last executing test programs: 1m3.611362865s ago: executing program 1 (id=210): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='a'], 0xa) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r5, 0x3, {0x0, 0x0, 0x1}, 0x1}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1m3.504406334s ago: executing program 1 (id=212): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) 1m3.504217706s ago: executing program 1 (id=213): r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x4, 0x70bd26, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0xaac5}}}}]}, 0x38}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m3.435043001s ago: executing program 1 (id=215): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x200000, 0x0) r0 = memfd_secret(0x80000) futimesat(r0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={{0x77359400}}) 1m3.330152527s ago: executing program 1 (id=217): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0190c2000100080045dd0038006400000a019078ac1414bbac1414aa030b907800ffffff45180001006400070c6c000200000000ffffffff3cfd1cc2570000f7"], 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000000c0)={0x30, "58db8e2886c58dedae00f13cc17206c1c0dc504ae0ebea61dbf33843be189a6a1004eea6186435b4631012686b86ccf010c0de413adc834811ebcc33107b48f6fd3178493c6e694e73fa72b695e4cf1e47e6da7e03ec772868a2c65241d21058d4b193d0e1b56474a862f8aa99283cf8f507a54735c19b92c374eb97f52788c7"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000037000100ffffffff333cc3c74de93efe"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) 1m3.043989191s ago: executing program 1 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 1m2.99259058s ago: executing program 32 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 813.143464ms ago: executing program 0 (id=1031): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x3, 0x8000, 0x0, 0x0, 0x80000000, 0x65f40}) 812.467917ms ago: executing program 4 (id=1033): r0 = syz_io_uring_setup(0x38, &(0x7f0000000080)={0x0, 0xadde, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0000151, 0x1, {0xfffd}}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) 810.768824ms ago: executing program 0 (id=1034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x2000) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000500)=0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000086dd05005600080054"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x9, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0xd385, 0x1, 0x8, 0x7}, {0x1, 0x1, 0xa, 0x6}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0xd385, 0x1, 0x8, 0x7}, {0x1, 0x1, 0xa, 0x6}]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000000c0)={0x4}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000000c0)={0x4}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0360000000500000180012800e00010069703665727370616e000000fffc028008000500", @ANYRES8=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08002800d57520"], 0x95}}, 0x10000800) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0360000000500000180012800e00010069703665727370616e000000fffc028008000500", @ANYRES8=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08002800d57520"], 0x95}}, 0x10000800) 810.231361ms ago: executing program 4 (id=1036): r0 = gettid() r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f00000000c0)=0x80, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x8e0f}], 0x1, 0x40010142, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) fchmod(0xffffffffffffffff, 0x101) syz_io_uring_setup(0x534, &(0x7f0000000180)={0x0, 0x7374, 0x0, 0x8200, 0xfd}, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x6) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10002) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000001200)={0x9, 0xef9, 0x100}) (async) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)=0x1) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r7, 0x100000000) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) (async) sendto$inet(r8, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) (async) shutdown(r8, 0x1) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x3e, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e0001000000b3000026b82bd90000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x3}, 0x0) 738.436005ms ago: executing program 4 (id=1040): r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xa0031718561b10dc, 0x0, 0x1, 0x0, 0xd, 0x0, 0x0, 0x100}}, 0x50) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8971, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) 683.933458ms ago: executing program 0 (id=1043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="000000008000000000000000010067e404d2ee6de30800e087f4f65a2d7c8fb19a403c6e238c057f6e70d99452efb6fd2b0a38c3dc2279b0b8eac3b05a6cadf80cdee8abeb37c0c3595039ec412534c32bb68e39f77f2eb29780fe08927dbf99e902b088474536477904cc20638afc08ff93eb32e750919d281b23eb5561d92ee11820aa76e0038fb6930d290278717f9f350cf34d275e8f4b28c0d7d3d82d5b7d98d075d6e3f968234cb98dd594034ecad8cc335ca37418c7a4537002a1e00b53aa7aa35495ccabf07c280142bf3021b4c58e320369ad66a978a68aaf4a46cd79e6fa78a1038e30129943bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x38}}, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="260f8a0c00ba4200ec2e0faaf2ab9e0f01cb360f23a50f01c5baf80c66b86c59358e66efbafc0cb81000ef2edc33", 0x2e}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 630.577886ms ago: executing program 4 (id=1045): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 32) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x9, 0x6, 0x8}) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 556.485456ms ago: executing program 2 (id=1048): syz_open_dev$sg(&(0x7f0000000080), 0xf1aa, 0x4402) close(0x3) 555.760476ms ago: executing program 2 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x1ff, 0x17d, 0x8, 0x0, 0x0, [{{r0}, 0x7}, {{r1}, 0x849e}, {{r0}, 0x200}, {{r0}, 0x9}, {{r0}, 0xa}, {{r0}, 0x8}, {{r0}, 0x3}, {{r0}, 0x100000000000000}]}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0d9036fe27ff2f7c5e2513000000"], 0x14}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000540)={{r1}, "72c3d7f2d0b51b89c542072e8e06a352a189cc203fa3170340fb68ad4b6139b7d6048f6bc5823ba9d81d9f6caea6f3bf486692a35ce094c2326c9ec18202ed44bad7cc7a9b19942546819d22c69a8a3ec2603b00c77fcf53ea1f2c00b78c42fd01bd9662ef45d3133aacd88f3ea4b29b2c643fb5c7f1df99d60d54dc11ce62ec5ef65ebb5af7985cd49fd2de4816c6ab58c18ca4a500b94e5b2747898df064d0916b428fe184c41e788de5d085f023ce1d8d706216d0a213405fb975cd6b73bf91f4a4937c131e425dd34296c61d45477ae5ed715b3acc998cf887efbc52ae0f9fbd9d158da78fc05aaee203e5fd2365531b116a57eb0e2538d80ceff2129bffca5ceeb6122bd99a2702a78c4e71dadc7a8b8b12f98547f741a3f00dc70a046f91b37d302f543c74033045587a6bbe4f6bd77542aa2c7e6b4c1b5c3a0aa6d8eb16b9e4340c04655fd5632e14dd4f0700c6b9a0262b730a0d331ea8e58e3b25d226fa40107f0d379a5efb1062d0b7f7a2e898136d39cb58b2ed60d93c456dd1fe6ba4852eb18a8fe6bda7ac877f303109bb0ff184f147518e3ce63c335fadfe36d88d6d157c5ed3a7903c041683e652ef14b7e6190f2b5e20eb47ef3f10e23ff105a141bd445cbd3f9e30bf53938005eb8e3a42c68fde84574441d6e608dc7e6195d4deae0167733756a49161b9db83840ea4332a5f74d433c0497355cea5549a133611a26decd9b565bb4cb18310b1cc80e078c8af80a13c0c87e21a25d7754268f125664bd32afdaf035c6cbe1c049022cefa3f0f103c27cd9cd747f37afea52001c8bbc6b181a15e7e6424fc0905f0a73c2e7b58e6f48fa9aa21434d70b37ac49eac70dc47fcd0503a4c36ec328ec65cf31a80b396107895c7a95cc40a6fcea67803d8f0747431cf8ccc87e3382d1a65fd47e20e454cc1535c682e896d74ece087898d9e866d970fda0802cee9ebc096138e35954bb1bec7bc3dbba3c5e353adaa1ad65fe33f98ccc3d72de3c37e6b56445608af23f5934cf20dd122f66d63e1edf59cbe273a58f716201ffcce88d622217984aebbb5ce5f9e2e1f511eac15ef513315af23924dc0a61af946f173722884992872100019141e311a1df7cf42c02474f5dccdc3fe0f4e1da9376b1fef27556280a0186cb6f537f319be6d2ca44dc0e487e79fd097d5b0a0bd4517df51c0316b20a7d4d6b97a6b6e56369709d04c95f341a632811b92513670b4284d2e0650b1a6f6233f3e7440481440f0a21f7ad92349d5f00b14a9da1f23c78359dba61cbaae056ee0c14d2cc6d72ebc2443d3493253e673a522258171467d916e3aa680adb400a893a0b6b7c0973ef3bc12bbd7240e43cce510bad71f0e739b68ccebc01853a1b8952cf9a6001c9ab4c1e910dc7208923f0ab33af87a8c0154ff2873d372e7e410b5773e344a7fccfb0561649037f5e28263450b63b4b105a30ec0cdd66b43410d447e95b0e52adb85e378136942dd84304f9e4ad472c49b23e25e7d02ea04d360250840e6352685b5ccb4c4060464e81450c25b8698adf442f13a4881ea43fcbcd291e049066f6299b1f388d2d4d80d808a3c75c61df167e76389b1c55ea2c1476e8da2756b5b48296ab51f2bb7fd7a2020ef42d1ad07304580c4ee741933591217d8b18022139ec6287adc6ed7805f86103f3fb151c3e134accc7f02c48b3adb034fcc46c4bfb7310c33d953f18afcfd79e4db02eeacc9ccba1805d658d7a553447bd76334e318e3690f44ef9908c816e965b8c52ee355c7cf27e757be814edf005d10a32604fa7540dfb0fc60106e51a8c55147371969b8bc9c74f3c6cc4093402a02481f5776e9f6bb6be7accb2680a611426cddc9ed59f139bd6a72f1017ac39b9157a694ba0887c44b739fa92c0eb91c1f600631f50e8cefd63d8bb31f9de2af6089a6eacba158e18c7c9799678f099338fa424c60d60cd97721fb46e80d9a9f5ba6e03be9372a24ad26ba3a7085467edbc01ea3c76719920b82ac5815e7d7162635ea6b755ceace84d2fc00d22aa9ed88513e672a7d17e9ac478f7e5536408aaaad08875aea04f96173446bbdbbf795a002b778e7056013838afae7ad3b3ced2423162e9c6cec35f129202ec8b067ed56f687fb6672be0f2bfe9e9e76a9d736927f9d5c9f7a0ba2701aaba5f4f30126de81eaa49668b0e7605eb160b901f25e7d12df750c25cb77749901099926a3fa02215693f3dfb5e27c833a4d83bcac9fb84289787eaf430115307205300c2dfe940be4a7e8b931fa97bd5a83b9e186f75169e0d32dfb6ff07f0d336d3582e3ee12153bab8ed96125b7f7bfd8a6ab0d9f431e251dd2434f1f43b9fe807638ace473ce6a7b5ecb95a727982a8e9a958d866510e7a458941cde9810e7946c65aa329dbfe2dfae669732506f15f8bda5bc8a368fc0a101dc70a0bc80209cfedf73b551c89f6f6fbe73b6bebf1606b32c48990a0c5effa251ba803e3a877407cd2a7ebed12a47741d30dbaa0b5d7a40e088196e780a25c28fec9a7e027ffe2586e817e8e3427e914c468ba535a5e580f742ce6da241a2d6a29b893b51e8ae5e32e6cd616bbfa942c73dd04ecd70a65cdda27a5e36046f765ceefad1158b03636d226465e626de404dd62a59d3b1c0e431693da2bb10de1d2998e1f6f7cec8d561a7d83f8882498be997e4e445d9730176ade536326db2958595cc0c63c3e6594dbd500c21e71276c47d0c8ab5ab00fa3ad43d3b19632484e58fe11ac641569c53b2ace76b42ddb2e583f21b24c307324f140bbc43a9ae80064823afe8087c88c738f48579db21780db6e8c1b8c709a9987ece5b320388a69ae321dc79fa868bfaaa245a28af2566bce4c602ea929c5bdfe451b4a93d9fa35fecb5ada60c2fa4eacd116aade035a3da7999e20d81d535651193c4f06b9c689645a8fee9a163a1778de2d0241b28a736b51f14353895e99a200bf1779a5b152ffc2ffa6efb3956c4cbf871e5326be1346b19f970b302ac3ba4b4e40243c6594bf047450479a6b4e65848bf8d5fa647ce11f840a85887cac7bf24ea1ffe8f6e56610b7de54f729aa571af068dc560914b67114f47b147a305ec7592959a65c2b9c5923cfdbadc0c283968491fc14cdeb6df279f754afb38224b0316c73e6fd822d603ff4e91f98a153d2720f8ee3888e22bff1b6ec1af2895667c13aa96ae65c72df9a2bf383e41557df29cc6ad61543c410ab90607941c18800f3442cd08ba829a7dd6ea7fff02061281109688ec063b923c24c39fc9d5617404a02b4fe111147a361a03aa80b4a81b625b6460da5bdc4c036714ef558fe91197ee2f23be7a62b6f45a9ba940631418dedc1bbf0e79460aa63a57e83c19dfde3a717b0bf4fbcecfea1c796ed88994528d982680d4129fd6957debeafa9ef6b4c5eb002f3648e3584c4a2856b7b9b094218fa9c84056ab27afd9ee8cac503d20d0e50bfc3cbd80453926db4a15b4c56a515bb974dab398e41f66edbe9f0e7665dc2459fedf757798d61e6d3e1f5cdffa8b8c9811ca596f06ba48d8c2936f37fa735a8eaa84bd1dae3863df551afde6e5729efabd0d72e2d3b8ae4ec032791693b80cffeb3247e31d5cd0fb5da4e8cfc5687a771f80ed3d75b6a19af2b14e1711cec4ba4509f34e5e41242d4027900e56f97d7c4dc7efc7fc3beee10c5319337777945eed07753efd287c629b7b4f3a0d6cc09e558a7a5e29b9dfed3805204866cd881abb626d65fbb84d46878d26e7f148e851b0aece7468b2f89e4ea33e9a27177e03c3e86a5747d57f1e4e8b712bd885ea0729d66cfe026c8183be4051d9bb85992905dd7052db221ed427e3701c3591b61776de71299a3fa9dadef650597a4e539f7fcd25a3e02923e094728666be256983ff45ae876fd87e77f508e61c04e5aa8a277f21ba7b849f984b5d38e1e601011fee3ccf242efe7f1426f81fe95b780838607fc7387510b5692acc5ab27fddd8ce4bc9e9270abcd21af696c734d2db2fb9e7f7a2c440740533937cc68c3f31c6b3f2cdeb1e4e7ab0e5dd68bdf78a69a4142ab28e1dc09ffb261f4ea99626133d42c04143b748b62f84f6b794cf4942af8da60f0d15dcffa45eec3b0b32c977631007c19d00a2207bed105cee9bec91743733c2c248ab82b5a21e034c59fc827bdede1ec4b65bafe96e73de7583c3c7b50ec5a43823f25d082bc422556ab898a158387e247af91579061141c24e57a70dc10b72ad4013b6b818b2678aa3e61374d373926dfc385d140eda32683a2caa2698ba482806d3ba01d52eaeb97b3d938e73ca7e2b486a55722b449b9a58b1cc0cfd5cacbc155e55dac929dbbe8a3ab7317c121318ab57dcfe73093942c08ea336d6adc14081fd292a103a5376c2c05f7340834067a97e894dc8c602b4c10099bf7137b0ea9957b1590600da4fa36a296461219d9562d56fedbb5998653d4e321328740724611319b18d28df875937c4bace0d944d82cb7d9a96103b521c008d31a919fa10fc41c74ebb15a06a44946a0ec2ff2389bf849963c1f63736c3d091e169e6535dc2dfd81185eac21882f083660a993f0361ddd14a4131e46abb3740b35cbba6e41f32465c00933828b3973ff9be70dae715f20b5506bcf102b2ba641738bcdde9b5d1b77b639a4c5d41c017b14f6e26472b73543dbf157f887501d6bd94513bd1066a882a9a0fb4b7d0ea67e383dccdd55654082fb8bf7a3539d88e56b14a38b6f8d57bbc92e68f9f01e5f727361b5c48b05a7ca01f19206f7aa76be99bc0a5fbe32d1e219825ffe49ac201b9aead07d51898d6c680fe20c4aa1b7261c4e1e9d50a728ad91787b34be41a27015ff15e2e2f1ee534a823f0145a34677ea1c6b0588ef7d0b02d12d7c7914ec741247604195e77f2ad2b24d298f5ae387e38748e404a5e7fc083109fcd5cd60ed3a1aa2a0aa6780f5c083d7e9261c59f110d1aa655df618130377d3d1633329b51ba1e58a68640ad336c5d82d315450c772c8033239297a7ae7309084bff353643f65781944464bb26ef410fcf2009752576f3a74a3a887c8001e26aea410ea32ff51375b5ca1ce48e3bdbd1030e77f829eff58a0ee80d0c20e2204a1d1b4c4d62ca43b835ef55ea8996c44fcaccab0c90e17f44621b6a5b51ceced39cad0e36deb31aecee65389f496533bf589667cfff155a691c336e729fef5bbdaafe624def74d8f9942de671fee350ca74da8751fdaf2132df2c5848f56ffb99b2d4b9a8a802e22e59d71744987730c698c72a0e3879d4609e7010d1f8ad067376021f129aa0d60af015ba4b3b191c75dd1c8fea3648a9cf8b1ec02a9d85e8c4d7ca267f6e1fa16729205cfb174072cf5a17c164446bb52f55e84e8e69480dc8c7687f53ce76500af2a72cfb69a4aa40cb1c90169f294ab443741d764010b25a91c0a46f80beb6f609270bd3beb1e54c262282c2ffea9bf795e81179e5227404859b4e71b699c9dc9f00f46212dcd323fcd88064851fa82d6d06a6d14d24e222918be35c5bff08c66fd670a71b664e57489d84cbca2fefecf358ed6239581aeb9042fe4a52dbe22fbf703b9d2b5f6a91f7838db9ff39ad8ef26aa8a203e572f0cb5ad2af88190b69e23aa8f9670f8f6b145a3fa24469a7dd1186f539dcbe7714615bc8e3bde580a9793646d651f7cdca1e927480d67b8aac1463a09363c3cd6859f843904a28a6d7feaa04f4d3c175fd1e0c32a42034cffaf520f10d292a173961a8df0289ba70ce8eccdafbba8d1ba6be75a1fe"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xdc) 