invalid length. [ 75.216777][ T40] audit: type=1400 audit(1756139884.235:510): avc: denied { ioctl } for pid=7509 comm="syz.2.426" path="socket:[16254]" dev="sockfs" ino=16254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.263797][ T5326] Bluetooth: Wrong link type (-22) [ 75.320885][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.430'. [ 75.358563][ T7524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.370662][ T7524] netlink: 92 bytes leftover after parsing attributes in process `syz.2.431'. [ 75.434591][ T7531] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7531 comm=syz.1.434 [ 75.614140][ T7556] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 75.699353][ T7572] mmap: syz.0.444 (7572) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.753016][ T7580] input: syz1 as /devices/virtual/input/input9 [ 75.814988][ T7590] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 76.154063][ T7627] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 76.169256][ T7630] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.172443][ T7630] block device autoloading is deprecated and will be removed. [ 76.228875][ T7630] batadv_slave_1: entered promiscuous mode [ 76.266192][ T7618] batadv_slave_1: left promiscuous mode [ 76.356377][ T7654] overlay: Bad value for 'redirect_dir' [ 76.520520][ T7678] overlayfs: failed to clone upperpath [ 76.630490][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 76.632599][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 76.654909][ T7688] kvm: kvm [7687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 76.658206][ T7688] kvm: kvm [7687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 76.677161][ T7688] kvm: kvm [7687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 76.697507][ T7688] kvm: kvm [7687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 76.700766][ T7688] kvm: kvm [7687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 76.713698][ T5326] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 76.728945][ T7688] kvm_intel: kvm [7687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 76.885977][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 76.888279][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 77.398756][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 77.401589][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 77.454079][ T7694] ceph: No mds server is up or the cluster is laggy [ 77.647836][ T7737] block nbd1: Attempted send on invalid socket [ 77.649922][ T7737] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 77.652922][ T7737] XFS (nbd1): SB validate failed with error -5. [ 77.729837][ T7752] fuse: Bad value for 'fd' [ 77.785634][ T7762] IPv6: Can't replace route, no match found [ 78.225541][ T6039] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 78.355530][ T6039] usb 6-1: device descriptor read/64, error -71 [ 78.484093][ T7820] syzkaller1: entered promiscuous mode [ 78.486890][ T7820] syzkaller1: entered allmulticast mode [ 78.605523][ T6039] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 78.657628][ T7826] input: syz0 as /devices/virtual/input/input10 [ 78.735555][ T6039] usb 6-1: device descriptor read/64, error -71 [ 78.770027][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 78.770039][ T40] audit: type=1400 audit(1756139887.785:542): avc: denied { map } for pid=7839 comm="syz.0.523" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.782649][ T7840] binder_alloc: 7839: binder_alloc_buf size 8 failed, no address space [ 78.788429][ T7840] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 78.793102][ T40] audit: type=1400 audit(1756139887.795:543): avc: denied { call } for pid=7839 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.855682][ T6039] usb usb6-port1: attempt power cycle [ 78.934173][ T40] audit: type=1400 audit(1756139887.945:544): avc: denied { name_bind 0x1000000 } for pid=7856 comm="syz.2.529" path="socket:[18209]" dev="sockfs" ino=18209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 78.936637][ T7856] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 78.944789][ T40] audit: type=1400 audit(1756139887.945:545): avc: denied { ioctl } for pid=7856 comm="syz.2.529" path="socket:[18768]" dev="sockfs" ino=18768 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.956130][ T40] audit: type=1400 audit(1756139887.955:546): avc: denied { ioctl } for pid=7856 comm="syz.2.529" path="socket:[18769]" dev="sockfs" ino=18769 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 78.988491][ T40] audit: type=1400 audit(1756139888.005:547): avc: denied { listen } for pid=7863 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.996948][ T40] audit: type=1400 audit(1756139888.005:548): avc: denied { accept } for pid=7863 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.107659][ T7882] ======================================================= [ 79.107659][ T7882] WARNING: The mand mount option has been deprecated and [ 79.107659][ T7882] and is ignored by this kernel. Remove the mand [ 79.107659][ T7882] option from the mount to silence this warning. [ 79.107659][ T7882] ======================================================= [ 79.177250][ T7890] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.216777][ T6039] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 79.241909][ T6039] usb 6-1: device descriptor read/8, error -71 [ 79.301578][ T7908] __nla_validate_parse: 8 callbacks suppressed [ 79.301589][ T7908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'. [ 79.324319][ T7910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7910 comm=syz.3.536 [ 79.368192][ T7917] lo: Master is either lo or non-ether device [ 79.469575][ T40] audit: type=1400 audit(1756139888.485:549): avc: denied { lock } for pid=7932 comm="syz.3.546" path="socket:[19998]" dev="sockfs" ino=19998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 79.486307][ T6039] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 79.516689][ T6039] usb 6-1: device descriptor read/8, error -71 [ 79.531643][ T40] audit: type=1400 audit(1756139888.545:550): avc: denied { lock } for pid=7932 comm="syz.3.546" path="socket:[19999]" dev="sockfs" ino=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.558008][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 79.564186][ T7929] dummy0: entered promiscuous mode [ 79.568978][ T7929] dummy0: left promiscuous mode [ 79.626792][ T6039] usb usb6-port1: unable to enumerate USB device [ 79.757736][ T40] audit: type=1400 audit(1756139888.775:551): avc: denied { map } for pid=7958 comm="syz.2.549" path="socket:[21807]" dev="sockfs" ino=21807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.758753][ T5326] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 79.769596][ T5326] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 79.822389][ T7969] overlay: filesystem on ./bus not supported as upperdir [ 80.920444][ T7996] trusted_key: encrypted_key: master key parameter is missing [ 80.959553][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.964184][ T7998] bond0: (slave rose0): Enslaving as an active interface with an up link [ 80.968915][ T7998] program syz.2.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.972416][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.561'. [ 81.001295][ T8005] program syz.2.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.089093][ T8010] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 81.089093][ T8010] program syz.1.564 not setting count and/or reply_len properly [ 81.169252][ T8033] overlayfs: failed to resolve './file0': -2 [ 81.179293][ T8032] CIFS mount error: No usable UNC path provided in device string! [ 81.179293][ T8032] [ 81.182553][ T8032] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.235358][ T8038] QAT: failed to copy from user. [ 81.411077][ T8068] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 81.413554][ T8068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.582'. [ 81.478579][ T61] cfg80211: failed to load regulatory.db [ 81.655962][ T8104] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.591'. [ 81.873208][ T8116] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 82.045781][ T5337] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 82.205510][ T5337] usb 7-1: Using ep0 maxpacket: 16 [ 82.209195][ T5337] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.213434][ T5337] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.216672][ T5337] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 82.219436][ T5337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.223703][ T5337] usb 7-1: config 0 descriptor?? [ 82.362506][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 82.376782][ T8143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.604'. [ 82.380112][ T8143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.604'. [ 82.384871][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 82.431936][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 82.563340][ T5337] usbhid 7-1:0.0: can't add hid device: -71 [ 82.565270][ T8154] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 82.565297][ T5337] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 82.571860][ T5337] usb 7-1: USB disconnect, device number 2 [ 82.676736][ T8169] bridge_slave_0: default FDB implementation only supports local addresses [ 82.730163][ T8175] tipc: Started in network mode [ 82.731859][ T8175] tipc: Node identity 4, cluster identity 4711 [ 82.733884][ T8175] tipc: Node number set to 4 [ 82.781408][ T8177] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 83.063035][ T8200] Mount JFS Failure: -22 [ 83.107339][ T8206] program syz.2.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.159002][ T8212] overlay: filesystem on ./file1 not supported as upperdir [ 83.185968][ T8214] pimreg: entered allmulticast mode [ 83.463681][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.467367][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.469743][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.472128][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.474582][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.478066][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.480512][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.480909][ T8230] sp0: Synchronizing with TNC [ 83.482817][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.488807][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.491181][ T2299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.498245][ T2299] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 83.546775][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 83.548900][ T1113] ata1: failed to read log page 10h (errno=-5) [ 83.550826][ T1113] ata1.00: exception Emask 0x1 SAct 0x40000 SErr 0x0 action 0x0 [ 83.553261][ T1113] ata1.00: irq_stat 0x40000000 [ 83.554760][ T1113] ata1.00: failed command: READ FPDMA QUEUED [ 83.558207][ T1113] ata1.00: cmd 60/20:90:5e:e2:02/00:00:00:00:00/40 tag 18 ncq dma 16384 in [ 83.558207][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 83.564635][ T1113] ata1.00: status: { DRDY } [ 83.566504][ T1113] ata1.00: error: { ABRT } [ 83.572173][ T1113] ata1.00: configured for UDMA/100 [ 83.574520][ T1113] sd 0:0:0:0: [sda] tag#18 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 83.581284][ T1113] sd 0:0:0:0: [sda] tag#18 Sense Key : Aborted Command [current] [ 83.584328][ T1113] sd 0:0:0:0: [sda] tag#18 Add. Sense: No additional sense information [ 83.590072][ T1113] sd 0:0:0:0: [sda] tag#18 CDB: Read(10) 28 00 00 02 e2 5e 00 00 20 00 [ 83.596019][ T1113] I/O error, dev sda, sector 189022 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 83.600413][ T1113] ata1: EH complete [ 83.638255][ T8245] cgroup: No subsys list or none specified [ 83.696387][ T8232] fido_id[8232]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.715523][ T8243] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 83.930418][ T8269] ./bus: Can't lookup blockdev [ 83.940204][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 83.940537][ T40] audit: type=1400 audit(83.812:595): avc: denied { getopt } for pid=8267 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.994631][ T8273] binder: 8267:8273 ioctl c0182101 200000000180 returned -22 [ 83.999307][ T40] audit: type=1400 audit(83.872:596): avc: denied { setopt } for pid=8270 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.000869][ T8271] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 84.019937][ T8271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.094806][ T5326] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 84.124969][ T40] audit: type=1400 audit(83.992:597): avc: denied { bind } for pid=8294 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.196804][ T8311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=8311 comm=syz.1.661 [ 84.312517][ T40] audit: type=1400 audit(84.182:598): avc: denied { execmem } for pid=8320 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.319452][ T40] audit: type=1804 audit(84.182:599): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.666" name="/newroot/179/file0" dev="tmpfs" ino=975 res=1 errno=0 [ 84.350524][ T8329] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.399832][ T40] audit: type=1400 audit(84.272:600): avc: denied { ioctl } for pid=8333 comm="syz.3.669" path="socket:[22045]" dev="sockfs" ino=22045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.444405][ T8341] __nla_validate_parse: 12 callbacks suppressed [ 84.444417][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 84.472143][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 84.477021][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 84.504712][ T40] audit: type=1326 audit(84.372:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.2.673" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x0 [ 84.682440][ T8374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.702943][ T40] audit: type=1400 audit(84.572:602): avc: denied { listen } for pid=8375 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 84.703898][ T8376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.712474][ T8376] batadv_slave_0: entered promiscuous mode [ 84.714652][ T8376] batadv_slave_0: entered allmulticast mode [ 84.808945][ T8385] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 84.931846][ T8394] ref_ctr increment failed for inode: 0x34e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880319b4080 [ 84.949831][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.953346][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.051511][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 85.062590][ T40] audit: type=1400 audit(84.932:603): avc: denied { ioctl } for pid=8401 comm="syz.0.690" path="socket:[23622]" dev="sockfs" ino=23622 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.097776][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.692'. [ 85.145581][ T8416] sp0: Synchronizing with TNC [ 85.433670][ T8441] netlink: 'syz.2.699': attribute type 1 has an invalid length. [ 85.459625][ T8441] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 85.463349][ T8441] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 85.497203][ T40] audit: type=1400 audit(85.372:604): avc: denied { read } for pid=8446 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.509117][ T8450] gretap1: entered promiscuous mode [ 85.512993][ T8450] bond3: (slave gretap1): making interface the new active one [ 85.516009][ T8450] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 85.524557][ T8450] macvlan2: entered promiscuous mode [ 85.528019][ T8450] macvlan2: entered allmulticast mode [ 85.530026][ T8450] bond3: entered promiscuous mode [ 85.531948][ T8450] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.537856][ T8450] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 85.543043][ T8450] bond3: left promiscuous mode [ 85.575617][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.619929][ T8463] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 85.622365][ T8463] openvswitch: netlink: Flow key attr not present in new flow. [ 85.631103][ T6820] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 85.735559][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 85.740969][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 85.744460][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 85.747966][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.753440][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 85.756611][ T24] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 85.759112][ T24] usb 5-1: Product: syz [ 85.760927][ T24] usb 5-1: Manufacturer: syz [ 85.762405][ T24] usb 5-1: SerialNumber: syz [ 85.770981][ T24] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input11 [ 85.788432][ T8480] NILFS (nbd2): device size too small [ 85.789524][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'. [ 85.969100][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 86.048595][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'. [ 86.082353][ T54] usb 5-1: USB disconnect, device number 4 [ 86.095464][ T54] appletouch 5-1:1.0: input: appletouch disconnected [ 86.095795][ C3] Illegal XDP return value 16128 on prog (id 101) dev veth0_to_bond, expect packet loss! [ 86.166795][ T8498] netlink: 6 bytes leftover after parsing attributes in process `syz.2.714'. [ 86.358695][ T8501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.715'. [ 86.488135][ T8507] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 86.494764][ T8507] hsr_slave_0: left promiscuous mode [ 86.500752][ T8507] hsr_slave_1: left promiscuous mode [ 86.814198][ T8509] syz.1.718 (8509): drop_caches: 1 [ 86.834460][ T8509] syz.1.718 (8509): drop_caches: 1 [ 87.734009][ T8573] netlink: 'syz.1.733': attribute type 7 has an invalid length. [ 87.741682][ T8576] netlink: 'syz.1.733': attribute type 7 has an invalid length. [ 87.803853][ T8587] netlink: 'syz.2.737': attribute type 2 has an invalid length. [ 87.807560][ T8587] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 88.065708][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 88.215572][ T54] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 88.235706][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 88.238913][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.242355][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.245606][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 88.248577][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.254084][ T24] usb 7-1: config 0 descriptor?? [ 88.313858][ T8611] overlayfs: failed to clone upperpath [ 88.365806][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 88.377103][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.380555][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.395541][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.402823][ T54] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.406979][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.416335][ T54] usb 6-1: config 0 descriptor?? [ 88.680118][ T24] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 88.877765][ T8659] mkiss: ax0: crc mode is auto. [ 88.881326][ T54] hid_parser_main: 73 callbacks suppressed [ 88.881340][ T54] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 88.889400][ T54] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 88.894054][ T54] HID 045e:07da: Invalid code 65791 type 1 [ 88.901123][ T54] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0004/input/input12 [ 88.915015][ T54] microsoft 0003:045E:07DA.0004: input,hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 88.920065][ T8665] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 88.937795][ T9] usb 7-1: USB disconnect, device number 3 [ 89.088814][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 89.088825][ T40] audit: type=1400 audit(88.962:626): avc: denied { connect } for pid=8605 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 89.241960][ T8697] dvmrp1: entered allmulticast mode [ 89.277624][ T8701] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.569742][ T8714] pmem0: [POWERTEC] [ 89.745492][ T8724] kvm: kvm [8723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 89.749862][ T8724] kvm: kvm [8723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 89.773353][ T8724] kvm: kvm [8723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 89.805247][ T8724] kvm: kvm [8723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 89.809967][ T8724] kvm: kvm [8723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 89.822540][ T40] audit: type=1326 audit(89.692:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8747 comm="syz.3.789" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81b538ebe9 code=0x0 [ 89.828350][ T8724] kvm_intel: kvm [8723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 89.885633][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 90.067111][ T24] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 90.443082][ T40] audit: type=1400 audit(90.312:628): avc: denied { override_creds } for pid=8753 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.450728][ T40] audit: type=1400 audit(90.312:629): avc: denied { read } for pid=8753 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.004963][ T8793] __nla_validate_parse: 7 callbacks suppressed [ 91.004974][ T8793] netlink: 116 bytes leftover after parsing attributes in process `syz.3.801'. [ 91.019054][ T8797] 9p: Unknown Cache mode or invalid value fs [ 91.156496][ T8815] ptrace attach of "/syz-executor exec"[5964] was attempted by ""[8815] [ 91.157558][ T40] audit: type=1326 audit(91.032:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af78ebe9 code=0x7ffc0000 [ 91.166027][ T40] audit: type=1326 audit(91.032:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96af78ebe9 code=0x7ffc0000 [ 91.172024][ T40] audit: type=1326 audit(91.032:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af78ebe9 code=0x7ffc0000 [ 91.180377][ T40] audit: type=1326 audit(91.032:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96af78ebe9 code=0x7ffc0000 [ 91.187201][ T40] audit: type=1326 audit(91.032:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af78ebe9 code=0x7ffc0000 [ 91.193265][ T40] audit: type=1326 audit(91.032:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af78ebe9 code=0x7ffc0000 [ 91.213544][ T8820] fuse: Bad value for 'rootmode' [ 91.405953][ T5326] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 91.696504][ T8846] orangefs_mount: mount request failed with -4 [ 91.770360][ T6039] usb 6-1: USB disconnect, device number 12 [ 91.794062][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 92.118799][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 92.121817][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 92.124648][ T8885] netlink: 'syz.0.827': attribute type 12 has an invalid length. [ 92.132516][ T8896] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 92.215966][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'. [ 92.221493][ T8905] netlink: 'syz.0.834': attribute type 10 has an invalid length. [ 92.511141][ T8930] SELinux: Context system_u:object_r:dpkg_var_lib_t:s0 is not valid (left unmapped). [ 92.522280][ T8930] ufs: You didn't specify the type of your ufs filesystem [ 92.522280][ T8930] [ 92.522280][ T8930] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 92.522280][ T8930] [ 92.522280][ T8930] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 92.532216][ T8930] ufs: failed to set blocksize [ 92.737293][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.843'. [ 92.752996][ T8944] fuse: Bad value for 'rootmode' [ 92.805799][ T8949] netlink: 68 bytes leftover after parsing attributes in process `syz.1.845'. [ 92.903906][ T8954] binder: 8953:8954 unknown command 0 [ 92.905722][ T8954] binder: 8953:8954 ioctl c0306201 200000000080 returned -22 [ 92.908368][ T8954] binder: 8953:8954 ioctl c0306201 200000000180 returned -22 [ 92.917823][ T8955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.844'. [ 92.940351][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.847'. [ 92.951797][ T8957] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 92.954890][ T8957] SELinux: failed to load policy [ 92.984490][ T8951] cgroup: noprefix used incorrectly [ 93.091419][ T5326] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 93.142342][ T8994] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 93.144841][ T8994] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 93.148372][ T8994] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.858'. [ 93.218728][ T5976] Bluetooth: hci4: Malformed Event: 0x02 [ 94.245549][ T9032] Device name not specified. [ 94.245549][ T9032] [ 94.341578][ T9033] Bluetooth: MGMT ver 1.23 [ 94.560613][ T9044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.564748][ T9044] batadv_slave_0: entered promiscuous mode [ 94.566849][ T9044] batadv_slave_0: entered allmulticast mode [ 95.236836][ T5976] Bluetooth: hci4: command 0x1003 tx timeout [ 95.239223][ T5326] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.254119][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 95.254129][ T40] audit: type=1400 audit(95.122:677): avc: denied { write } for pid=9069 comm="syz.1.879" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 95.351716][ T40] audit: type=1326 audit(95.222:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x50000 [ 95.358824][ T40] audit: type=1326 audit(95.222:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x50000 [ 95.361798][ T9079] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.366018][ T40] audit: type=1326 audit(95.222:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x50000 [ 95.366044][ T40] audit: type=1326 audit(95.222:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x50000 [ 95.366065][ T40] audit: type=1326 audit(95.222:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x50000 [ 95.366085][ T40] audit: type=1326 audit(95.222:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x50000 [ 95.366105][ T40] audit: type=1326 audit(95.222:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x50000 [ 95.366126][ T40] audit: type=1326 audit(95.222:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9077 comm="syz.2.