553.431263ms ago: executing program 2 (id=1051): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x4b, 0xc, 0x9, 0x8, @dev={0xfe, 0x80, '\x00', 0x2b}, @local, 0x0, 0x80, 0x8, 0x4}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() (async) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) wait4(r3, 0x0, 0x80000000, 0x0) (async) wait4(r3, 0x0, 0x80000000, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x51, '\x00', r0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) (async) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180)) (async) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180)) 492.245529ms ago: executing program 4 (id=1053): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) (async) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x80) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x188, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x12c, 0x2a, [@fast_bss_trans={0x37, 0x126, {0xcf, 0xa, "21bbc18fc9b2a00a176958c0dd510e19", "80ad929c9b047198ba33fdd8566cd0a999bc40b9c1389277e132e19403160d81", "0df2ab15432e7d3c1e03cd53838850f652d84b86ed2be948cc5c59242b7e94ee", [{0x4}, {0x4, 0x1a, "1965c7401de92d8af9db0be3b2ebd352d6e9d4d53e8057d5c6b2"}, {0x3, 0x1b, "8e55e1d2a7ebb291e68135d9567c1efd7f07c4c4bce343c5c98e62"}, {0x2, 0x12, "a5ba5057419b5270a5acd6a3dd7c1d6adaba"}, {0x1, 0x12, "1a37c9ce9b232fe708b4cc72492a7571719b"}, {0xa, 0xe, "8a525f2e109300dbca8240856ae1"}, {0x2, 0x1, '8'}, {0x3, 0x11, "9239f34e462db535d867822c4dacf7ac95"}, {0x4, 0x24, "8c4606c71276bd06204793fc93a1425e5414d742b81c04285d8092df56db38d154f871db"}, {0x3, 0x23, "c148ae2ad49a8b5cc79eea4ff42736cb8bea11adb4d8760f4dfdd39759e1e7aa1c98fc"}]}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x44084}, 0x800) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x5}, 0x400c0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1e8, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r2) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x60008800) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xbc, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6600ecc6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000c80)=0x7, 0x4) (async) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000cc0), 0x240400, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000d00)={{r6}, "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"}) (async) fgetxattr(r3, &(0x7f0000001d00)=@random={'btrfs.', 'TIPC\x00'}, &(0x7f0000001d40)=""/141, 0x8d) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, r0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x18}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x36, 0x1}, {0x9}, {0x12}, {0x6, 0x1}, {0xb, 0x1}, {0x12, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0xc}, {0x1b, 0x1}, {0xc, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x36, 0x1}, {0x9, 0x1}, {0x6}, {0x36, 0x1}, {0x5}, {0x36, 0x1}, {0x60, 0x1}, {0xb, 0x1}]}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d58b664216ccc7cec3008cc709"}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4046}, 0x4) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000001f40), &(0x7f0000001f80)=0x4) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x20, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) (async) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000002100)=""/4096) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003140), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000003300)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003180)={0x138, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8800}, 0x80c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003380), r3) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x34, r11, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x4008044) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r10, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0xcd851ccd98c65d01}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 477.55436ms ago: executing program 0 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRESOCT=r0, @ANYRES32=r0], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) 475.4968ms ago: executing program 4 (id=1056): syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x9, 0x8}, {0x6, 0x7, 0x3, 0x7}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_usb_connect$uac1(0x2, 0x101, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x10, 0xb0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0xa2, 0xff}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x0, 0x90, "2eeef7a677"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x2, 0x2, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x4, 0x4, 0x5, 0x0, 0x68}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0x6, "", "af"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0xb1, 0x3, "", "7c09c7"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x6, 0xd, "fc50289b91"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xac, 0x1, 0xff, 0x80, "", "341a59"}, @as_header={0x7, 0x24, 0x1, 0xc8, 0xd9, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xff, 0x4, 0x0, {0x7, 0x25, 0x1, 0x1, 0x30}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xff, 0x4, 0x2, 0x3, "f5f3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0xf9, 0xa, "50f2a66c"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0xf9, "6510e2"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x60, 0xc, "91", "36162b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x5, 0xdb, {0x7, 0x25, 0x1, 0x83, 0x5d}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x4, 0xfc, 0x1, 0x10, 0x1}, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="05564f9705065417dfbfe28d9775da7725dddba82720e645fa6e220700000000000000295e0d2a50fc293d1d856f109b8f5bd45b60c412d915ec"], 0x9, [{0x6c, &(0x7f00000001c0)=@string={0x6c, 0x3, "562592439019c49283f8b613257df857666c22aa92cba9a4701affa3107352963684bca9aabbc4f30e655e76fb991dd1c9915cb43f1154e0b8aa6d6f62928bdb5a4bab32442522569c270b93cf56d9ea77cf71a1b44d2032c397753a4b8d2802971ec12907b9e38767d2"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x140a}}, {0xe9, &(0x7f0000000280)=@string={0xe9, 0x3, "a86748981e50ec7df54bfd4719bfbd56ddbf3b8a2af90eed18dd0ca51ad7abcb60899e4a0fba11ebafbfe11a8f4dd2ea31769ca834f9513f3508b304956546919af1095bc608ca842a7e577c2c18ecf46e218f551a9c9b1b223dbbc32d3b947b06f4f72c4f0f5fec7389fd3e3a4c7ac7ee77a07e9a136e01dc643f65547caf1e8a026409417d30802f89b60630a92f862a9df106a26a04a1e6248641bcf328ddf1b8ebac7326a40f76a593e943c9d22a08ff6f00e00f904f9e75fff407274c9d2e6dfa277114e224f4d7e6a8fdabb638142ef316fa94dbcf7906d4fa63a1e2323d1be73c61649e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x2b, &(0x7f0000000400)=@string={0x2b, 0x3, "6928a017c8c838f00adeb25a59d33dd42f6a5196eacd82487014e66e838e2e73c3fdf64a4ca4d0cf3e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2401}}, {0xe, &(0x7f0000000480)=@string={0xe, 0x3, "501607fc878038827c71c7ec"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40f}}]}) 384.193805ms ago: executing program 2 (id=1057): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x7, 0x7fffffff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x4, 0x8}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1082, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9c0d}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@allow_other}, {@allow_other}], [{@uid_gt={'uid>', r5}}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise}]}}) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 383.792727ms ago: executing program 2 (id=1058): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@flag='async'}, {@euid_eq={'euid', 0x3d, r1}}, {@obj_user={'obj_user', 0x3d, 'upperdir'}}, {@subj_role}, {@uid_eq={'uid', 0x3d, r1}}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x35, 0x33, 0x65, 0x64, 0x64, 0x32, 0x31], 0x2d, [0x34, 0x66, 0x37, 0x36], 0x2d, [0x32, 0x37, 0x39, 0x37], 0x2d, [0x34, 0x39, 0x36, 0x65], 0x2d, [0x66, 0x35, 0x34, 0x62, 0x36, 0x65, 0x6f9656d6f9dcf6b0, 0x35]}}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r4 = epoll_create(0x7fffffff) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000080)=0x4a810da0, 0x4) writev(r5, &(0x7f0000000100), 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x2}) chdir(&(0x7f0000000180)='./file2\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 309.805055ms ago: executing program 2 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r2, 0x2}, 0x20) r5 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "1c6cfa7c6a0a3af105efbef98419e2256e737467919f5d2a61c29343d7221dab3ad8a3da145c526b6a94cbce4b9b9ceebb77a4edd2306b710403d20dd9613f2e", 0x18}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={r5, 0xed, 0xd1}, 0x0, &(0x7f00000002c0)="c7e80ccde63508c4a4c4c2a301f889cd74e018d8e5b2e28e87bd4f7b8c5cfaacd68c8269cd4c6602e769b3035668749ba7433db16b98ca361eea135ddcf79236d803615bc525b3a3103dd9e4b75fcb8994bf9f0bbd6fb115f0da76a2dad6c44e7238d2eb9ecca1d5738cc76a6f56351ab6a80f1ac398bbf5d57b94531ba297a9b97c7f0669a3fd94b69f7507e112395b4384af63b26b329d69134b25e237fbda5e6f89ce19fbbfd30ed64482595c986f0f1aa1a340161ce66c6ab4580743a1090702933e140447a629add2c75f053ce236cca942b126afc914c77d5e7483f4838ce1bc385377e364342bf28f61", &(0x7f0000000700)=""/209) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv6_newaddr={0x18, 0x18, 0x121, 0x70bd2a, 0x0, {0x23}}, 0x18}}, 0x0) sendmsg$inet_sctp(r6, 0x0, 0x881) dup(r6) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000000000081000040"]) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x24040884}, 0x0) r12 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r14 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x6, 0xe, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x64, 0x0, 0x50, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_prespec={0x44, 0x44, 0x9, 0x3, 0x6, [{@loopback, 0x5}, {@local, 0xf}, {@multicast2, 0x2}, {@broadcast, 0x6}, {@local, 0x3}, {@rand_addr=0x64010100}, {@broadcast, 0x5}, {@remote, 0x8}]}, @generic={0x88, 0x11, "1abde53273e5c7b8d03bbc7c2e3a87"}, @rr={0x7, 0x7, 0x86, [@private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$EVIOCGKEYCODE_V2(r14, 0x80284504, &(0x7f0000000000)=""/98) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x29c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x269, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_a, @device_a, @from_mac=@broadcast, {0x7, 0x7}}, 0x3308, 0x3e, @default, @val={0x1, 0x1, [{0x66, 0x1}]}, @val={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x626381b2, 0xc, 0x0, 0x57, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x12, 0x7}}, [{0xdd, 0x6b, "0c98a44cc9c7745de18f3e824c00adcccabfc7b2a1656171a1bfb08f41d425e505c58594cb9e35e19d7cdf636036e08f1871ed2d55ed88886655097cab9246ef3a090bfd6553232d28c00267d80a13720c767d700c80bed879d8badbcba339276c29c5c024c2c5e9d92901"}, {0xdd, 0xed, "4e1ef58278c62418e417ae3ca524843627ebb011e6afbb30e6b35ab3f88ae15f38a1e3d3d189e4dcc12bda3834b604478616ec4e7ad5288db71d338f1f4a0c137b2d4673fd0f36c6d65c8c466da6f0d62eb01725cab945d84e52c35da82881d45494eebcd5c5665a495334f9eec49a7f30c6b48eaad0ded91c1519581207a96cb7133df4422ed313c273abc892082a49849d0c852833da1241b76ab34eae7cdfce6fc16517a353fc4e078184a53b56d7b9aae906a7dc000c79d0685ca6f3c415b65a5ddefc42927a4b9c315ab9bd8e45f298c78510bc68b7862f3108cc15235b5bf8fa1160994d356147e39a5f"}, {0xdd, 0x7f, "105594a0c90432592d8ceb0cade751bfe80cabd7a665cef0705c81dccee272784c4dbcd51610ff7a5ef07d1b563f98fd8cdf00d080e1e4977b03bf3b29ed765b67699b68d83124b60de494a0c1b9c1846a62bda8a989a0180d40b1245029257db2c1c5ea4680e51f70ae6d3957c16a4a27f17aab09f5ccf0b68ae059d6ff92"}, {0xdd, 0x49, "cd82d993efe916a141ecd58e3e3886e95715753ee9b73ffca8206343b9ec7035120a8dd1e599493427ad2acb69f8a156b44c24cbaf42f242ccde603de5c655c8da9d4c10e849341a5d"}]}}]}, 0x29c}}, 0x0) 309.494013ms ago: executing program 3 (id=1061): r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)='A', 