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x50000 [ 95.695528][ T6031] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 95.845671][ T6031] usb 7-1: Using ep0 maxpacket: 8 [ 95.849261][ T6031] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 95.852539][ T6031] usb 7-1: config 0 has no interface number 0 [ 95.855193][ T6031] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.859903][ T6031] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 95.864721][ T6031] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 20, changing to 8 [ 95.868782][ T6031] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 95.871849][ T6031] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.876834][ T6031] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 95.880405][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.884394][ T6031] usb 7-1: config 0 descriptor?? [ 95.892141][ T6031] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 96.042895][ T9088] 9pnet_virtio: no channels available for device syz [ 96.088554][ T9082] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 96.113517][ T9094] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.210924][ T9108] ÿÿÿÿÿÿ: renamed from lo (while UP) [ 96.228221][ T9101] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.392365][ T9118] bridge_slave_0: left allmulticast mode [ 96.394958][ T9118] bridge_slave_0: left promiscuous mode [ 96.398881][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.568703][ T9118] bridge_slave_1: left allmulticast mode [ 96.570611][ T9118] bridge_slave_1: left promiscuous mode [ 96.572527][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.581217][ T9118] bond0: (slave bond_slave_0): Releasing backup interface [ 96.589653][ T9118] bond0: (slave bond_slave_1): Releasing backup interface [ 96.603212][ T9118] team0: Port device team_slave_0 removed [ 96.611266][ T9118] team0: Port device team_slave_1 removed [ 96.614482][ T9118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.620610][ T9118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.623368][ T9118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.627370][ T9131] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 96.645815][ T9121] vlan0: entered promiscuous mode [ 96.655260][ T9121] team0: Port device vlan0 added [ 96.700811][ T9137] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 96.702868][ T9136] random: crng reseeded on system resumption [ 96.717083][ T9136] binder_alloc: 9135: binder_alloc_buf, no vma [ 96.742235][ T9143] __nla_validate_parse: 7 callbacks suppressed [ 96.742247][ T9143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.902'. [ 96.766136][ T9143] bond5 (unregistering): Released all slaves [ 96.894478][ T9160] vxcan1: tx address claim with dest, not broadcast [ 97.060224][ T9180] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 97.113820][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 97.211686][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'. [ 97.225509][ T9187] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 97.265579][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 97.268454][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 97.482646][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056124400: rx timeout, send abort [ 97.486642][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805545fc00: rx timeout, send abort [ 97.565142][ T5326] Bluetooth: hci3: Invalid handle: 0x1300 > 0x0eff [ 97.986199][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056124400: abort rx timeout. Force session deactivation [ 97.994139][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805545fc00: abort rx timeout. Force session deactivation [ 98.097423][ T9225] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 98.100825][ T9225] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 98.193877][ T9239] netlink: 'syz.3.932': attribute type 62 has an invalid length. [ 98.368526][ T9260] fuse: Unknown parameter 'fK' [ 98.372728][ T839] usb 7-1: USB disconnect, device number 4 [ 98.383903][ T839] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 98.404097][ T9260] cgroup: No subsys list or none specified [ 98.765565][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 99.127249][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 99.187577][ T9284] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 99.194571][ T9286] pim6reg: entered allmulticast mode [ 99.199818][ T9286] pim6reg: left allmulticast mode [ 99.243745][ T9303] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 99.622907][ T9335] bridge_slave_0: default FDB implementation only supports local addresses [ 99.710868][ T5326] Bluetooth: unknown link type 247 [ 99.713738][ T5326] Bluetooth: hci2: connection err: -111 [ 99.716793][ T24] IPVS: starting estimator thread 0... [ 99.721570][ T9347] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 99.724446][ T9347] tipc: Enabled bearer , priority 10 [ 99.815879][ T9348] IPVS: using max 42 ests per chain, 100800 per kthread [ 99.855747][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 99.935835][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 100.050077][ T9367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57344 sclass=netlink_route_socket pid=9367 comm=syz.0.970 [ 100.055860][ T9367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.060349][ T9368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57344 sclass=netlink_route_socket pid=9368 comm=syz.0.970 [ 100.103866][ T9372] SELinux: ebitmap: truncated map [ 100.110272][ T9372] SELinux: failed to load policy [ 100.135508][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 100.149568][ T9374] sctp: [Deprecated]: syz.0.972 (pid 9374) Use of int in maxseg socket option. [ 100.149568][ T9374] Use struct sctp_assoc_value instead [ 100.228123][ T9381] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 100.283378][ T9385] kAFS: No cell specified [ 100.287066][ T9386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.287345][ T9385] fuse: Unknown parameter 'rootmo' [ 100.666467][ T9397] overlayfs: failed to clone upperpath [ 100.675784][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 101.304941][ T40] kauditd_printk_skb: 329 callbacks suppressed [ 101.304956][ T40] audit: type=1400 audit(101.172:1013): avc: denied { setattr } for pid=9429 comm="syz.1.991" name="tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 101.536951][ T9436] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 101.715784][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 101.834985][ T40] audit: type=1400 audit(101.702:1014): avc: denied { read write } for pid=9460 comm="syz.0.998" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.842179][ T40] audit: type=1400 audit(101.702:1015): avc: denied { open } for pid=9460 comm="syz.0.998" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.849356][ T40] audit: type=1400 audit(101.702:1016): avc: denied { map } for pid=9460 comm="syz.0.998" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.960453][ T9468] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 102.013283][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1002'. [ 102.026025][ T9469] Invalid logical block size (7) [ 102.032063][ T9474] SELinux: failed to load policy [ 102.116595][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1008'. [ 102.240724][ T40] audit: type=1400 audit(102.112:1017): avc: denied { ioctl } for pid=9503 comm="syz.0.1011" path="socket:[26348]" dev="sockfs" ino=26348 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 102.250469][ T9507] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 102.255045][ T40] audit: type=1400 audit(102.122:1018): avc: denied { unmount } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 102.310318][ T9519] netlink: 'syz.3.1017': attribute type 3 has an invalid length. [ 102.358984][ T9523] /dev/nullb0: Can't lookup blockdev [ 102.407000][ T9530] overlayfs: failed to clone upperpath [ 102.407831][ T40] audit: type=1326 audit(102.282:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.1019" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec9298ebe9 code=0x0 [ 102.461809][ T9535] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1021'. [ 102.541414][ T40] audit: type=1400 audit(102.412:1020): avc: denied { getopt } for pid=9534 comm="syz.3.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.550247][ T40] audit: type=1400 audit(102.422:1021): avc: denied { bind } for pid=9534 comm="syz.3.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 102.631552][ T40] audit: type=1400 audit(102.502:1022): avc: denied { mounton } for pid=9539 comm="syz.0.1022" path="/bus" dev="bpf" ino=28278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 102.634090][ T9540] overlayfs: upper fs does not support tmpfile. [ 102.689374][ T9543] batadv_slave_0: entered promiscuous mode [ 102.692260][ T9543] batadv_slave_0: left promiscuous mode [ 102.759984][ T9547] binder: 9546:9547 unknown command 4111306329 [ 102.762003][ T9547] binder: 9546:9547 ioctl c0306201 200000000080 returned -22 [ 102.765646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 102.769519][ T9547] netlink: 'syz.1.1025': attribute type 30 has an invalid length. [ 102.788885][ T9547] binder: 9546:9547 ioctl 89f3 2000000005c0 returned -22 [ 102.930700][ T9560] qnx6: unable to set blocksize [ 102.992269][ T9564] fuse: Bad value for 'fd' [ 103.293274][ T9534] delete_channel: no stack [ 103.295120][ T9534] delete_channel: no stack [ 103.402591][ T9598] netlink: 'syz.0.1040': attribute type 2 has an invalid length. [ 103.414079][ T9598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.507712][ T5326] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 103.594792][ T5326] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 103.611607][ T839] IPVS: starting estimator thread 0... [ 103.625525][ T9631] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 103.629700][ T9631] tipc: Enabled bearer , priority 10 [ 103.668550][ T9638] binder: 9637:9638 ioctl c0306201 2000000002c0 returned -14 [ 103.705611][ T9632] IPVS: using max 42 ests per chain, 100800 per kthread [ 103.755613][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 103.805507][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 103.868343][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1062'. [ 103.995144][ T9667] cgroup2: Unknown parameter 'euid' [ 104.025678][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.091818][ T9673] tls_set_device_offload: netdev not found [ 104.096937][ T9673] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.215344][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 104.249398][ T9682] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 104.317366][ T9686] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.336968][ T5376] pmem0: [POWERTEC] [ 104.470253][ T9702] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 104.556656][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.627984][ T9712] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 104.822315][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1089'. [ 104.825287][ T9732] netlink: 'syz.2.1089': attribute type 20 has an invalid length. [ 104.837811][ T7500] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 104.837852][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1089'. [ 104.840915][ T7500] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.844612][ T9732] netlink: 'syz.2.1089': attribute type 20 has an invalid length. [ 104.847500][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.852839][ T7500] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.856108][ T7500] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.859107][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 104.944797][ T9744] geneve2: entered promiscuous mode [ 104.949794][ T9744] geneve2: entered allmulticast mode [ 105.083552][ T9756] netlink: 'syz.2.1096': attribute type 11 has an invalid length. [ 105.101508][ T9752] overlay: ./bus is not a directory [ 105.177120][ T9760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1097'. [ 105.238442][ T9770] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 105.320778][ T9780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9780 comm=syz.0.1101 [ 105.457735][ T9806] trusted_key: syz.0.1111 sent an empty control message without MSG_MORE. [ 105.574267][ T9820] sctp: [Deprecated]: syz.1.1117 (pid 9820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.574267][ T9820] Use struct sctp_sack_info instead [ 105.736576][ T9843] netlink: 81928 bytes leftover after parsing attributes in process `syz.2.1121'. [ 105.808503][ T9852] tap0: tun_chr_ioctl cmd 1074025675 [ 105.810290][ T9852] tap0: persist disabled [ 105.911222][ T5376] pmem0: [POWERTEC] [ 106.031689][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.034246][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.058246][ T9869] tipc: Resetting bearer [ 106.120417][ T9869] batadv_slave_0: left promiscuous mode [ 106.122200][ T9869] batadv_slave_0: left allmulticast mode [ 106.129788][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.238067][ T9869] bond2: left allmulticast mode [ 106.240926][ T9869] vlan2: left promiscuous mode [ 106.242600][ T9869] vlan2: left allmulticast mode [ 106.244171][ T9869] hsr_slave_1: left allmulticast mode [ 106.248047][ T9869] gretap1: left promiscuous mode [ 106.264370][ T7493] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.267613][ T7493] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.270203][ T7493] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.273006][ T7493] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.276370][ T6820] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.279143][ T6820] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.281920][ T6820] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.284727][ T6820] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.537503][ T9901] fuse: Unknown parameter '' [ 106.607368][ T9906] 9p: Unknown access argument 3 : -22 [ 106.766688][ T9911] syzkaller0: entered promiscuous mode [ 106.769122][ T9911] syzkaller0: entered allmulticast mode [ 106.925535][ C0] net_ratelimit: 3 callbacks suppressed [ 106.925547][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 107.163721][ T9944] 9pnet_virtio: no channels available for device  [ 107.354198][ T9959] __nla_validate_parse: 10 callbacks suppressed [ 107.354210][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 107.364732][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 107.370805][ T9959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9959 comm=syz.3.1153 [ 107.375041][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 107.378448][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 107.387059][ T9961] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 107.389789][ T9961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1154'. [ 107.394565][ T9961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1154'. [ 107.398413][ T9961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1154'. [ 107.429857][ T9963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1155'. [ 107.432781][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 107.480687][ T9966] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1156'. [ 107.592285][ T9971] ptrace attach of "/syz-executor exec"[9970] was attempted by "/syz-executor exec"[9971] [ 107.631905][ T9980] netlink: 'syz.3.1160': attribute type 4 has an invalid length. [ 107.646182][ T9980] netlink: 'syz.3.1160': attribute type 4 has an invalid length. [ 107.684198][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 107.684214][ T40] audit: type=1400 audit(107.552:1051): avc: denied { mount } for pid=9983 comm="syz.3.1162" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 107.686063][ T9984] fuse: Bad value for 'fd' [ 107.710973][ T9982] netlink: 'syz.2.1161': attribute type 11 has an invalid length. [ 107.715562][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 107.745197][ T9988] bpf: Bad value for 'uid' [ 107.902269][ T40] audit: type=1400 audit(107.772:1052): avc: denied { setopt } for pid=10009 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.955842][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 107.963654][T10022] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 107.978964][T10022] bond5: entered promiscuous mode [ 107.981171][T10022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 107.993428][T10025] delete_channel: no stack [ 108.181660][T10044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10044 comm=syz.3.1181 [ 108.437917][ T40] audit: type=1400 audit(108.312:1053): avc: denied { mounton } for pid=10063 comm="syz.2.1186" path="/281/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 108.438105][T10068] 9pnet_fd: p9_fd_create_unix (10068): problem connecting socket: ./file0: -111 [ 108.458102][T10060] veth0_vlan: left promiscuous mode [ 108.460204][T10060] veth0_vlan: entered promiscuous mode [ 108.592627][T10077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10077 comm=syz.0.1189 [ 108.699133][ T40] audit: type=1400 audit(108.572:1054): avc: denied { setattr } for pid=10090 comm="syz.0.1193" name="SCO" dev="sockfs" ino=31219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.755592][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 108.758938][T10098] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 108.789525][ T40] audit: type=1400 audit(108.662:1055): avc: denied { setattr } for pid=10102 comm="syz.0.1196" name="RAWv6" dev="sockfs" ino=31232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.832641][ T40] audit: type=1400 audit(108.702:1056): avc: denied { append } for pid=10106 comm="syz.0.1197" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 109.001349][ T40] audit: type=1400 audit(108.872:1057): avc: denied { remove_name } for pid=10111 comm="syz.1.1199" name="file1" dev="9p" ino=37617735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.005758][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.011848][ T40] audit: type=1400 audit(108.872:1058): avc: denied { unlink } for pid=10111 comm="syz.1.1199" name="file1" dev="9p" ino=37617735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.019212][ T40] audit: type=1400 audit(108.882:1059): avc: denied { link } for pid=10111 comm="syz.1.1199" name="file0" dev="9p" ino=37617725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.052471][T10108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.091414][ T40] audit: type=1400 audit(108.962:1060): avc: denied { shutdown } for pid=10116 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.198189][T10129] netlink: 'syz.1.1204': attribute type 3 has an invalid length. [ 109.344870][T10137] tmpfs: Cannot enable quota on remount [ 109.498313][T10154] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 109.521674][T10151] bridge0: port 1(veth0_to_bridge) entered blocking state [ 109.528018][T10151] bridge0: port 1(veth0_to_bridge) entered disabled state [ 109.530372][T10151] veth0_to_bridge: entered allmulticast mode [ 109.533138][T10151] veth0_to_bridge: entered promiscuous mode [ 109.587843][T10159] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 109.654172][T10163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=10163 comm=syz.3.1215 [ 109.729594][T10169] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 109.732525][T10169] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 109.795601][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.893227][T10201] overlayfs: overlapping lowerdir path [ 109.896695][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.899878][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.902374][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.907636][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.910950][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.914216][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.917713][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.920266][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.922740][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.925224][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.928632][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.931208][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.933742][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.938280][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.940883][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.943838][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.946880][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.949667][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.952302][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.955631][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.958260][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.960755][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.963391][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.966251][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.968905][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.971549][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.974571][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.978462][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.981428][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.983942][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.986752][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.990445][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.994281][T10200] overlay: filesystem on ./bus not supported as upperdir [ 109.998679][T10203] nbd: couldn't find a device at index -1605786504 [ 109.998802][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.003990][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.006656][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.009244][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.011749][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.014279][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.017486][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.020500][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.023128][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.025670][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.028436][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.031217][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.033753][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.036954][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.039598][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.042629][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.045236][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.045677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.051013][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.053693][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.057411][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.060100][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.062876][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.067269][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.070039][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.072605][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.075403][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.078387][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.081209][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.085390][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.089066][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.092492][T10200] overlay: filesystem on ./bus not supported as upperdir [ 110.160102][T10211] netlink: 'syz.0.1230': attribute type 11 has an invalid length. [ 110.163178][T10210] openvswitch: netlink: Message has 4 unknown bytes. [ 110.167957][T10210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.296838][T10225] netlink: 'syz.1.1236': attribute type 64 has an invalid length. [ 110.299337][T10225] netlink: 'syz.1.1236': attribute type 4 has an invalid length. [ 110.359883][T10230] syz.1.1238(10230): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 110.366025][T10230] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 110.408549][T10238] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 110.416608][T10236] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 110.835570][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 111.007361][T10254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10254 comm=syz.0.1247 [ 111.501745][ C2] ata1: illegal qc_active transition (00000000->00000004) [ 111.590961][T10276] netlink: 'syz.1.1254': attribute type 10 has an invalid length. [ 111.595091][T10276] team0: entered promiscuous mode [ 111.597179][T10276] bridge0: port 1(team0) entered blocking state [ 111.599326][T10276] bridge0: port 1(team0) entered disabled state [ 111.602053][T10276] team0: entered allmulticast mode [ 111.604269][T10276] vlan0: entered allmulticast mode [ 111.606606][T10276] veth0_vlan: entered allmulticast mode [ 111.611070][T10276] bridge0: port 1(team0) entered blocking state [ 111.613650][T10276] bridge0: port 1(team0) entered forwarding state [ 111.782265][T10296] block nbd2: Attempted send on invalid socket [ 111.785944][T10296] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.790421][T10296] block nbd2: Attempted send on invalid socket [ 111.793027][T10296] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.828491][ T1113] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 111.831780][ T1113] ata1.00: configured for UDMA/100 [ 112.115758][ C0] net_ratelimit: 3 callbacks suppressed [ 112.115769][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 112.263142][T10349] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 112.277072][T10349] bond6: entered promiscuous mode [ 112.279266][T10349] 8021q: adding VLAN 0 to HW filter on device bond6 [ 112.282172][T10350] sch_fq: defrate 0 ignored. [ 112.396797][T10363] __nla_validate_parse: 17 callbacks suppressed [ 112.396808][T10363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1280'. [ 112.402414][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 112.423615][T10366] hfsplus: unable to find HFS+ superblock [ 112.613759][T10407] netlink: 'syz.0.1293': attribute type 11 has an invalid length. [ 112.622002][T10409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1294'. [ 112.625608][T10409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1294'. [ 112.629921][T10411] netlink: 'syz.0.1293': attribute type 11 has an invalid length. [ 112.630543][T10404] ipvlan2: entered promiscuous mode [ 112.634390][T10404] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 112.637316][T10404] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 112.779415][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 112.779426][ T40] audit: type=1400 audit(112.652:1068): avc: denied { write } for pid=10431 comm="syz.0.1299" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.788963][ T40] audit: type=1400 audit(112.652:1069): avc: denied { open } for pid=10431 comm="syz.0.1299" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.915599][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 112.941364][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1303'. [ 112.944214][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 112.944409][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1303'. [ 112.998703][ T40] audit: type=1400 audit(112.872:1070): avc: denied { getopt } for pid=10453 comm="syz.0.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.031897][T10459] vivid-000: disconnect [ 113.033734][T10459] vivid-000: reconnect [ 113.057144][ T40] audit: type=1400 audit(112.932:1071): avc: denied { associate } for pid=10462 comm="syz.0.1308" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.165662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 113.339486][T10492] NILFS (nbd1): device size too small [ 113.440614][T10498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1318'. [ 113.445293][ T40] audit: type=1400 audit(113.312:1072): avc: denied { nlmsg_write } for pid=10497 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 113.484784][T10500] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 113.606139][T10519] overlayfs: missing 'lowerdir' [ 113.645728][T10526] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1324'. [ 113.648730][T10526] netlink: zone id is out of range [ 113.650361][T10526] netlink: get zone limit has 8 unknown bytes [ 113.659868][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'. [ 113.818280][ T40] audit: type=1400 audit(113.692:1073): avc: denied { accept } for pid=10544 comm="syz.2.