0x1}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x60, 0x4000000}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @any, 0x0, 0x0, 0x5e, 0x6, 0x9a6, 0x10001, 0x8}) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x5000003a, r1, 0x0) r5 = creat(&(0x7f0000000200)='./file5\x00', 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file5\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="2f1f8646a39c79bd958af9ca3079309bbf21b21e4e491ece0a7531", 0x1b, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000400)={r6}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5386, &(0x7f0000000040)) 235.71917ms ago: executing program 0 (id=1062): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x694503, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="928c748fb4b6b1127fbb689b9e6a4a958502b37c14d9fbdd56a2cbb1fa4c710f9820c661e33c3cc755702ea584f5127a001e673368e957cc6400000000ac19d209b5d655a2592cc13d61d4d80fa9ec3338bbc1765289600eb02a05a4ad666c01bab7be43acadae091580dc2383f7051bdd31109451d96e9645b9ae949681307d38c8ab69140a5ab6410e3d72e6212d4831523e9b34494d5f43e62f36c62e1b2abb2b5920e48c2f624703e4b7937ed9f40e575aca88dada5d9b26339ef51a097d1f26", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf255100000008000300", @ANYRES32=r3, @ANYBLOB="05ffc50008000000000000003f278ee4100004cb290000000000f6c1c9f9d5d643da1c8711f7ff107d74330fcf35e6b93be216fde5d5a4795b8bd0b029ee03988ef65027d4d70c"], 0x30}}, 0x8000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e20, @multicast2}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b", @ANYRESOCT=r3, @ANYRES8=r6], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0xf689, 0x4000, 0x3, 0x213}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r12, 0x0, 0x0, 0x0, 0x40020100}) io_uring_enter(r9, 0x8aa, 0x0, 0x0, 0x0, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, 0xffffffffffffffff, 0x2000) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r14 = dup2(r13, r8) close_range(r14, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 234.952122ms ago: executing program 3 (id=1063): ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6}, 0x80) 171.374613ms ago: executing program 3 (id=1064): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x10, 0x3, 0x0) 107.28007ms ago: executing program 3 (id=1065): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x10001, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0ecd3b00000009000000400101c00000000000000000b6000000000000"]) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000340)='ip6tnl0\x00', 0x10) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x123}, 0x1c) 12.23909ms ago: executing program 3 (id=1066): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x1) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x4841, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000001c0)=0x40) (rerun: 32) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) (async, rerun: 64) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x6100, 0x0) (async, rerun: 64) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) (async) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2.546156ms ago: executing program 3 (id=1067): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800b0001007461726765740000200002800a0001004155444954000000050003001d00000008000240000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) write$tcp_congestion(r0, &(0x7f00000000c0)='westwood\x00', 0x9) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = getpid() (async) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) read$msr(r6, &(0x7f00000002c0)=""/51, 0x33) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r5, @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24044844}, 0x4c030) close$binfmt(r0) (async) close_range(r0, r0, 0x0) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=1068): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f030000000100000007000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004814) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): 0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.604756][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.608855][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.614226][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.617279][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.667051][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.670501][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.740945][ T6077] mmap: syz.1.2 (6077) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.775069][ T6082] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.791668][ T6077] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2'. [ 54.794628][ T6077] unsupported nlmsg_type 40 [ 54.825301][ T6090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.831350][ T6091] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 3, id = 0 [ 54.854288][ T6093] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13'. [ 54.953553][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 55.216347][ T6122] process 'syz.1.21' launched '/dev/fd/8' with NULL argv: empty string added [ 55.289592][ T6135] warning: `syz.1.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.333664][ T6148] binder: BINDER_SET_CONTEXT_MGR already set [ 55.335784][ T6148] binder: 6147:6148 ioctl 4018620d 2000000000c0 returned -16 [ 55.347934][ T6148] binder: BINDER_SET_CONTEXT_MGR already set [ 55.350486][ T6148] binder: 6147:6148 ioctl 4018620d 2000000000c0 returned -16 [ 55.353664][ T6148] binder: BINDER_SET_CONTEXT_MGR already set [ 55.356294][ T6148] binder: 6147:6148 ioctl 4018620d 2000000000c0 returned -16 [ 55.361281][ T6148] binder: BINDER_SET_CONTEXT_MGR already set [ 55.363687][ T6148] binder: 6147:6148 ioctl 4018620d 2000000000c0 returned -16 [ 55.366678][ T6148] binder: BINDER_SET_CONTEXT_MGR already set [ 55.372573][ T6148] binder: 6147:6148 ioctl 4018620d 2000000000c0 returned -16 [ 55.376591][ T6148] binder: BINDER_SET_CONTEXT_MGR already set [ 55.378772][ T6148] binder: 6147:6148 ioctl 4018620d 2000000000c0 returned -16 [ 55.381101][ T6148] binder: BINDER_SET_CONTEXT_MGR already set [ 55.383005][ T6148] binder: 6147:6148 ioctl 4018620d 2000000000c0 returned -16 [ 55.385284][ T6148] binder: BINDER_SET_CONTEXT_MGR already set [ 55.387120][ T6148] binder: 6147:6148 ioctl 4018620d 2000000000c0 returned -16 [ 55.431847][ T6160] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 55.434671][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 55.437433][ T6160] bridge_slave_1: left allmulticast mode [ 55.441164][ T6160] bridge_slave_1: left promiscuous mode [ 55.444043][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.485721][ T6161] netlink: 'syz.3.32': attribute type 62 has an invalid length. [ 55.526222][ T6160] bridge_slave_0: left allmulticast mode [ 55.531928][ T6160] bridge_slave_0: left promiscuous mode [ 55.534624][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.543049][ T6170] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 55.589643][ T6176] program syz.2.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.638078][ T1114] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 55.640819][ T1114] ata1.00: irq_stat 0x40000000 [ 55.642347][ T1114] ata1.00: failed command: ZAC MANAGEMENT OUT [ 55.644384][ T1114] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 15 [ 55.644384][ T1114] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 55.650376][ T1114] ata1.00: status: { DRDY ERR } [ 55.652442][ T1114] ata1.00: error: { ABRT } [ 55.654541][ T1114] ata1.00: device reported invalid CHS sector 0 [ 55.674393][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'. [ 55.679555][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 55.721892][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 55.725699][ T6188] chnl_net:caif_netlink_parms(): no params data found [ 55.728171][ T5985] Bluetooth: hci2: command tx timeout [ 55.729266][ T5332] Bluetooth: hci3: command tx timeout [ 55.730292][ T5985] Bluetooth: hci1: command tx timeout [ 55.817720][ T5332] Bluetooth: hci0: command tx timeout [ 55.867224][ T6194] capability: warning: `syz.1.43' uses deprecated v2 capabilities in a way that may be insecure [ 55.999490][ T6204] Bluetooth: MGMT ver 1.23 [ 56.120518][ T6220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.126932][ T6220] 9pnet_fd: Insufficient options for proto=fd [ 56.536544][ T40] kauditd_printk_skb: 6057 callbacks suppressed [ 56.536555][ T40] audit: type=1400 audit(1756996255.689:6147): avc: denied { bind } for pid=6239 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.545104][ T40] audit: type=1400 audit(1756996255.689:6148): avc: denied { name_bind } for pid=6239 comm="syz.0.56" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 56.545848][ T6238] Zero length message leads to an empty skb [ 56.552222][ T40] audit: type=1400 audit(1756996255.689:6149): avc: denied { node_bind } for pid=6239 comm="syz.0.56" saddr=10.1.1.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 56.562159][ T6240] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 56.632782][ T40] audit: type=1400 audit(1756996255.789:6150): avc: denied { create } for pid=6242 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.640877][ T40] audit: type=1400 audit(1756996255.789:6151): avc: denied { setopt } for pid=6242 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.661986][ T6245] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET) [ 56.664655][ T40] audit: type=1400 audit(1756996255.819:6152): avc: denied { ioctl } for pid=6244 comm="syz.2.58" path="socket:[8117]" dev="sockfs" ino=8117 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.702092][ T6252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6252 comm=syz.2.59 [ 56.728529][ T6255] netlink: 196 bytes leftover after parsing attributes in process `syz.2.60'. [ 56.728633][ T40] audit: type=1400 audit(1756996255.889:6153): avc: denied { nlmsg_read } for pid=6254 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.791137][ T6257] binder: 6256:6257 ioctl c0306201 200000000640 returned -22 [ 56.793557][ T6257] binder: 6256:6257 ioctl 8924 200000000040 returned -22 [ 56.794901][ T40] audit: type=1400 audit(1756996255.949:6154): avc: denied { getopt } for pid=6261 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.816925][ T40] audit: type=1400 audit(1756996255.969:6155): avc: denied { append } for pid=6263 comm="syz.2.64" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.826810][ T6266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63888 sclass=netlink_route_socket pid=6266 comm=syz.0.65 [ 57.018737][ T40] audit: type=1400 audit(1756996256.179:6156): avc: denied { read } for pid=6280 comm="syz.2.70" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 57.056911][ T6286] bpf: Bad value for 'gid' [ 57.189103][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 57.213735][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 57.260624][ T6316] evm: overlay not supported [ 57.282965][ T6313] hsr_slave_1 (unregistering): left promiscuous mode [ 57.414167][ T6330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6330 comm=syz.1.84 [ 57.457683][ T6059] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.607579][ T6059] usb 7-1: Using ep0 maxpacket: 16 [ 57.612808][ T6059] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 57.616283][ T6059] usb 7-1: config 0 has no interface number 0 [ 57.617647][ T981] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.619217][ T6059] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.625461][ T6059] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 57.631022][ T6059] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 57.633827][ T6059] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 57.636466][ T6059] usb 7-1: Product: syz [ 57.637892][ T6059] usb 7-1: SerialNumber: syz [ 57.641529][ T6059] usb 7-1: config 0 descriptor?? [ 57.651213][ T6059] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 57.656863][ T6059] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input5 [ 57.782360][ T981] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 57.784848][ T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.787021][ T981] usb 8-1: Product: syz [ 57.788628][ T981] usb 8-1: Manufacturer: syz [ 57.790220][ T981] usb 8-1: SerialNumber: syz [ 57.793248][ T981] usb 8-1: config 0 descriptor?? [ 57.808214][ T5332] Bluetooth: hci1: command tx timeout [ 57.808229][ T5971] Bluetooth: hci2: command tx timeout [ 57.818022][ T5332] Bluetooth: hci3: command tx timeout [ 57.851814][ T6315] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 57.860164][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 57.861441][ T981] usb 7-1: USB disconnect, device number 2 [ 57.863320][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 57.872325][ T981] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 57.887596][ T5332] Bluetooth: hci0: command tx timeout [ 57.998821][ T34] usb 8-1: USB disconnect, device number 2 [ 58.110567][ T6371] i2c i2c-1: Invalid block write size 34 [ 