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.955658][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 114.058895][ T40] audit: type=1400 audit(113.932:1074): avc: denied { read append } for pid=10572 comm="syz.2.1343" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.066988][ T40] audit: type=1400 audit(113.932:1075): avc: denied { open } for pid=10572 comm="syz.2.1343" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.099354][T10573] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 114.161732][T10584] ptrace attach of "/syz-executor exec"[5964] was attempted by "/syz-executor exec"[10584] [ 114.169211][T10586] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 114.205582][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 114.537659][T10618] tmpfs: Bad value for 'mpol' [ 114.658655][T10629] netlink: 'syz.1.1360': attribute type 10 has an invalid length. [ 114.781733][T10650] ./bus: Can't lookup blockdev [ 114.816520][T10654] overlayfs: failed to clone lowerpath [ 114.879451][ T40] audit: type=1400 audit(114.752:1076): avc: denied { accept } for pid=10660 comm="syz.1.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.915919][ T40] audit: type=1400 audit(114.792:1077): avc: denied { read } for pid=10671 comm="syz.0.1371" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 114.996616][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 115.182054][T10691] netlink: 'syz.1.1377': attribute type 12 has an invalid length. [ 115.235535][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 115.509106][T10738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=10738 comm=syz.1.1390 [ 115.546484][T10734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10734 comm=syz.0.1389 [ 115.616709][T10749] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 115.620254][T10749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 115.622304][T10749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.625397][T10749] vhci_hcd vhci_hcd.0: Device attached [ 115.635083][T10750] vhci_hcd: connection closed [ 115.635278][ T6820] vhci_hcd: stop threads [ 115.642141][ T6820] vhci_hcd: release socket [ 115.643692][ T6820] vhci_hcd: disconnect device [ 115.668946][T10753] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.862218][T10757] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 115.865993][T10757] netlink: 'syz.0.1395': attribute type 29 has an invalid length. [ 115.869530][T10757] netlink: 'syz.0.1395': attribute type 29 has an invalid length. [ 115.873774][T10757] unsupported nla_type 58 [ 115.877302][T10757] program syz.0.1395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.974905][T10772] netlink: 'syz.3.1399': attribute type 10 has an invalid length. [ 116.039892][T10783] tmpfs: Bad value for 'mpol' [ 116.107286][T10793] netlink: 'syz.3.1405': attribute type 3 has an invalid length. [ 116.109935][T10793] netlink: 'syz.3.1405': attribute type 3 has an invalid length. [ 116.238104][T10810] macvtap1: entered promiscuous mode [ 116.239843][T10810] syz_tun: entered promiscuous mode [ 116.243053][T10810] syz_tun: left promiscuous mode [ 116.368373][T10802] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 116.575532][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 116.675609][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.705610][ T839] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.738351][ T34] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.741266][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.743836][ T34] usb 6-1: Product: syz [ 116.745276][ T34] usb 6-1: Manufacturer: syz [ 116.747003][ T34] usb 6-1: SerialNumber: syz [ 116.752725][ T34] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.776813][ T5337] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.877192][ T839] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.880925][ T839] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 116.883777][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.886903][ T839] usb 5-1: Product: syz [ 116.888254][ T839] usb 5-1: Manufacturer: syz [ 116.889721][ T839] usb 5-1: SerialNumber: syz [ 116.892435][ T839] usb 5-1: config 0 descriptor?? [ 116.985013][ T24] usb 6-1: USB disconnect, device number 13 [ 117.105395][ T839] usb 5-1: USB disconnect, device number 5 [ 117.315662][ C0] net_ratelimit: 4 callbacks suppressed [ 117.315674][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 117.401686][T10854] netlink: 'syz.2.1423': attribute type 5 has an invalid length. [ 117.459014][T10862] program syz.2.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.459047][T10863] program syz.2.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.708444][T10876] bridge_slave_0: left allmulticast mode [ 117.710305][T10876] bridge_slave_0: left promiscuous mode [ 117.712158][T10876] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.719240][T10876] bridge_slave_1: left allmulticast mode [ 117.721558][T10876] bridge_slave_1: left promiscuous mode [ 117.724088][T10876] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.734028][T10876] bond0: (slave bond_slave_0): Releasing backup interface [ 117.740988][T10876] bond0: (slave bond_slave_1): Releasing backup interface [ 117.746756][T10878] overlay: ./bus is not a directory [ 117.750618][T10876] team0: Port device team_slave_0 removed [ 117.757436][T10876] team0: Port device team_slave_1 removed [ 117.761302][T10876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.763702][T10876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.770844][T10876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.773530][T10876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.795511][ T5337] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 117.799350][ T5337] ath9k_htc: Failed to initialize the device [ 117.802636][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 117.803646][T10876] bond1: (slave ip6gretap1): Releasing active interface [ 117.845512][T10872] syzkaller0: entered promiscuous mode [ 117.847291][T10872] syzkaller0: entered allmulticast mode [ 117.938942][T10885] 9pnet_virtio: no channels available for device syz [ 117.997992][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 117.998002][ T40] audit: type=1400 audit(117.872:1109): avc: denied { read append } for pid=10883 comm="syz.0.1431" name="net_prio.prioidx" dev="9p" ino=37617800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.010778][T10894] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 118.012621][ T40] audit: type=1400 audit(117.882:1110): avc: denied { map } for pid=10883 comm="syz.0.1431" path="/332/file0/net_prio.prioidx" dev="9p" ino=37617800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.014111][T10885] netfs: Couldn't get user pages (rc=-14) [ 118.020784][ T40] audit: type=1400 audit(117.882:1111): avc: denied { ioctl } for pid=10883 comm="syz.0.1431" path="/332/file0/net_prio.prioidx" dev="9p" ino=37617800 ioctlcmd=0xae99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.022912][T10884] netfs: Couldn't get user pages (rc=-14) [ 118.030622][ T40] audit: type=1400 audit(117.892:1112): avc: denied { ioctl } for pid=10895 comm="syz.3.1436" path="socket:[34558]" dev="sockfs" ino=34558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.103926][T10913] __nla_validate_parse: 17 callbacks suppressed [ 118.103939][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 118.110031][T10913] IPVS: Error joining to the multicast group [ 118.115555][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 118.130408][T10913] netlink: 'syz.3.1442': attribute type 16 has an invalid length. [ 118.132900][T10913] netlink: 'syz.3.1442': attribute type 1 has an invalid length. [ 118.135377][T10913] netlink: 64126 bytes leftover after parsing attributes in process `syz.3.1442'. [ 118.140201][ T40] audit: type=1400 audit(118.012:1113): avc: denied { write } for pid=10912 comm="syz.3.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.355516][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 118.509035][T10947] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1450'. [ 118.511960][T10947] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1450'. [ 119.155528][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 119.395534][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 119.494962][T10972] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 119.621998][T10976] syzkaller1: entered promiscuous mode [ 119.623808][T10976] syzkaller1: entered allmulticast mode [ 119.627642][T10976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1458'. [ 119.874896][T11001] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 119.881151][T11001] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 120.141953][T11009] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 120.145114][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1468'. [ 120.149099][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'. [ 120.159951][ T40] audit: type=1400 audit(120.032:1114): avc: denied { getopt } for pid=11008 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.195651][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.212248][ T40] audit: type=1400 audit(120.082:1115): avc: denied { execute } for pid=11013 comm="syz.2.1470" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.290870][T11019] IPVS: set_ctl: invalid protocol: 40 224.0.0.1:20004 [ 120.308211][T11021] tmpfs: Bad value for 'mpol' [ 120.309961][T11021] tmpfs: Bad value for 'mpol' [ 120.311994][T11021] tmpfs: Bad value for 'mpol' [ 120.313884][T11021] tmpfs: Bad value for 'mpol' [ 120.315708][T11021] tmpfs: Bad value for 'mpol' [ 120.317327][T11021] tmpfs: Bad value for 'mpol' [ 120.318899][T11021] tmpfs: Bad value for 'mpol' [ 120.320524][T11021] tmpfs: Bad value for 'mpol' [ 120.322096][T11021] tmpfs: Bad value for 'mpol' [ 120.324207][T11021] tmpfs: Bad value for 'mpol' [ 120.326213][T11021] tmpfs: Bad value for 'mpol' [ 120.327839][T11021] tmpfs: Bad value for 'mpol' [ 120.329457][T11021] tmpfs: Bad value for 'mpol' [ 120.331136][T11021] tmpfs: Bad value for 'mpol' [ 120.332742][T11021] tmpfs: Bad value for 'mpol' [ 120.334336][T11021] tmpfs: Bad value for 'mpol' [ 120.336060][T11021] tmpfs: Bad value for 'mpol' [ 120.337667][T11021] tmpfs: Bad value for 'mpol' [ 120.339277][T11021] tmpfs: Bad value for 'mpol' [ 120.340923][T11021] tmpfs: Bad value for 'mpol' [ 120.342507][T11021] tmpfs: Bad value for 'mpol' [ 120.344169][T11021] tmpfs: Bad value for 'mpol' [ 120.349168][T11021] tmpfs: Bad value for 'mpol' [ 120.351307][T11021] tmpfs: Bad value for 'mpol' [ 120.353029][T11021] tmpfs: Bad value for 'mpol' [ 120.354797][T11021] tmpfs: Bad value for 'mpol' [ 120.357743][T11021] tmpfs: Bad value for 'mpol' [ 120.359543][T11021] tmpfs: Bad value for 'mpol' [ 120.361369][T11021] tmpfs: Bad value for 'mpol' [ 120.363371][T11021] tmpfs: Bad value for 'mpol' [ 120.365149][T11021] tmpfs: Bad value for 'mpol' [ 120.366985][T11021] tmpfs: Bad value for 'mpol' [ 120.368743][T11021] tmpfs: Bad value for 'mpol' [ 120.397745][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 120.407764][T11031] hpfs: Bad magic ... probably not HPFS [ 120.435489][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.235628][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.429346][T11045] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 121.432248][T11045] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 121.475750][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.611826][T11074] comedi comedi3: comedi_config --init_data is deprecated [ 121.634663][T11063] syz_tun: entered allmulticast mode [ 121.740411][ T40] audit: type=1400 audit(121.612:1116): avc: denied { accept } for pid=11081 comm="syz.3.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.857970][ T40] audit: type=1400 audit(121.732:1117): avc: denied { ioctl } for pid=11094 comm="syz.1.1496" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x64c2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.878572][ T5326] Bluetooth: hci2: Malformed LE Event: 0x1b [ 122.275653][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 122.515933][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 122.914296][T11115] kvm: MONITOR instruction emulated as NOP! [ 123.315624][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 123.354371][ T40] audit: type=1400 audit(123.222:1118): avc: denied { create } for pid=11142 comm="syz.3.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.385191][ T40] audit: type=1804 audit(123.252:1119): pid=11154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1513" name="file0" dev="tmpfs" ino=2607 res=1 errno=0 [ 123.393068][ T40] audit: type=1400 audit(123.262:1120): avc: denied { search } for pid=11153 comm="syz.3.1513" name="/" dev="configfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.400381][ T40] audit: type=1400 audit(123.262:1121): avc: denied { search } for pid=11153 comm="syz.3.1513" name="/" dev="configfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.409806][ T40] audit: type=1400 audit(123.262:1122): avc: denied { setattr } for pid=11153 comm="syz.3.1513" name="/" dev="configfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.417136][ T40] audit: type=1400 audit(123.262:1123): avc: denied { search } for pid=11153 comm="syz.3.1513" name="/" dev="configfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.423859][ T40] audit: type=1400 audit(123.262:1124): avc: denied { search } for pid=11153 comm="syz.3.1513" name="/" dev="configfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.428571][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1515'. [ 123.430754][ T40] audit: type=1400 audit(123.262:1125): avc: denied { search } for pid=11153 comm="syz.3.1513" name="/" dev="configfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.440257][ T40] audit: type=1400 audit(123.262:1126): avc: denied { search } for pid=11153 comm="syz.3.1513" name="/" dev="configfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.447534][ T40] audit: type=1400 audit(123.262:1127): avc: denied { search } for pid=11153 comm="syz.3.1513" name="/" dev="configfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.480821][T11167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62488 sclass=netlink_route_socket pid=11167 comm=syz.2.1518 [ 123.565542][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 123.700092][T11198] netlink: 'syz.1.1527': attribute type 12 has an invalid length. [ 123.748061][T11205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1530'. [ 123.750989][T11205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1530'. [ 123.753944][T11205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1530'. [ 123.775796][T11213] bond7: entered allmulticast mode [ 123.777754][T11213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 123.822495][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 123.899516][T11233] netlink: 'syz.2.1536': attribute type 3 has an invalid length. [ 123.994969][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 123.997974][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1537'. [ 124.019592][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 124.022602][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1537'. [ 124.070481][T11241] syzkaller1: entered promiscuous mode [ 124.072325][T11241] syzkaller1: entered allmulticast mode [ 124.072342][T11243] netlink: 'syz.1.1538': attribute type 1 has an invalid length. [ 124.077701][T11243] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1538'. [ 124.356034][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 124.612487][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 124.755350][T11271] netlink: 'syz.2.1547': attribute type 10 has an invalid length. [ 124.759644][T11271] team0: Port device dummy0 added [ 124.885241][T11283] 8021q: adding VLAN 0 to HW filter on device bond8 [ 124.889357][T11283] bond0: (slave bond8): Enslaving as an active interface with an up link [ 124.968734][T11289] macvlan2: entered promiscuous mode [ 124.970507][T11289] macvlan2: entered allmulticast mode [ 124.973112][T11289] bond9: entered promiscuous mode [ 124.975681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.979490][T11289] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.986516][T11289] bond9: left promiscuous mode [ 125.145642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.405631][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.636537][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.955555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.413373][T11312] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 126.588628][T11327] hfs: can't find a HFS filesystem on dev sr0 [ 126.625786][T11330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11330 comm=syz.2.1563 [ 126.845552][ T34] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 127.006904][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.010413][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.013446][ T34] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.013447][T11358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11358 comm=syz.2.1571 [ 127.016534][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.018599][ T34] usb 6-1: config 0 descriptor?? [ 127.119297][T11360] program syz.2.1572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.178606][T11365] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 127.230195][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 127.232279][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 127.237749][ T34] usb 6-1: USB disconnect, device number 14 [ 127.703781][T11419] fuse: blksize only supported for fuseblk [ 127.715616][ C0] net_ratelimit: 3 callbacks suppressed [ 127.715629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 127.911878][T11433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=11433 comm=syz.1.1598 [ 128.293692][T11455] netlink: zone id is out of range [ 128.295351][T11455] netlink: get zone limit has 8 unknown bytes [ 128.355753][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 128.515499][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 128.519086][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.522542][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.525550][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.526099][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.532174][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.535127][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.545984][ T34] usb 6-1: config 0 descriptor?? [ 128.549029][T11470] pimreg: entered allmulticast mode [ 128.593729][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 128.593742][ T40] audit: type=1400 audit(128.462:1150): avc: denied { mounton } for pid=11471 comm="syz.0.1610" path="/file0" dev="ramfs" ino=40986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 128.594162][T11472] overlayfs: missing 'workdir' [ 128.755636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.955539][ T34] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 128.959424][ T34] microsoft 0003:045E:07DA.0005: item fetching failed at offset 31/34 [ 128.962486][ T34] microsoft 0003:045E:07DA.0005: parse failed [ 128.964505][ T34] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 129.157273][ T34] usb 6-1: USB disconnect, device number 15 [ 129.421832][T11488] netlink: 'syz.2.1618': attribute type 15 has an invalid length. [ 129.499708][T11492] __nla_validate_parse: 83 callbacks suppressed [ 129.499726][T11492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1620'. [ 129.555720][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.728981][T11511] afs: Unknown parameter 'dyn0211' [ 129.731803][T11511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.742399][T11511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.746527][T11504] SELinux: failed to load policy [ 129.795521][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.876075][T11518] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 129.878520][T11518] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 129.885244][T11524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1628'. [ 129.911308][T11529] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 129.944986][T11533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'. [ 130.004270][T11536] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.113984][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1635'. [ 130.395748][ T54] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.545624][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 130.549293][ T54] usb 5-1: config 2 interface 0 has no altsetting 0 [ 130.552985][ T54] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 130.556240][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.558773][ T54] usb 5-1: Product: syz [ 130.560146][ T54] usb 5-1: Manufacturer: syz [ 130.561937][ T54] usb 5-1: SerialNumber: syz [ 130.595549][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.772784][ T54] usb 5-1: USB disconnect, device number 6 [ 130.835646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 131.157439][T11573] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1640'. [ 131.230059][T11575] netfs: Couldn't get user pages (rc=-14) [ 131.296843][T11579] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 131.320189][T11579] bond4: (slave bridge3): making interface the new active one [ 131.323143][T11579] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 131.341045][ T5326] Bluetooth: Wrong link type (-22) [ 131.342309][T11584] overlayfs: missing 'lowerdir' [ 131.391591][T11592] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.396931][T11592] overlayfs: failed to set xattr on upper [ 131.396956][T11592] overlayfs: ...falling back to redirect_dir=nofollow. [ 131.396961][T11592] overlayfs: ...falling back to index=off. [ 131.396965][T11592] overlayfs: ...falling back to uuid=null. [ 131.396970][T11592] overlayfs: ...falling back to xino=off. [ 131.587173][T11625] binder: 11614:11625 ioctl c018620c 200000000240 returned -22 [ 131.589970][ T40] audit: type=1400 audit(131.462:1151): avc: denied { ioctl } for pid=11614 comm="syz.0.1658" path="socket:[41237]" dev="sockfs" ino=41237 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.618683][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 131.636645][ T40] audit: type=1400 audit(131.512:1152): avc: denied { read } for pid=11614 comm="syz.0.1658" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 131.646244][ T40] audit: type=1400 audit(131.512:1153): avc: denied { ioctl } for pid=11614 comm="syz.0.1658" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 131.650316][T11634] overlay: ./bus is not a directory [ 131.658257][ T40] audit: type=1800 audit(131.532:1154): pid=11634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1662" name="bus" dev="tmpfs" ino=2751 res=0 errno=0 [ 131.720992][ T40] audit: type=1800 audit(131.592:1155): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1664" name="file0" dev="tmpfs" ino=1992 res=0 errno=0 [ 131.728255][ T40] audit: type=1804 audit(131.592:1156): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1664" name="/newroot/361/file0" dev="tmpfs" ino=1992 res=1 errno=0 [ 131.777204][ T5976] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 131.852323][T11649] input: syz0 as /devices/virtual/input/input16 [ 131.854498][T11649] input: failed to attach handler leds to device input16, error: -6 [ 132.041085][T11662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=11662 comm=syz.1.1672 [ 132.143698][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 132.147240][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 132.204854][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'. [ 132.208595][T11674] nbd: must specify at least one socket [ 132.212212][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1677'. [ 132.310167][T11681] futex_wake_op: syz.3.1680 tries to shift op by 32; fix this program [ 132.595383][ T40] audit: type=1400 audit(132.462:1157): avc: denied { write } for pid=11714 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.690733][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.693542][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.862306][T11751] overlayfs: empty lowerdir [ 132.927099][ C0] net_ratelimit: 4 callbacks suppressed [ 132.927150][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.988847][ T40] audit: type=1400 audit(132.862:1158): avc: denied { bind } for pid=11765 comm="syz.0.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.075397][T11775] veth0_to_batadv: entered promiscuous mode [ 133.077688][T11775] veth0_to_batadv: entered allmulticast mode [ 133.081656][T11775] bridge_slave_0: entered promiscuous mode [ 133.083606][T11775] bridge_slave_0: entered allmulticast mode [ 133.120369][T11779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=11779 comm=syz.0.1713 [ 133.317117][T11797] CUSE: info not properly terminated [ 133.399694][ T40] audit: type=1400 audit(133.272:1159): avc: denied { getopt } for pid=11805 comm="syz.2.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.685581][ T24] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 133.725602][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.837326][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 133.840665][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 133.843890][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 133.849982][ T24] usb 5-1: string descriptor 0 read error: -22 [ 133.852226][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.855979][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.861315][T11809] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.957326][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.066978][ T24] cdc_ncm 5-1:1.0: bind() failure [ 134.072616][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 134.074829][ T24] cdc_ncm 5-1:1.1: bind() failure [ 134.078630][ T24] usb 5-1: USB disconnect, device number 7 [ 134.155564][ T5337] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 134.305528][ T5337] usb 6-1: Using ep0 maxpacket: 16 [ 134.310736][ T5337] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 134.314331][ T5337] usb 6-1: config 0 has no interface number 0 [ 134.317183][ T5337] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.321754][ T5337] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.327812][ T5337] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 134.331676][ T5337] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 134.335175][ T5337] usb 6-1: Product: syz [ 134.337083][ T5337] usb 6-1: SerialNumber: syz [ 134.341388][ T5337] usb 6-1: config 0 descriptor?? [ 134.347023][ T5337] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 134.351782][ T5337] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input17 [ 134.581284][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 134.582050][ T6006] usb 6-1: USB disconnect, device number 16 [ 134.584254][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 134.594514][ T6006] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 134.617654][T11819] QAT: Stopping all acceleration devices. [ 134.765575][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.995514][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 135.209195][T11839] fuse: Bad value for 'fd' [ 135.599720][T11848] pimreg: entered allmulticast mode [ 135.645952][T11851] pim6reg: entered allmulticast mode [ 135.651038][T11851] pim6reg: left allmulticast mode [ 135.762280][T11854] __nla_validate_parse: 5 callbacks suppressed [ 135.762293][T11854] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1732'. [ 135.795531][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 135.798707][ T5976] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 135.802157][ T5976] Bluetooth: hci3: Injecting HCI hardware error event [ 135.859696][T11861] netlink: 'syz.1.1734': attribute type 10 has an invalid length. [ 135.868030][T11861] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.024235][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 136.035600][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 136.512592][T11896] macvlan2: entered promiscuous mode [ 136.518820][T11896] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 136.560171][T11901] geneve2: entered promiscuous mode [ 136.562361][T11901] geneve2: entered allmulticast mode [ 136.791556][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 136.791568][ T40] audit: type=1400 audit(136.660:1177): avc: denied { getopt } for pid=11902 comm="syz.0.