58.341574][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.344435][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.348706][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.351473][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.452448][ T6383] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 58.473879][ T6383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.496408][ T6383] veth3: entered promiscuous mode [ 58.501720][ T6383] bond1: (slave veth3): Enslaving as an active interface with a down link [ 58.628691][ T6397] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 58.768519][ T6412] cgroup2: Unknown parameter 'euid' [ 58.777616][ T1222] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.927872][ T1222] usb 8-1: Using ep0 maxpacket: 16 [ 58.933378][ T1222] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.938245][ T1222] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.942202][ T1222] usb 8-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 58.945874][ T1222] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.952023][ T1222] usb 8-1: config 0 descriptor?? [ 59.312825][ T6446] fuse: Unknown parameter '0x0000000000000003' [ 59.368807][ T1222] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5012.0002/input/input6 [ 59.376691][ T1222] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5012.0002/input/input7 [ 59.420972][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 59.423049][ T1114] ata1: failed to read log page 10h (errno=-5) [ 59.424929][ T1114] ata1.00: exception Emask 0x1 SAct 0x4000000 SErr 0x0 action 0x0 [ 59.427380][ T1114] ata1.00: irq_stat 0x40000000 [ 59.429218][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 59.431126][ T1114] ata1.00: cmd 61/78:d0:ee:04:10/00:00:00:00:00/40 tag 26 ncq dma 61440 out [ 59.431126][ T1114] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 59.436448][ T1114] ata1.00: status: { DRDY } [ 59.440567][ T1114] ata1.00: configured for UDMA/100 [ 59.442492][ T1114] ata1: EH complete [ 59.462661][ T1222] kye 0003:0458:5012.0002: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 59.616130][ T1212] usb 8-1: USB disconnect, device number 3 [ 59.616676][ C3] kye 0003:0458:5012.0002: usb_submit_urb(ctrl) failed: -19 [ 59.768906][ T6463] program syz.2.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.889348][ T5332] Bluetooth: hci2: command tx timeout [ 59.892952][ T6486] __nla_validate_parse: 13 callbacks suppressed [ 59.892962][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 59.899185][ T5332] Bluetooth: hci3: command tx timeout [ 59.900853][ T5332] Bluetooth: hci1: command tx timeout [ 59.920162][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 59.927079][ T6489] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 59.929560][ T6489] netlink: 232 bytes leftover after parsing attributes in process `syz.1.129'. [ 59.932558][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 59.978252][ T5971] Bluetooth: hci0: command tx timeout [ 60.032984][ T6496] block nbd1: Attempted send on invalid socket [ 60.035201][ T6496] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.038919][ T6496] (syz.1.131,6496,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 60.041402][ T6496] (syz.1.131,6496,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 60.043576][ T6496] (syz.1.131,6496,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 60.046259][ T6496] (syz.1.131,6496,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 60.178046][ T1212] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.337550][ T1212] usb 5-1: Using ep0 maxpacket: 32 [ 60.341105][ T1212] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 60.344193][ T1212] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 9791, setting to 1024 [ 60.348233][ T1212] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 60.356023][ T1212] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.359799][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.363601][ T1212] usb 5-1: Product: syz [ 60.364880][ T1212] usb 5-1: Manufacturer: 軦åˆâ‰¿Ñ¥æ›²à¿™ç˜§Ï»á›£æ¨…轧׫雹鶶규쉽嘛ä„åƒç¾¬ [ 60.369302][ T1212] usb 5-1: SerialNumber: syz [ 60.597949][ T1212] cdc_ncm 5-1:1.0: bind() failure [ 60.603090][ T1212] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 60.610312][ T1212] cdc_ncm 5-1:1.1: bind() failure [ 60.619433][ T1212] usb 5-1: USB disconnect, device number 2 [ 61.352487][ T6039] IPVS: starting estimator thread 0... [ 61.360994][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 61.448983][ T6554] IPVS: using max 44 ests per chain, 105600 per kthread [ 61.543708][ T6565] netlink: 'syz.2.149': attribute type 11 has an invalid length. [ 61.564863][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 61.564874][ T40] audit: type=1400 audit(1756996260.718:6232): avc: denied { load_policy } for pid=6562 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.565039][ T6563] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 61.576386][ T6563] SELinux: failed to load policy [ 61.599817][ T40] audit: type=1400 audit(1756996260.756:6233): avc: denied { append } for pid=6570 comm="syz.0.151" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 61.601254][ T6571] netlink: 68 bytes leftover after parsing attributes in process `syz.0.151'. [ 61.633960][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'. [ 61.637121][ T6571] netlink: 'syz.0.151': attribute type 20 has an invalid length. [ 61.637215][ T6566] comedi comedi0: no devices specified [ 61.648947][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'. [ 61.651928][ T6571] netlink: 'syz.0.151': attribute type 20 has an invalid length. [ 61.652524][ T1147] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.658130][ T1147] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.661129][ T1147] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.663755][ T1147] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.700509][ T40] audit: type=1400 audit(1756996260.849:6234): avc: denied { read } for pid=6576 comm="syz.1.153" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 61.710485][ T40] audit: type=1400 audit(1756996260.849:6235): avc: denied { open } for pid=6576 comm="syz.1.153" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 61.756851][ T40] audit: type=1400 audit(1756996260.905:6236): avc: denied { unmount } for pid=5975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.806936][ T40] audit: type=1400 audit(1756996260.952:6237): avc: denied { create } for pid=6583 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.831609][ T40] audit: type=1400 audit(1756996260.971:6238): avc: denied { ioctl } for pid=6574 comm="syz.2.152" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.845713][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 61.849861][ T6590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'. [ 61.882125][ T40] audit: type=1400 audit(1756996261.008:6239): avc: denied { write } for pid=6595 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.890155][ T6039] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.905870][ T40] audit: type=1400 audit(1756996261.046:6240): avc: denied { mount } for pid=6600 comm="syz.0.162" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 61.914243][ T40] audit: type=1400 audit(1756996261.055:6241): avc: denied { mounton } for pid=6600 comm="syz.0.162" path="/48/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 62.007812][ T5971] Bluetooth: hci3: command tx timeout [ 62.052281][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.061674][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 62.076489][ T6039] usb 7-1: Using ep0 maxpacket: 8 [ 62.084747][ T6039] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 62.088162][ T6039] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 62.091899][ T6039] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.092325][ T6626] NILFS (nullb0): couldn't find nilfs on the device [ 62.102634][ T6039] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.109076][ T6039] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.112661][ T6039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.121823][ T6627] loop3: detected capacity change from 0 to 1 [ 62.129410][ T6627] Dev loop3: unable to read RDB block 1 [ 62.131468][ T6627] loop3: unable to read partition table [ 62.133359][ T6627] loop3: partition table beyond EOD, truncated [ 62.136256][ T6627] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 62.191531][ T5382] Dev loop3: unable to read RDB block 1 [ 62.193351][ T5382] loop3: unable to read partition table [ 62.195249][ T5382] loop3: partition table beyond EOD, truncated [ 62.221835][ T6627] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.334766][ T6039] usb 7-1: GET_CAPABILITIES returned 0 [ 62.336511][ T6039] usbtmc 7-1:16.0: can't read capabilities [ 62.641559][ T6059] usb 7-1: USB disconnect, device number 3 [ 63.152133][ T6657] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 63.155483][ T6657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.295555][ T6687] comedi comedi4: bad chanlist[0]=0x67632f2e chan=12078 range length=2 [ 63.440519][ T5970] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.548175][ T6704] veth0_to_bond: entered allmulticast mode [ 63.590713][ T6707] bad cache= option: none [ 63.590713][ T6707] [ 63.592771][ T6707] CIFS: VFS: bad cache= option: none [ 63.601304][ T5970] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 63.605837][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.609344][ T5970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.613808][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.617286][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.620186][ T5970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.624257][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.627111][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.629965][ T5970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.633740][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.637109][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.640006][ T5970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.643593][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.646512][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.649415][ T5970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.652795][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.655951][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.658911][ T5970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.662412][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.665455][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.668472][ T5970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.672063][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.676417][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.679604][ T5970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.683991][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.689121][ T5970] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 63.693071][ T5970] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 63.696463][ T5970] usb 5-1: Product: syz [ 63.698195][ T5970] usb 5-1: Manufacturer: syz [ 63.699876][ T5970] usb 5-1: SerialNumber: syz [ 63.703688][ T5970] usb 5-1: config 0 descriptor?? [ 63.713165][ T5970] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 63.847567][ T6736] Bluetooth: MGMT ver 1.23 [ 63.924984][ T6661] fuse: Bad value for 'fd' [ 63.928696][ T6661] hfsplus: unable to find HFS+ superblock [ 63.931751][ T5970] usb 5-1: USB disconnect, device number 3 [ 63.941280][ T5970] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 64.156652][ T981] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.295495][ T981] usb 7-1: device descriptor read/64, error -71 [ 64.515223][ T6763] macvlan2: entered promiscuous mode [ 64.516938][ T6763] macvlan2: entered allmulticast mode [ 64.518910][ T6763] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 64.552182][ T981] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 64.692677][ T981] usb 7-1: device descriptor read/64, error -71 [ 64.820431][ T981] usb usb7-port1: attempt power cycle [ 64.947693][ T6059] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.129644][ T6059] usb 5-1: Using ep0 maxpacket: 16 [ 65.133438][ T6059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.137932][ T6059] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 65.142783][ T6059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.148088][ T6059] usb 5-1: config 0 descriptor?? [ 65.183291][ T981] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 65.221013][ T981] usb 7-1: device descriptor read/8, error -71 [ 65.319423][ T5332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.324143][ T5332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.327775][ T5332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.331688][ T5332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.335413][ T5332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.382733][ T6059] usbhid 5-1:0.0: can't add hid device: -71 [ 65.385500][ T6059] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 65.390637][ T6059] usb 5-1: USB disconnect, device number 4 [ 65.454295][ T6793] chnl_net:caif_netlink_parms(): no params data found [ 65.471460][ T981] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 65.493540][ T981] usb 7-1: device descriptor read/8, error -71 [ 65.527566][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.529942][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.532138][ T6793] bridge_slave_0: entered allmulticast mode [ 65.534763][ T6793] bridge_slave_0: entered promiscuous mode [ 65.538278][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.540470][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.542694][ T6793] bridge_slave_1: entered allmulticast mode [ 65.545280][ T6793] bridge_slave_1: entered promiscuous mode [ 65.588078][ T6793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.592917][ T6793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.601163][ T6807] __nla_validate_parse: 9 callbacks suppressed [ 65.601174][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 65.606172][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 65.610633][ T981] usb usb7-port1: unable to enumerate USB device [ 65.639322][ T6793] team0: Port device team_slave_0 added [ 65.644689][ T6793] team0: Port device team_slave_1 added [ 65.702389][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 65.705951][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.709742][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.721813][ T6793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.726121][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.728431][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.736142][ T6793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.777154][ T6793] hsr_slave_0: entered promiscuous mode [ 65.779780][ T6793] hsr_slave_1: entered promiscuous mode [ 65.781874][ T6793] debugfs: 'hsr0' already exists in 'hsr' [ 65.783916][ T6793] Cannot create hsr debugfs directory [ 65.826743][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 65.907367][ T6813] veth3: entered promiscuous mode [ 66.040478][ T6793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.044564][ T6793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.051014][ T6793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.057859][ T6793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.086098][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.089243][ T6793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.091695][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.093915][ T6793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.140360][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.151441][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.154873][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.164255][ T6836] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 66.164975][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.168843][ T6836] netlink: 'syz.0.233': attribute type 4 has an invalid length. [ 66.171287][ T6836] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.233'. [ 66.178713][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.181856][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.192392][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.194941][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.324984][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.535935][ T6793] veth0_vlan: entered promiscuous mode [ 66.548159][ T6793] veth1_vlan: entered promiscuous mode [ 66.573298][ T6793] veth0_macvtap: entered promiscuous mode [ 66.579384][ T6793] veth1_macvtap: entered promiscuous mode [ 66.594389][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.605881][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.612990][ T6863] ALSA: seq fatal error: cannot create timer (-22) [ 66.618714][ T1151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.621475][ T1151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.624990][ T1151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.629828][ T1151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.677546][ T6871] netlink: 44 bytes leftover after parsing attributes in process `syz.0.241'. [ 66.677906][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.683575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.696004][ T6872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.241'. [ 66.699365][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.702820][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.860562][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 66.863830][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 66.876308][ T6881] vxlan0: entered promiscuous mode [ 66.920215][ T1151] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.926274][ T1151] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.929179][ T1151] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.931956][ T1151] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.981128][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 66.981138][ T40] audit: type=1326 audit(1756996265.788:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e698ebe9 code=0x7ffc0000 [ 66.990883][ T40] audit: type=1326 audit(1756996265.788:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e698ebe9 code=0x7ffc0000 [ 66.998111][ T40] audit: type=1326 audit(1756996265.788:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35e698ebe9 code=0x0 [ 67.006787][ T40] audit: type=1326 audit(1756996265.788:6294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35e698ebe9 code=0x7ffc0000 [ 67.014692][ T40] audit: type=1326 audit(1756996265.788:6295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35e698ebe9 code=0x7ffc0000 [ 67.021750][ T40] audit: type=1326 audit(1756996265.788:6296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35e698ebe9 code=0x7ffc0000 [ 67.029317][ T40] audit: type=1326 audit(1756996265.788:6297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35e698ebe9 code=0x7ffc0000 [ 67.037166][ T40] audit: type=1326 audit(1756996265.788:6298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35e698ebe9 code=0x7ffc0000 [ 67.045640][ T40] audit: type=1326 audit(1756996265.788:6299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35e698ebe9 code=0x7ffc0000 [ 67.052920][ T40] audit: type=1326 audit(1756996265.788:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.244" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35e698ebe9 code=0x7ffc0000 [ 67.444560][ T6903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6903 comm=syz.2.252 [ 67.448902][ T6903] futex_wake_op: syz.2.252 tries to shift op by -1; fix this program [ 67.556391][ T5971] Bluetooth: hci0: command tx timeout [ 67.578114][ T6910] vivid-000: disconnect [ 67.580493][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.254'. [ 67.654453][ T6909] vivid-000: reconnect [ 67.732539][ T6918] batman_adv: batadv0: Adding interface: dummy0 [ 67.734641][ T6918] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.746446][ T6918] batman_adv: batadv0: Interface activated: dummy0 [ 67.755983][ T6918] batadv0: mtu less than device minimum [ 67.758401][ T6918] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.762246][ T6918] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.766229][ T6918] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.771165][ T6918] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.775042][ T6918] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.778617][ T6918] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.782387][ T6918] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.786131][ T6918] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.797899][ T6918] netlink: 'syz.4.258': attribute type 10 has an invalid length. [ 67.805003][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.808940][ T6918] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 67.847532][ T6923] bridge0: entered promiscuous mode [ 67.849367][ T6923] macsec1: entered promiscuous mode [ 67.969711][ T6935] MINIX-fs: blocksize too small for device [ 68.119958][ T6945] block nbd2: Attempted send on invalid socket [ 68.123587][ T6945] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.127700][ T6945] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 68.132009][ T6947] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 68.144790][ T6947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.166006][ T6947] veth5: entered promiscuous mode [ 68.169998][ T6947] bond1: (slave veth5): Enslaving as an active interface with a down link [ 68.207046][ T6947] veth7: entered promiscuous mode [ 68.213778][ T6947] bond1: (slave veth7): Enslaving as an active interface with a down link [ 68.426030][ T6974] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 68.459399][ T6974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.483623][ T6974] bond2: (slave erspan1): making interface the new active one [ 68.489367][ T6974] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 68.496146][ T6977] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 68.499798][ T6977] overlayfs: missing 'lowerdir' [ 68.785782][ T1222] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 68.873417][ T6991] binder: 6990:6991 ioctl c0306201 2000000003c0 returned -14 [ 68.980883][ T1222] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.985448][ T1222] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.989800][ T1222] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.993663][ T1222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.000222][ T6980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.017902][ T1222] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 69.222200][ T981] usb 9-1: USB disconnect, device number 2 [ 69.438928][ T6980] netlink: 'syz.4.280': attribute type 6 has an invalid length. [ 69.499606][ T6980] IPv6: syztnl2: Disabled Multicast RS [ 69.791709][ T5971] Bluetooth: hci0: command tx timeout [ 69.964731][ T7039] x_tables: ip_tables: udp match: only valid for protocol 17 [ 70.392514][ T7072] net_ratelimit: 13 callbacks suppressed [ 70.392526][ T7072] openvswitch: netlink: IP tunnel TTL not specified. [ 70.541099][ T7086] openvswitch: netlink: Key type 30 is not supported [ 70.577199][ T7092] openvswitch: netlink: Flow actions attr not present in new flow. [ 70.706164][ T7099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.829905][ T7108] random: crng reseeded on system resumption [ 70.885522][ T7113] dummy0: entered allmulticast mode [ 70.903525][ T7099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.923772][ T7113] tap0: tun_chr_ioctl cmd 1074025675 [ 70.925568][ T7113] tap0: persist enabled [ 70.927620][ T7113] tap0: tun_chr_ioctl cmd 1074025675 [ 70.929406][ T7113] tap0: persist disabled [ 70.980403][ T7099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.080816][ T7099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.198282][ T1151] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.208401][ T1151] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.218232][ T1151] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.230126][ T1151] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.014337][ T5971] Bluetooth: hci0: command tx timeout [ 72.417645][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 72.417657][ T40] audit: type=1400 audit(1756996270.877:6373): avc: denied { read write } for pid=5969 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.427089][ T40] audit: type=1400 audit(1756996270.877:6374): avc: denied { open } for pid=5969 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.435029][ T40] audit: type=1400 audit(1756996270.877:6375): avc: denied { ioctl } for pid=5969 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.439215][ T7144] wg1: entered promiscuous mode [ 72.444689][ T7144] wg1: entered allmulticast mode [ 72.454930][ T7144] dvmrp1: entered allmulticast mode [ 72.509902][ T40] audit: type=1400 audit(1756996270.961:6376): avc: denied { map_create } for pid=7147 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.517073][ T40] audit: type=1400 audit(1756996270.961:6377): avc: denied { perfmon } for pid=7147 comm="syz.2.332" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.525080][ T40] audit: type=1400 audit(1756996270.961:6378): avc: denied { map_read map_write } for pid=7147 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.534049][ T40] audit: type=1400 audit(1756996270.961:6379): avc: denied { prog_load } for pid=7147 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.542195][ T40] audit: type=1400 audit(1756996270.961:6380): avc: denied { bpf } for pid=7147 comm="syz.2.332" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.550098][ T40] audit: type=1400 audit(1756996270.961:6381): avc: denied { read } for pid=7148 comm="syz.0.331" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.558081][ T40] audit: type=1400 audit(1756996270.961:6382): avc: denied { open } for pid=7148 comm="syz.0.331" path="net:[4026532876]" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.644640][ T7158] Invalid source name [ 