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.835675][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.085585][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.513466][ T40] audit: type=1400 audit(137.380:1178): avc: denied { map } for pid=11929 comm="syz.0.1753" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 137.586919][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 137.875591][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.965603][T11956] binder: 11955:11956 unknown command 1 [ 137.967815][T11956] binder: 11955:11956 ioctl c0306201 200000000080 returned -22 [ 138.033181][ T40] audit: type=1400 audit(137.900:1179): avc: denied { append } for pid=11959 comm="syz.1.1760" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.098709][T11969] fuse: Bad value for 'group_id' [ 138.100221][T11969] fuse: Bad value for 'group_id' [ 138.115510][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 138.119984][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 138.123826][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 138.133154][ T40] audit: type=1400 audit(138.010:1180): avc: denied { connect } for pid=11976 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.230867][ T40] audit: type=1326 audit(138.100:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz.3.1768" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81b538ebe9 code=0x0 [ 138.295610][ T2299] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 138.434490][T11998] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 138.442234][T11998] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 138.446690][ T2299] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.451987][ T2299] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 138.455306][ T2299] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.458553][ T2299] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 138.461979][ T2299] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 138.467333][ T2299] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.470087][ T2299] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.472572][ T2299] usb 6-1: Product: syz [ 138.474019][ T2299] usb 6-1: Manufacturer: syz [ 138.479626][ T2299] cdc_wdm 6-1:1.0: skipping garbage [ 138.481368][ T2299] cdc_wdm 6-1:1.0: skipping garbage [ 138.484866][ T2299] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 138.487472][ T2299] cdc_wdm 6-1:1.0: Unknown control protocol [ 138.526437][T12004] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1771'. [ 138.589830][T12006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1772'. [ 138.594471][T12006] binder_alloc: 12005: binder_alloc_buf, no vma [ 138.685214][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 138.708653][ T40] audit: type=1400 audit(138.580:1182): avc: denied { read write } for pid=11966 comm="syz.1.1762" name="cdc-wdm0" dev="devtmpfs" ino=3014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 138.716116][ T40] audit: type=1400 audit(138.580:1183): avc: denied { open } for pid=11966 comm="syz.1.1762" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 138.852996][ T2299] usb 6-1: USB disconnect, device number 17 [ 138.897100][T12020] /dev/sr0: Can't open blockdev [ 138.915541][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.086141][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 139.089959][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 139.155680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.179817][T12033] overlayfs: failed to clone upperpath [ 139.232802][ T40] audit: type=1400 audit(139.100:1184): avc: denied { read write } for pid=5963 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.241854][ T40] audit: type=1400 audit(139.100:1185): avc: denied { open } for pid=5963 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.250584][ T40] audit: type=1400 audit(139.100:1186): avc: denied { ioctl } for pid=5963 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.330917][T12044] IPv4: Oversized IP packet from 127.202.26.0 [ 139.333550][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.428965][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.497424][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.568301][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.677230][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.737375][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.778329][T12061] bond4: entered promiscuous mode [ 139.778581][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.780211][T12061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.783927][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.785383][T12061] nftables ruleset with unbound set [ 139.789682][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.793237][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.796697][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.799982][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.803342][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.806766][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.810104][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.815263][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.819657][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.823088][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.827738][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.836570][ T5337] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.887262][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.947724][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.955659][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.985605][ T5337] usb 5-1: Using ep0 maxpacket: 16 [ 139.989562][ T5337] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 139.989821][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.991986][ T5337] usb 5-1: config 0 has no interface number 0 [ 139.993218][ T5337] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 139.997549][T12051] 9p: Unknown Cache mode or invalid value fs [ 139.999227][ T5337] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 139.999240][ T5337] usb 5-1: Product: syz [ 139.999248][ T5337] usb 5-1: SerialNumber: syz [ 140.000738][ T5337] usb 5-1: config 0 descriptor?? [ 140.008026][T12051] 9p: Unknown Cache mode or invalid value fs [ 140.010283][ T5337] cm109 5-1:0.8: invalid payload size 8, expected 4 [ 140.014443][ T5337] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input18 [ 140.068347][T12051] 9p: Unknown Cache mode or invalid value fs [ 140.128648][T12051] 9p: Unknown Cache mode or invalid value fs [ 140.133510][T12051] 9p: Unknown Cache mode or invalid value fs [ 140.139499][T12051] 9p: Unknown Cache mode or invalid value fs [ 140.195935][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 140.207532][T12074] trusted_key: encrypted_key: insufficient parameters specified [ 140.389399][T12088] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 140.392632][T12088] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 140.407499][T12084] ucma_write: process 1373 (syz.1.1795) changed security contexts after opening file descriptor, this is not allowed. [ 140.496232][T12099] i2c i2c-1: Invalid block write size 34 [ 140.510884][ C3] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 140.511328][ T6054] usb 5-1: USB disconnect, device number 8 [ 140.513231][ C3] ------------[ cut here ]------------ [ 140.516701][ C3] URB ffff888024381600 submitted while active [ 140.518888][ C3] WARNING: CPU: 3 PID: 12102 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1519/0x1770 [ 140.521933][ C3] Modules linked in: [ 140.523557][ C3] CPU: 3 UID: 0 PID: 12102 Comm: syz.3.1801 Not tainted syzkaller #0 PREEMPT(full) [ 140.528621][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.533198][ C3] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 140.535441][ C3] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 3f 84 7a fa c6 05 dd a3 52 09 01 90 48 c7 c7 60 02 74 8c 48 89 de e8 e8 29 39 fa 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 140.543071][ C3] RSP: 0000:ffffc900006f8a80 EFLAGS: 00010086 [ 140.545506][ C3] RAX: 0000000000000000 RBX: ffff888024381600 RCX: ffffffff817a3358 [ 140.548741][ C3] RDX: ffff888032ad0000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 140.552076][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 140.555181][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 140.558314][ C3] R13: ffff88810b4ed857 R14: ffff8881026d10c0 R15: 000000000000000f [ 140.561443][ C3] FS: 00007f81b61726c0(0000) GS:ffff8880d69b9000(0000) knlGS:0000000000000000 [ 140.564968][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.567575][ C3] CR2: 00007f81b6171f98 CR3: 000000002988f000 CR4: 0000000000352ef0 [ 140.570851][ C3] Call Trace: [ 140.572207][ C3] [ 140.573342][ C3] ? find_held_lock+0x2b/0x80 [ 140.575227][ C3] ? __pfx____ratelimit+0x10/0x10 [ 140.577341][ C3] cm109_urb_irq_callback+0x2ed/0xb80 [ 140.579501][ C3] ? do_raw_spin_lock+0x12c/0x2b0 [ 140.581542][ C3] __usb_hcd_giveback_urb+0x38b/0x610 [ 140.583867][ C3] usb_hcd_giveback_urb+0x39b/0x450 [ 140.586222][ C3] dummy_timer+0x1814/0x3a30 [ 140.588252][ C3] ? find_held_lock+0x2b/0x80 [ 140.590140][ C3] ? debug_object_deactivate+0x1ec/0x3a0 [ 140.592447][ C3] ? debug_object_deactivate+0x1ec/0x3a0 [ 140.594703][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 140.597121][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 140.599105][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 140.601094][ C3] ? mark_held_locks+0x49/0x80 [ 140.603023][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 140.605349][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 140.607301][ C3] __hrtimer_run_queues+0x1ff/0xad0 [ 140.609406][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 140.611656][ C3] ? read_tsc+0x9/0x20 [ 140.613362][ C3] hrtimer_run_softirq+0x17d/0x350 [ 140.615402][ C3] handle_softirqs+0x216/0x8e0 [ 140.617341][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 140.619487][ C3] __irq_exit_rcu+0x109/0x170 [ 140.621445][ C3] irq_exit_rcu+0x9/0x30 [ 140.623179][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 140.625452][ C3] [ 140.626629][ C3] [ 140.627807][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 140.630228][ C3] RIP: 0010:get_stack_info_noinstr+0x2e/0x120 [ 140.632665][ C3] Code: 41 55 41 54 49 89 fc 55 48 89 d5 53 48 89 f3 e8 18 01 00 00 84 c0 0f 85 90 00 00 00 65 48 8b 15 c0 f3 42 08 48 39 d3 74 0b 5b <5d> 41 5c 41 5d c3 cc cc cc cc 48 c7 c7 40 02 e5 8d e8 5c 48 00 00 [ 140.640513][ C3] RSP: 0000:ffffc9000502f370 EFLAGS: 00000202 [ 140.643071][ C3] RAX: 0000000000000001 RBX: ffff888032ad0000 RCX: ffffc90005030000 [ 140.646261][ C3] RDX: ffffc9000502f408 RSI: ffff888032ad0000 RDI: ffffc9000502f3b8 [ 140.649489][ C3] RBP: ffffc9000502f408 R08: 0000000000000001 R09: 0000000000000000 [ 140.652663][ C3] R10: ffffc9000502f408 R11: dffffc0000000000 R12: ffffc9000502f3b8 [ 140.655784][ C3] R13: ffffc9000502f428 R14: ffffc9000502f408 R15: ffffc9000502f430 [ 140.658954][ C3] get_stack_info+0x30/0xa0 [ 140.660815][ C3] __unwind_start+0x3f6/0x7f0 [ 140.662712][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.665224][ C3] arch_stack_walk+0x73/0x100 [ 140.667115][ C3] ? __unwind_start+0x574/0x7f0 [ 140.669089][ C3] stack_trace_save+0x8e/0xc0 [ 140.670979][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 140.673148][ C3] save_stack+0x160/0x1f0 [ 140.674878][ C3] ? __pfx_save_stack+0x10/0x10 [ 140.676855][ C3] ? __lock_acquire+0x62e/0x1ce0 [ 140.678857][ C3] __set_page_owner+0x91/0x550 [ 140.680799][ C3] ? __pfx___set_page_owner+0x10/0x10 [ 140.682932][ C3] ? bad_range+0x261/0x4c0 [ 140.684801][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.686892][ C3] post_alloc_hook+0x1c0/0x230 [ 140.688853][ C3] get_page_from_freelist+0x132b/0x38e0 [ 140.691120][ C3] ? prepare_alloc_pages+0x3c2/0x610 [ 140.693282][ C3] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 140.695691][ C3] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.698250][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.700643][ C3] ? policy_nodemask+0xea/0x4e0 [ 140.702598][ C3] alloc_pages_mpol+0x1fb/0x550 [ 140.704558][ C3] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 140.706718][ C3] ? __lock_acquire+0x62e/0x1ce0 [ 140.708618][ C3] folio_alloc_mpol_noprof+0x36/0x2f0 [ 140.710873][ C3] vma_alloc_folio_noprof+0xed/0x1e0 [ 140.712930][ C3] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 140.715580][ C3] do_pte_missing+0x2230/0x3ba0 [ 140.717897][ C3] ? find_held_lock+0x2b/0x80 [ 140.720021][ C3] __handle_mm_fault+0x152a/0x2a50 [ 140.722308][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 140.724733][ C3] ? lock_vma_under_rcu+0x1eb/0x530 [ 140.726828][ C3] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 140.729357][ C3] ? __pfx_sigprocmask+0x10/0x10 [ 140.731540][ C3] handle_mm_fault+0x589/0xd10 [ 140.733709][ C3] ? __bpf_trace_exceptions+0x1/0x40 [ 140.735567][ C3] do_user_addr_fault+0x60c/0x1370 [ 140.737428][ C3] ? rcu_is_watching+0x12/0xc0 [ 140.739094][ C3] exc_page_fault+0x5c/0xb0 [ 140.740690][ C3] asm_exc_page_fault+0x26/0x30 [ 140.742254][ C3] RIP: 0033:0x7f81b524e1ee [ 140.743668][ C3] Code: f6 31 c0 e8 b4 f2 13 00 48 81 c4 90 00 00 00 48 98 5b c3 66 0f 1f 84 00 00 00 00 00 41 54 55 53 48 89 fb 48 81 ec d0 00 00 00 <48> 89 74 24 28 48 89 54 24 30 48 89 4c 24 38 4c 89 44 24 40 4c 89 [ 140.749850][ C3] RSP: 002b:00007f81b6171f70 EFLAGS: 00010202 [ 140.751783][ C3] RAX: 0000000000000000 RBX: 00007f81b5413167 RCX: 00007f81b542a35e [ 140.754274][ C3] RDX: 0000000000015b8b RSI: 0000000000000001 RDI: 00007f81b5413167 [ 140.756769][ C3] RBP: 00007f81b55b6090 R08: 00000000000069a8 R09: 00007f81b6194000 [ 140.759258][ C3] R10: 0000000000000001 R11: 00161cb2efa59c58 R12: 0000000000000001 [ 140.761761][ C3] R13: 00007f81b55b6128 R14: 00007f81b55b6090 R15: 00007ffee8d6d0a8 [ 140.764273][ C3] [ 140.765271][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.767548][ C3] CPU: 3 UID: 0 PID: 12102 Comm: syz.3.1801 Not tainted syzkaller #0 PREEMPT(full) [ 140.770459][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.773950][ C3] Call Trace: [ 140.775034][ C3] [ 140.775990][ C3] dump_stack_lvl+0x3d/0x1f0 [ 140.777584][ C3] vpanic+0x6e8/0x7a0 [ 140.778939][ C3] ? __pfx_vpanic+0x10/0x10 [ 140.780552][ C3] ? usb_submit_urb+0x1519/0x1770 [ 140.782356][ C3] panic+0xca/0xd0 [ 140.783715][ C3] ? __pfx_panic+0x10/0x10 [ 140.785319][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 140.787086][ C3] check_panic_on_warn+0xab/0xb0 [ 140.788722][ C3] __warn+0xf6/0x3c0 [ 140.789984][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 140.791582][ C3] ? usb_submit_urb+0x1519/0x1770 [ 140.793181][ C3] report_bug+0x3c3/0x580 [ 140.794561][ C3] ? usb_submit_urb+0x1519/0x1770 [ 140.796159][ C3] handle_bug+0x184/0x210 [ 140.797535][ C3] exc_invalid_op+0x17/0x50 [ 140.798976][ C3] asm_exc_invalid_op+0x1a/0x20 [ 140.800555][ C3] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 140.802337][ C3] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 3f 84 7a fa c6 05 dd a3 52 09 01 90 48 c7 c7 60 02 74 8c 48 89 de e8 e8 29 39 fa 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 140.808380][ C3] RSP: 0000:ffffc900006f8a80 EFLAGS: 00010086 [ 140.810308][ C3] RAX: 0000000000000000 RBX: ffff888024381600 RCX: ffffffff817a3358 [ 140.812799][ C3] RDX: ffff888032ad0000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 140.815274][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 140.817750][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 140.820228][ C3] R13: ffff88810b4ed857 R14: ffff8881026d10c0 R15: 000000000000000f [ 140.822754][ C3] ? __warn_printk+0x198/0x350 [ 140.824278][ C3] ? __warn_printk+0x1a5/0x350 [ 140.825800][ C3] ? find_held_lock+0x2b/0x80 [ 140.827297][ C3] ? __pfx____ratelimit+0x10/0x10 [ 140.828910][ C3] cm109_urb_irq_callback+0x2ed/0xb80 [ 140.830616][ C3] ? do_raw_spin_lock+0x12c/0x2b0 [ 140.832204][ C3] __usb_hcd_giveback_urb+0x38b/0x610 [ 140.833921][ C3] usb_hcd_giveback_urb+0x39b/0x450 [ 140.835561][ C3] dummy_timer+0x1814/0x3a30 [ 140.837033][ C3] ? find_held_lock+0x2b/0x80 [ 140.838537][ C3] ? debug_object_deactivate+0x1ec/0x3a0 [ 140.840346][ C3] ? debug_object_deactivate+0x1ec/0x3a0 [ 140.842136][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 140.844045][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 140.845599][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 140.847163][ C3] ? mark_held_locks+0x49/0x80 [ 140.848697][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 140.850530][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 140.852073][ C3] __hrtimer_run_queues+0x1ff/0xad0 [ 140.853849][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 140.855646][ C3] ? read_tsc+0x9/0x20 [ 140.857051][ C3] hrtimer_run_softirq+0x17d/0x350 [ 140.858793][ C3] handle_softirqs+0x216/0x8e0 [ 140.860390][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 140.862068][ C3] __irq_exit_rcu+0x109/0x170 [ 140.863592][ C3] irq_exit_rcu+0x9/0x30 [ 140.864954][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 140.866731][ C3] [ 140.867684][ C3] [ 140.868639][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 140.870538][ C3] RIP: 0010:get_stack_info_noinstr+0x2e/0x120 [ 140.872508][ C3] Code: 41 55 41 54 49 89 fc 55 48 89 d5 53 48 89 f3 e8 18 01 00 00 84 c0 0f 85 90 00 00 00 65 48 8b 15 c0 f3 42 08 48 39 d3 74 0b 5b <5d> 41 5c 41 5d c3 cc cc cc cc 48 c7 c7 40 02 e5 8d e8 5c 48 00 00 [ 140.878483][ C3] RSP: 0000:ffffc9000502f370 EFLAGS: 00000202 [ 140.880404][ C3] RAX: 0000000000000001 RBX: ffff888032ad0000 RCX: ffffc90005030000 [ 140.882889][ C3] RDX: ffffc9000502f408 RSI: ffff888032ad0000 RDI: ffffc9000502f3b8 [ 140.885375][ C3] RBP: ffffc9000502f408 R08: 0000000000000001 R09: 0000000000000000 [ 140.887855][ C3] R10: ffffc9000502f408 R11: dffffc0000000000 R12: ffffc9000502f3b8 [ 140.890336][ C3] R13: ffffc9000502f428 R14: ffffc9000502f408 R15: ffffc9000502f430 [ 140.892884][ C3] get_stack_info+0x30/0xa0 [ 140.894317][ C3] __unwind_start+0x3f6/0x7f0 [ 140.895893][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.897971][ C3] arch_stack_walk+0x73/0x100 [ 140.899579][ C3] ? __unwind_start+0x574/0x7f0 [ 140.901343][ C3] stack_trace_save+0x8e/0xc0 [ 140.903041][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 140.904759][ C3] save_stack+0x160/0x1f0 [ 140.906148][ C3] ? __pfx_save_stack+0x10/0x10 [ 140.907689][ C3] ? __lock_acquire+0x62e/0x1ce0 [ 140.909247][ C3] __set_page_owner+0x91/0x550 [ 140.910746][ C3] ? __pfx___set_page_owner+0x10/0x10 [ 140.912434][ C3] ? bad_range+0x261/0x4c0 [ 140.913826][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.915443][ C3] post_alloc_hook+0x1c0/0x230 [ 140.916976][ C3] get_page_from_freelist+0x132b/0x38e0 [ 140.918685][ C3] ? prepare_alloc_pages+0x3c2/0x610 [ 140.920367][ C3] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 140.922230][ C3] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.924299][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.926159][ C3] ? policy_nodemask+0xea/0x4e0 [ 140.927714][ C3] alloc_pages_mpol+0x1fb/0x550 [ 140.929279][ C3] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 140.930953][ C3] ? __lock_acquire+0x62e/0x1ce0 [ 140.932542][ C3] folio_alloc_mpol_noprof+0x36/0x2f0 [ 140.934182][ C3] vma_alloc_folio_noprof+0xed/0x1e0 [ 140.935871][ C3] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 140.937756][ C3] do_pte_missing+0x2230/0x3ba0 [ 140.939307][ C3] ? find_held_lock+0x2b/0x80 [ 140.940831][ C3] __handle_mm_fault+0x152a/0x2a50 [ 140.942506][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 140.944247][ C3] ? lock_vma_under_rcu+0x1eb/0x530 [ 140.945925][ C3] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 140.947686][ C3] ? __pfx_sigprocmask+0x10/0x10 [ 140.949341][ C3] handle_mm_fault+0x589/0xd10 [ 140.950933][ C3] ? __bpf_trace_exceptions+0x1/0x40 [ 140.952700][ C3] do_user_addr_fault+0x60c/0x1370 [ 140.954340][ C3] ? rcu_is_watching+0x12/0xc0 [ 140.955881][ C3] exc_page_fault+0x5c/0xb0 [ 140.957335][ C3] asm_exc_page_fault+0x26/0x30 [ 140.958881][ C3] RIP: 0033:0x7f81b524e1ee [ 140.960312][ C3] Code: f6 31 c0 e8 b4 f2 13 00 48 81 c4 90 00 00 00 48 98 5b c3 66 0f 1f 84 00 00 00 00 00 41 54 55 53 48 89 fb 48 81 ec d0 00 00 00 <48> 89 74 24 28 48 89 54 24 30 48 89 4c 24 38 4c 89 44 24 40 4c 89 [ 140.966345][ C3] RSP: 002b:00007f81b6171f70 EFLAGS: 00010202 [ 140.968244][ C3] RAX: 0000000000000000 RBX: 00007f81b5413167 RCX: 00007f81b542a35e [ 140.970724][ C3] RDX: 0000000000015b8b RSI: 0000000000000001 RDI: 00007f81b5413167 [ 140.973217][ C3] RBP: 00007f81b55b6090 R08: 00000000000069a8 R09: 00007f81b6194000 [ 140.975699][ C3] R10: 0000000000000001 R11: 00161cb2efa59c58 R12: 0000000000000001 [ 140.978175][ C3] R13: 00007f81b55b6128 R14: 00007f81b55b6090 R15: 00007ffee8d6d0a8 [ 140.980667][ C3] [ 140.982407][ C3] Kernel Offset: disabled [ 140.983784][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:39:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000193ee1 RBX=0000000000000000 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50208 RDI=ffffffff8c162900 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2f95cb CR3=0000000033079000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=00000000fffffffe Opmask02=00000000ffffffff Opmask03=0000000000000020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557a9509b160 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557a95096470 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdb63df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732609e67b7483 7373260cb03eb459 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 114056351eca4e2c 7373737624da23f8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000035 0000557f00636475 0000000000000021 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c2f0073656c0000 39326c6c696b6672 2f01dc4c82c4a025 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c2c346d2c 383261722c463831 2c4538312c443831 2c4338312c423831 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4138312c393831 2c3838312c373831 2c3638312c353831 2c3438312c333831 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c3238312c313831 2c3038312c463731 2c4537312c443731 2c4337312c423731 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4137312c393731 2c3837312c373731 2c3637312c353731 2c3437312c333731 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888032ef0af0 RCX=00000000c7660ac0 RDX=0000000000000000 RSI=ffff888032ef0b40 RDI=00000000a0b633e0 RBP=0000000000000000 RSP=ffffc9000d65f958 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000002 R11=0000000000000000 R12=ffff888032ef0b40 R13=ffff888032ef0000 R14=0000000000000002 R15=0000000000000003 RIP=ffffffff8197abe1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f96af9b7dac CR3=0000000031cb9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000508c DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558791d2bc 000055558791c800 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558790cb37 000055558790caa0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003201000018004 180800049c080001 00000608060a016f a600080001980300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000282e08038003 0380040480030480 0420030008001003 0fffffffffffff04 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302100030035010 0004900301001415 00001c0000000000 0000000001005200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a810000004010000 060806060168dc40 8080800800600300 1000500300100040 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001000008 080608c0a4100010 8080841000048080 80100000040c0141 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce04100008881000 038004060875c800 2330302f2330302f 6273752f7375622f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642f01ffffff ffffffffffd50803 80030fffffffffff ff0402ec84080001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040806060117 c20480a080a81000 0004010000060806 060168dc40808080 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffffff8e5c1220 RCX=ffffffff822dc092 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000061fa90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff822dbedc R13=0000000000000202 R14=ffff88801e2c0000 R15=dffffc0000000000 RIP=ffffffff8197c0d0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f96b04e56c0 CR3=0000000051a64000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000508c DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe08c4ef10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe08c4f096 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe08c4f096 00007ffe08c4f09c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96af812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96af812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96af812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96af812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96af812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96af812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc900006f83f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000050 R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f81b61726c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f81b6171f98 CR3=000000002988f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee8d6d5b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee8d6d5b6 00007ffee8d6d5bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81b5412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81b5412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81b5412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81b5412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81b5412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81b5412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81b55874a8 00007f81b55874a0 00007f81b5587498 00007f81b5587470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81b60ed100 00007f81b5587460 00007f81b5587478 00007f81b55874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81b55874b8 00007f81b55874b0 00007f81b55874a8 00007f81b55874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000