72.646455][ T7158] UBIFS error (pid: 7158): cannot open "ubifs", error -22 [ 72.647978][ T7158] __nla_validate_parse: 14 callbacks suppressed [ 72.647988][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 72.718139][ T7159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7159 comm=syz.2.334 [ 72.820698][ T7161] 9pnet_fd: Insufficient options for proto=fd [ 72.898284][ T7163] tmpfs: Unknown parameter 'inZde3r' [ 73.143293][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.338'. [ 73.148184][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.338'. [ 73.393823][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.343'. [ 73.534383][ T7157] uprobe: syz.2.334:7157 failed to unregister, leaking uprobe [ 73.802792][ T7204] nbd: must specify at least one socket [ 74.150335][ T7225] openvswitch: netlink: Message has 24 unknown bytes. [ 74.165606][ T7225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.215817][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 74.227078][ T5971] Bluetooth: hci0: command tx timeout [ 74.229552][ T7231] overlayfs: missing 'lowerdir' [ 74.250297][ T7228] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 74.253795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.312740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.460304][ T7242] netlink: 'syz.2.360': attribute type 21 has an invalid length. [ 74.471237][ T7242] netlink: 'syz.2.360': attribute type 6 has an invalid length. [ 74.475043][ T7242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.360'. [ 74.616143][ T7251] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 74.782732][ T7263] netlink: 9 bytes leftover after parsing attributes in process `syz.2.368'. [ 74.787028][ T7263] 0·: renamed from hsr0 (while UP) [ 74.795292][ T7263] 0·: entered allmulticast mode [ 74.797724][ T7263] hsr_slave_0: entered allmulticast mode [ 74.800171][ T7263] hsr_slave_1: entered allmulticast mode [ 74.803042][ T7263] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 74.875670][ T5971] Bluetooth: Wrong link type (-71) [ 75.317596][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.467262][ T29] usb 5-1: device descriptor read/64, error -71 [ 75.592815][ T7233] Set syz1 is full, maxelem 65536 reached [ 75.625394][ T7276] tmpfs: Group quota inode hardlimit too large. [ 75.628528][ T7276] netdevsim netdevsim2: Firmware load for './file0/file1/../file0' refused, path contains '..' component [ 75.655194][ T7278] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.658878][ T7278] overlayfs: failed to set xattr on upper [ 75.662089][ T7278] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.665474][ T7278] overlayfs: ...falling back to index=off. [ 75.667914][ T7278] overlayfs: ...falling back to uuid=null. [ 75.672876][ T7276] openvswitch: netlink: Key 6 has unexpected len 76 expected 2 [ 75.678744][ T7278] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 75.734855][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.886478][ T29] usb 5-1: device descriptor read/64, error -71 [ 76.009474][ T29] usb usb5-port1: attempt power cycle [ 76.286881][ T7290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=7290 comm=syz.3.377 [ 76.397668][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.431181][ T29] usb 5-1: device descriptor read/8, error -71 [ 76.667869][ T7297] capability: warning: `syz.2.379' uses 32-bit capabilities (legacy support in use) [ 76.699502][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 76.719361][ T29] usb 5-1: device descriptor read/8, error -71 [ 76.857095][ T29] usb usb5-port1: unable to enumerate USB device [ 77.191396][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 77.194326][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 77.198049][ T7313] netlink: 'syz.2.382': attribute type 19 has an invalid length. [ 77.311730][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.097136][ T5970] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 78.223203][ T53] IPVS: starting estimator thread 0... [ 78.228478][ T40] kauditd_printk_skb: 185 callbacks suppressed [ 78.228488][ T40] audit: type=1400 audit(77.075:6568): avc: denied { name_bind } for pid=7336 comm="syz.0.389" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.237350][ T40] audit: type=1400 audit(77.075:6569): avc: denied { node_bind } for pid=7336 comm="syz.0.389" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 78.259706][ T5970] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.263374][ T5970] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.266873][ T5970] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.270463][ T40] audit: type=1400 audit(77.112:6570): avc: denied { read } for pid=7339 comm="syz.0.390" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.276732][ T5970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.279535][ T40] audit: type=1400 audit(77.122:6571): avc: denied { open } for pid=7339 comm="syz.0.390" path="net:[4026532876]" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.281884][ T7335] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.286853][ T40] audit: type=1400 audit(77.122:6572): avc: denied { read write } for pid=7339 comm="syz.0.390" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.292631][ T5970] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.298120][ T40] audit: type=1400 audit(77.122:6573): avc: denied { open } for pid=7339 comm="syz.0.390" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.306718][ T40] audit: type=1400 audit(77.122:6574): avc: denied { create } for pid=7339 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.313440][ T40] audit: type=1400 audit(77.122:6575): avc: denied { create } for pid=7339 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.319505][ T40] audit: type=1400 audit(77.122:6576): avc: denied { create } for pid=7339 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.333319][ T7338] IPVS: using max 46 ests per chain, 110400 per kthread [ 78.366390][ T40] audit: type=1400 audit(77.206:6577): avc: denied { create } for pid=7343 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.401459][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.393'. [ 78.404739][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'. [ 78.473336][ T1151] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 78.510029][ T53] usb 7-1: USB disconnect, device number 8 [ 78.794873][ T6039] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 78.942285][ T6039] usb 5-1: device descriptor read/64, error -71 [ 79.198277][ T6039] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 79.337523][ T6039] usb 5-1: device descriptor read/64, error -71 [ 79.453399][ T7367] 9pnet_virtio: no channels available for device syz [ 79.456168][ T6039] usb usb5-port1: attempt power cycle [ 79.603623][ T7370] overlayfs: failed to resolve './file0': -2 [ 79.746094][ T7373] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 79.810853][ T7377] input: syz0 as /devices/virtual/input/input10 [ 79.828995][ T6039] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 79.851771][ T6039] usb 5-1: device descriptor read/8, error -71 [ 80.107232][ T6039] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 80.128862][ T6039] usb 5-1: device descriptor read/8, error -71 [ 80.246155][ T6039] usb usb5-port1: unable to enumerate USB device [ 81.336477][ T6039] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 81.498137][ T6039] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 81.501417][ T6039] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 81.504487][ T6039] usb 7-1: config 0 interface 0 has no altsetting 0 [ 81.509283][ T6039] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.512097][ T6039] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.514781][ T6039] usb 7-1: Product: syz [ 81.516188][ T6039] usb 7-1: Manufacturer: syz [ 81.517889][ T6039] usb 7-1: SerialNumber: syz [ 81.521417][ T6039] usb 7-1: config 0 descriptor?? [ 81.524632][ T6039] hub 7-1:0.0: bad descriptor, ignoring hub [ 81.526525][ T6039] hub 7-1:0.0: probe with driver hub failed with error -5 [ 81.530397][ T6039] usb 7-1: selecting invalid altsetting 0 [ 81.601281][ T7346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.690129][ T7398] input: syz1 as /devices/virtual/input/input11 [ 81.706306][ T7398] input: failed to attach handler mousedev to device input11, error: -4 [ 81.757275][ T7399] libceph: resolve '40' (ret=-3): failed [ 81.816678][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 81.849859][ T5970] usb 7-1: USB disconnect, device number 9 [ 81.895588][ T7414] netlink: 'syz.0.410': attribute type 4 has an invalid length. [ 81.899755][ T7418] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 81.906132][ T7413] netlink: 'syz.0.410': attribute type 4 has an invalid length. [ 82.155696][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 82.223693][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 82.384166][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 82.387910][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 82.391219][ T34] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 82.394326][ T34] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 82.397795][ T34] usb 7-1: config 1 interface 0 has no altsetting 0 [ 82.402260][ T34] usb 7-1: string descriptor 0 read error: -22 [ 82.404330][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.407348][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.411783][ T7385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.414249][ T7385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.580124][ T7432] ======================================================= [ 82.580124][ T7432] WARNING: The mand mount option has been deprecated and [ 82.580124][ T7432] and is ignored by this kernel. Remove the mand [ 82.580124][ T7432] option from the mount to silence this warning. [ 82.580124][ T7432] ======================================================= [ 82.591988][ T7432] cgroup: name respecified [ 82.593733][ T7432] cgroup: name respecified [ 82.595290][ T7432] cgroup: name respecified [ 82.596850][ T7432] cgroup: name respecified [ 82.598598][ T7432] cgroup: name respecified [ 82.600130][ T7432] cgroup: name respecified [ 82.601682][ T7432] cgroup: name respecified [ 82.603289][ T7432] cgroup: name respecified [ 82.604762][ T7432] cgroup: name respecified [ 82.606458][ T7432] cgroup: name respecified [ 82.608018][ T7432] cgroup: name respecified [ 82.609746][ T7432] cgroup: name respecified [ 82.611290][ T7432] cgroup: name respecified [ 82.612896][ T7432] cgroup: name respecified [ 82.614762][ T7432] cgroup: name respecified [ 82.616573][ T7432] cgroup: name respecified [ 82.618156][ T7432] cgroup: name respecified [ 82.619847][ T7432] cgroup: name respecified [ 82.621572][ T7432] cgroup: name respecified [ 82.623238][ T7432] cgroup: name respecified [ 82.624806][ T7432] cgroup: name respecified [ 82.626826][ T7432] cgroup: name respecified [ 82.628632][ T7432] cgroup: name respecified [ 82.630459][ T7432] cgroup: name respecified [ 82.631989][ T7432] cgroup: name respecified [ 82.633493][ T34] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 82.633643][ T7432] cgroup: name respecified [ 82.637808][ T7432] cgroup: name respecified [ 82.639395][ T7432] cgroup: name respecified [ 82.641054][ T7432] cgroup: name respecified [ 82.642219][ T34] usb 7-1: USB disconnect, device number 10 [ 82.642575][ T7432] cgroup: name respecified [ 82.645920][ T7432] cgroup: name respecified [ 82.647685][ T7432] cgroup: name respecified [ 82.649206][ T7432] cgroup: name respecified [ 82.681443][ T7435] tmpfs: Unknown parameter 'euid' [ 82.781896][ T24] cfg80211: failed to load regulatory.db [ 82.960219][ T7456] ALSA: seq fatal error: cannot create timer (-19) [ 82.970724][ T7459] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 83.001375][ T7459] bond4: (slave geneve2): making interface the new active one [ 83.006882][ T7459] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 83.010912][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.014534][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.015738][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 83.019047][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.023952][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.559105][ T7498] overlayfs: failed to resolve './file1': -2 [ 83.609617][ T40] kauditd_printk_skb: 146 callbacks suppressed [ 83.609628][ T40] audit: type=1400 audit(82.107:6724): avc: denied { create } for pid=7501 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.618080][ T40] audit: type=1400 audit(82.117:6725): avc: denied { create } for pid=7501 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.625390][ T40] audit: type=1400 audit(82.117:6726): avc: denied { write } for pid=7501 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.654629][ T40] audit: type=1400 audit(82.145:6727): avc: denied { write } for pid=7508 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.664920][ T40] audit: type=1400 audit(82.154:6728): avc: denied { create } for pid=7506 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.672435][ T40] audit: type=1400 audit(82.154:6729): avc: denied { ioctl } for pid=7506 comm="syz.3.439" path="socket:[19481]" dev="sockfs" ino=19481 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.681531][ T40] audit: type=1400 audit(82.154:6730): avc: denied { ioctl } for pid=7506 comm="syz.3.439" path="socket:[19483]" dev="sockfs" ino=19483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.721839][ T40] audit: type=1400 audit(82.219:6731): avc: denied { sys_module } for pid=7510 comm="syz.2.440" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.740391][ T40] audit: type=1400 audit(82.229:6732): avc: denied { load_policy } for pid=7510 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.740512][ T7511] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 83.751033][ T7511] SELinux: failed to load policy [ 83.755999][ T40] audit: type=1400 audit(82.248:6733): avc: denied { read write } for pid=7510 comm="syz.2.440" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.920509][ T7539] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.450'. [ 83.988423][ T7550] dummy0: entered promiscuous mode [ 84.186838][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 84.189949][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 84.292560][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 84.352163][ T7592] netlink: 240 bytes leftover after parsing attributes in process `syz.2.469'. [ 84.378410][ T7601] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.498260][ T7618] netlink: 44 bytes leftover after parsing attributes in process `syz.0.475'. [ 84.502876][ T7618] netlink: 43 bytes leftover after parsing attributes in process `syz.0.475'. [ 84.507007][ T7618] netlink: 'syz.0.475': attribute type 5 has an invalid length. [ 84.510105][ T7618] netlink: 43 bytes leftover after parsing attributes in process `syz.0.475'. [ 84.701050][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.478'. [ 84.779398][ T6039] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 84.840713][ T7647] batadv_slave_0: entered promiscuous mode [ 84.844317][ T7647] batadv_slave_0: left promiscuous mode [ 84.962232][ T6039] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.966625][ T6039] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.970861][ T6039] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.974853][ T6039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.980808][ T7618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.986959][ T6039] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.063802][ T7661] batadv0: Device is already in use. [ 85.413823][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 85.455365][ T7698] openvswitch: netlink: Flow key attribute not present in set flow. [ 85.577020][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.580286][ T7708] batadv_slave_0: entered promiscuous mode [ 85.584382][ T7708] batadv_slave_0: entered allmulticast mode [ 85.762871][ T7744] batman_adv: batadv0: Adding interface: gretap1 [ 85.765061][ T7744] batman_adv: batadv0: Interface activated: gretap1 [ 85.802446][ T7746] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 85.805975][ T7749] trusted_key: encrypted_key: keylen parameter is missing [ 85.810764][ T7746] netlink: 'syz.3.507': attribute type 7 has an invalid length. [ 85.811049][ T7748] trusted_key: encrypted_key: keylen parameter is missing [ 85.814236][ T7746] netlink: 'syz.3.507': attribute type 8 has an invalid length. [ 86.150569][ T7773] Bluetooth: MGMT ver 1.23 [ 86.721901][ T7808] netlink: 'syz.2.526': attribute type 2 has an invalid length. [ 86.729326][ T7808] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 86.885450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.296541][ T7823] netlink: 'syz.3.531': attribute type 11 has an invalid length. [ 87.708008][ T140] usb 5-1: USB disconnect, device number 13 [ 87.714974][ T7847] SELinux: truncated policydb string identifier [ 87.717178][ T7847] SELinux: failed to load policy [ 87.736647][ T7856] fuse: Unknown parameter 'fdK¸0t Øût¾:Køü' [ 87.745184][ T7855] 9pnet_fd: Insufficient options for proto=fd [ 87.848734][ T7862] team0 (unregistering): Port device team_slave_0 removed [ 87.852672][ T7862] team0 (unregistering): Port device team_slave_1 removed [ 88.076330][ T7895] syz.4.554: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 88.081312][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.4.554 Not tainted syzkaller #0 PREEMPT(full) [ 88.081328][ T7895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.081335][ T7895] Call Trace: [ 88.081340][ T7895] [ 88.081344][ T7895] dump_stack_lvl+0x16c/0x1f0 [ 88.081377][ T7895] warn_alloc+0x248/0x3a0 [ 88.081396][ T7895] ? __pfx_warn_alloc+0x10/0x10 [ 88.081406][ T7895] ? __pfx_stack_trace_save+0x10/0x10 [ 88.081427][ T7895] ? kasan_save_stack+0x42/0x60 [ 88.081439][ T7895] ? kasan_save_stack+0x33/0x60 [ 88.081449][ T7895] ? kasan_save_track+0x14/0x30 [ 88.081460][ T7895] ? xskq_create+0x52/0x1d0 [ 88.081471][ T7895] ? xsk_setsockopt+0x792/0x9a0 [ 88.081486][ T7895] ? do_sock_setsockopt+0xf3/0x1d0 [ 88.081502][ T7895] ? xskq_create+0xfb/0x1d0 [ 88.081512][ T7895] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 88.081532][ T7895] ? xskq_create+0xfb/0x1d0 [ 88.081545][ T7895] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 88.081565][ T7895] ? xskq_create+0xfb/0x1d0 [ 88.081574][ T7895] vmalloc_user_noprof+0x9e/0xe0 [ 88.081589][ T7895] ? xskq_create+0xfb/0x1d0 [ 88.081599][ T7895] xskq_create+0xfb/0x1d0 [ 88.081609][ T7895] xsk_setsockopt+0x792/0x9a0 [ 88.081626][ T7895] ? __pfx_xsk_setsockopt+0x10/0x10 [ 88.081641][ T7895] ? find_held_lock+0x2b/0x80 [ 88.081670][ T7895] ? selinux_socket_setsockopt+0x6a/0x80 [ 88.081686][ T7895] ? __pfx_xsk_setsockopt+0x10/0x10 [ 88.081703][ T7895] do_sock_setsockopt+0xf3/0x1d0 [ 88.081718][ T7895] __sys_setsockopt+0x1a0/0x230 [ 88.081732][ T7895] __x64_sys_setsockopt+0xbd/0x160 [ 88.081742][ T7895] ? do_syscall_64+0x91/0x4c0 [ 88.081761][ T7895] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.081772][ T7895] do_syscall_64+0xcd/0x4c0 [ 88.081786][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.081797][ T7895] RIP: 0033:0x7f18b338ebe9 [ 88.081806][ T7895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.081817][ T7895] RSP: 002b:00007f18b4175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.081827][ T7895] RAX: ffffffffffffffda RBX: 00007f18b35c5fa0 RCX: 00007f18b338ebe9 [ 88.081834][ T7895] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 88.081840][ T7895] RBP: 00007f18b3411e19 R08: 0000000000000004 R09: 0000000000000000 [ 88.081846][ T7895] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 88.081852][ T7895] R13: 00007f18b35c6038 R14: 00007f18b35c5fa0 R15: 00007fffec824e38 [ 88.081866][ T7895] [ 88.081890][ T7895] Mem-Info: [ 88.134580][ T7903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.136288][ T7895] active_anon:35595 inactive_anon:0 isolated_anon:0 [ 88.136288][ T7895] active_file:16164 inactive_file:41193 isolated_file:0 [ 88.136288][ T7895] unevictable:1768 dirty:35 writeback:0 [ 88.136288][ T7895] slab_reclaimable:12627 slab_unreclaimable:74089 [ 88.136288][ T7895] mapped:24705 shmem:29003 pagetables:1099 [ 88.136288][ T7895] sec_pagetables:302 bounce:0 [ 88.136288][ T7895] kernel_misc_reclaimable:0 [ 88.136288][ T7895] free:432348 free_pcp:2753 free_cma:0 [ 88.136382][ T7895] Node 0 active_anon:114748kB inactive_anon:0kB active_file:62352kB inactive_file:164576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98820kB dirty:136kB writeback:0kB shmem:84844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13072kB pagetables:4172kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB [ 88.136413][ T7895] Node 1 active_anon:27632kB inactive_anon:0kB active_file:2304kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:31168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 88.136442][ T7895] Node 0 DMA free:12740kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2560kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 88.136474][ T7895] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 88.136497][ T7895] Node 0 DMA32 free:133412kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112188kB inactive_anon:0kB active_file:62352kB inactive_file:164576kB unevictable:3536kB writepending:136kB present:2080628kB managed:1263464kB mlocked:0kB bounce:0kB free_pcp:8964kB local_pcp:3372kB free_cma:0kB [ 88.136531][ T7895] lowmem_reserve[]: 0 0 0 0 0 [ 88.136554][ T7895] Node 1 Normal free:1583240kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27632kB inactive_anon:0kB active_file:2304kB inactive_file:196kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 88.136603][ T7895] lowmem_reserve[]: 0 0 0 0 0 [ 88.136625][ T7895] Node 0 DMA: 15*4kB (UM) 9*8kB (UM) 10*16kB (UME) 11*32kB (UME) 11*64kB (UME) 5*128kB (UE) 6*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 3*2048kB (M) 0*4096kB = 12740kB [ 88.243082][ T7895] Node 0 DMA32: 340*4kB (UME) 378*8kB (UME) 204*16kB (UME) 669*32kB (UME) 155*64kB (UME) 136*128kB (UME) 69*256kB (UME) 33*512kB (UME) 13*1024kB (UM) 8*2048kB (UM) 3*4096kB (M) = 132928kB [ 88.250615][ T7895] Node 1 Normal: 54*4kB (UME) 82*8kB (UME) 74*16kB (UME) 215*32kB (UME) 103*64kB (UME) 44*128kB (UME) 26*256kB (UM) 20*512kB (UM) 9*1024kB (UM) 8*2048kB (UM) 371*4096kB (UM) = 1583272kB [ 88.261607][ T7895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.265543][ T7895] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 88.268367][ T7895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.270363][ T7888] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 88.271166][ T7895] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 88.280220][ T7895] 86575 total pagecache pages [ 88.281682][ T7895] 0 pages in swap cache [ 88.283002][ T7895] Free swap = 124996kB [ 88.284385][ T7895] Total swap = 124996kB [ 88.286141][ T7895] 1048443 pages RAM [ 88.287529][ T7895] 0 pages HighMem/MovableOnly [ 88.289027][ T7895] 283264 pages reserved [ 88.290265][ T7895] 0 pages cma reserved [ 88.338851][ T5332] Bluetooth: hci2: command 0x0401 tx timeout [ 88.341262][ T5971] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 88.354148][ T7917] tmpfs: User quota block hardlimit too large. [ 88.666037][ T7932] sctp: [Deprecated]: syz.4.566 (pid 7932) Use of int in max_burst socket option deprecated. [ 88.666037][ T7932] Use struct sctp_assoc_value instead [ 88.756695][ T7939] vlan2: entered promiscuous mode [ 88.826719][ T7943] kvm: emulating exchange as write [ 88.997037][ T40] kauditd_printk_skb: 386 callbacks suppressed [ 88.997053][ T40] audit: type=1400 audit(87.149:7120): avc: denied { write } for pid=7950 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.005398][ T40] audit: type=1400 audit(87.158:7121): avc: denied { create } for pid=7950 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.011017][ T40] audit: type=1400 audit(87.158:7122): avc: denied { write } for pid=7950 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.016831][ T40] audit: type=1400 audit(87.158:7123): avc: denied { getopt } for pid=7950 comm="syz.3.570" laddr=::1 lport=50951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.039022][ T40] audit: type=1400 audit(87.186:7124): avc: denied { create } for pid=7957 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.045153][ T40] audit: type=1400 audit(87.186:7125): avc: denied { write } for pid=7957 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.769673][ T40] audit: type=1400 audit(87.869:7126): avc: denied { map_write } for pid=7971 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.778122][ T40] audit: type=1400 audit(87.879:7127): avc: denied { ioctl } for pid=7974 comm="syz.4.574" path="socket:[20806]" dev="sockfs" ino=20806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.787618][ T40] audit: type=1400 audit(87.879:7128): avc: denied { create } for pid=7974 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.795311][ T40] audit: type=1400 audit(87.879:7129): avc: denied { mount } for pid=7974 comm="syz.4.574" name="/" dev="autofs" ino=20808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 89.893144][ T7984] ALSA: mixer_oss: invalid index 100000 [ 89.935506][ T7989] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 89.944681][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.947823][ T7989] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 89.951599][ T7989] kAFS: No cell specified [ 89.953669][ T7989] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 89.956161][ T7989] __nla_validate_parse: 13 callbacks suppressed [ 89.956169][ T7989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.579'. [ 89.960887][ T7989] batadv0: entered promiscuous mode [ 89.962454][ T7989] batadv0: entered allmulticast mode [ 89.966458][ T7989] bond0: (slave batadv0): Releasing backup interface [ 89.970784][ T7989] bridge0: port 3(batadv0) entered blocking state [ 89.972928][ T7989] bridge0: port 3(batadv0) entered disabled state [ 89.978793][ T7992] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 89.981760][ T7992] batadv0: left allmulticast mode [ 89.983925][ T7992] batadv0: left promiscuous mode [ 89.986383][ T7992] bridge0: port 3(batadv0) entered disabled state [ 89.993777][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.998573][ T7992] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 90.152807][ T7999] netlink: 'syz.3.581': attribute type 4 has an invalid length. [ 90.161793][ T7999] netlink: 'syz.3.581': attribute type 4 has an invalid length. [ 90.418040][ T8006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 90.497298][ T8008] erspan0: entered promiscuous mode [ 90.576288][ T8012] netlink: 228 bytes leftover after parsing attributes in process `syz.3.586'. [ 90.722297][ T8018] bridge1: entered promiscuous mode [ 90.832580][ T8020] overlayfs: failed to resolve './file1': -2 [ 90.996442][ T8040] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 91.007038][ T8040] cramfs: wrong magic [ 91.266487][ T8069] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 91.268700][ T8069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.273121][ T8069] vhci_hcd vhci_hcd.0: Device attached [ 91.355867][ T8081] netlink: 'syz.0.606': attribute type 11 has an invalid length. [ 91.524597][ T5970] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 91.546220][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 91.642076][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 91.652936][ T53] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 91.727844][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 91.731482][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.734864][ T34] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.740831][ T34] usb 9-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.40 [ 91.743579][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.746030][ T34] usb 9-1: Product: У [ 91.747324][ T34] usb 9-1: Manufacturer: à ’ [ 91.748824][ T34] usb 9-1: SerialNumber: syz [ 91.814996][ T53] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.819126][ T53] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.822741][ T53] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 91.826970][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.832725][ T53] usb 8-1: config 0 descriptor?? [ 91.838383][ T53] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 91.838815][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.841336][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 91.844478][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 91.844501][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.850459][ T53] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 91.852122][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 91.856651][ T53] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 91.856984][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 91.862606][ T53] usb 8-1: media controller created [ 91.866380][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.871795][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.875512][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.881773][ T9] usb 5-1: Product: syz [ 91.883172][ T9] usb 5-1: Manufacturer: syz [ 91.886305][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 91.891520][ T53] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 91.894894][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 91.896678][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 91.901214][ T53] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input13 [ 91.901363][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 91.908623][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 91.910104][ T53] dvb-usb: schedule remote query interval to 150 msecs. [ 91.913392][ T53] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.986144][ T8070] vhci_hcd: connection reset by peer [ 91.990111][ T72] vhci_hcd: stop threads [ 91.992095][ T72] vhci_hcd: release socket [ 91.992645][ T34] usbhid 9-1:1.0: can't add hid device: -71 [ 91.994972][ T72] vhci_hcd: disconnect device [ 91.996157][ T34] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 92.006510][ T34] usb 9-1: USB disconnect, device number 3 [ 92.052589][ T8092] dibusb: i2c wr: len=62 is too big! [ 92.052589][ T8092] [ 92.058044][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 92.074268][ T53] usb 8-1: USB disconnect, device number 4 [ 92.086873][ T53] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 92.105265][ T24] usb 5-1: USB disconnect, device number 14 [ 92.664430][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 92.667928][ T8099] netlink: 31 bytes leftover after parsing attributes in process `syz.3.612'. [ 92.672457][ T8099] netlink: 'syz.3.612': attribute type 3 has an invalid length. [ 92.675103][ T8099] netlink: 'syz.3.612': attribute type 2 has an invalid length. [ 92.677984][ T8099] netlink: 31 bytes leftover after parsing attributes in process `syz.3.612'. [ 92.683999][ T8099] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.790637][ T8106] geneve1: entered allmulticast mode [ 92.855109][ T8106] ./cgroup: Can't lookup blockdev [ 93.099040][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.621'. [ 93.160638][ T5332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.166267][ T5332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.169039][ T5332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.172369][ T5332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.174876][ T5332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.320793][ T8136] chnl_net:caif_netlink_parms(): no params data found [ 93.413628][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.413633][ T8159] random: crng reseeded on system resumption [ 93.416247][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.420834][ T8136] bridge_slave_0: entered allmulticast mode [ 93.423555][ T8136] bridge_slave_0: entered promiscuous mode [ 93.427101][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.429955][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.432327][ T8136] bridge_slave_1: entered allmulticast mode [ 93.434927][ T8136] bridge_slave_1: entered promiscuous mode [ 93.475097][ T8136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.481410][ T8136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.485037][ T8166] netlink: 276 bytes leftover after parsing attributes in process `syz.2.628'. [ 93.488609][ T8166] netlink: 'syz.2.628': attribute type 6 has an invalid length. [ 93.491185][ T8166] netlink: 134300 bytes leftover after parsing attributes in process `syz.2.628'. [ 93.519916][ T8136] team0: Port device team_slave_0 added [ 93.523239][ T8136] team0: Port device team_slave_1 added [ 93.527113][ T8167] cgroup: Invalid name [ 93.554235][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.558274][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.566454][ T8136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.571063][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.573110][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.581971][ T8136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.627836][ T8136] hsr_slave_0: entered promiscuous mode [ 93.630363][ T8136] hsr_slave_1: entered promiscuous mode [ 93.666612][ T8174] fuse: Bad value for 'fd' [ 93.710985][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.714431][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.782621][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.786692][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.859306][ T8180] ip6gre1: entered promiscuous mode [ 93.893293][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.896801][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.922274][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.636'. [ 93.927085][ T8184] overlay: Unknown parameter 'audit' [ 93.952494][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.955872][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.061177][ T13] bridge_slave_1: left allmulticast mode [ 94.063946][ T13] bridge_slave_1: left promiscuous mode [ 94.066999][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.072187][ T13] bridge_slave_0: left allmulticast mode [ 94.073933][ T13] bridge_slave_0: left promiscuous mode [ 94.076437][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.342588][ T8197] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 94.345590][ T8197] overlayfs: missing 'lowerdir' [ 94.354003][ T40] kauditd_printk_skb: 219 callbacks suppressed [ 94.354014][ T40] audit: type=1400 audit(92.163:7349): avc: denied { map } for pid=8196 comm="syz.3.640" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.359388][ T8197] io-wq is not configured for unbound workers [ 94.365053][ T40] audit: type=1400 audit(92.163:7350): avc: denied { read write } for pid=8196 comm="syz.3.640" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.375181][ T40] audit: type=1400 audit(92.163:7351): avc: denied { write } for pid=8196 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 94.388360][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.394877][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.400924][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 94.405022][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 94.411261][ T13] bond0 (unregistering): Released all slaves [ 94.418702][ T13] bond1 (unregistering): Released all slaves [ 94.477260][ T40] audit: type=1400 audit(92.275:7352): avc: denied { read } for pid=8199 comm="syz.0.641" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.484309][ T40] audit: type=1400 audit(92.275:7353): avc: denied { open } for pid=8199 comm="syz.0.641" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.503191][ T40] audit: type=1400 audit(92.294:7354): avc: denied { read } for pid=8199 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.510445][ T40] audit: type=1400 audit(92.294:7355): avc: denied { ioctl } for pid=8199 comm="syz.0.641" path="socket:[21168]" dev="sockfs" ino=21168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.520653][ T40] audit: type=1400 audit(92.322:7356): avc: denied { create } for pid=8199 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.526802][ T40] audit: type=1400 audit(92.322:7357): avc: denied { ioctl } for pid=8199 comm="syz.0.641" path="socket:[21199]" dev="sockfs" ino=21199 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.537926][ T40] audit: type=1400 audit(92.331:7358): avc: denied { ioctl } for pid=8199 comm="syz.0.641" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.696900][ T8213] autofs4:pid:8213:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 94.855179][ T13] hsr_slave_0: left promiscuous mode [ 94.857828][ T13] hsr_slave_1: left promiscuous mode [ 94.860353][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.863226][ T13] batadv0: mtu less than device minimum [ 94.865526][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.870306][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.874920][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.879464][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.884054][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.888559][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.892332][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.896136][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.905858][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.909074][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.921662][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.926781][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 94.929040][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 94.944866][ T13] veth1_macvtap: left promiscuous mode [ 94.946965][ T13] veth0_macvtap: left promiscuous mode [ 94.948748][ T13] veth1_vlan: left promiscuous mode [ 94.950471][ T13] veth0_vlan: left promiscuous mode [ 95.365238][ T5971] Bluetooth: hci0: command tx timeout [ 95.385393][ T8221] snd_dummy snd_dummy.0: control 1:96:0:syz0:211 is already present [ 95.574049][ T13] team0 (unregistering): Port device team_slave_1 removed [ 95.637946][ T13] team0 (unregistering): Port device team_slave_0 removed [ 96.154560][ T8136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.160061][ T8136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.166684][ T8136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.171152][ T8136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.233859][ T8238] overlayfs: workdir and upperdir must reside under the same mount [ 96.261135][ T8136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.274541][ T8136] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.280347][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.283411][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.290905][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.292052][ T8244] __nla_validate_parse: 3 callbacks suppressed [ 96.292064][ T8244] netlink: 36 bytes leftover after parsing attributes in process `syz.3.653'. [ 96.293226][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.393897][ T8259] block nbd0: Attempted send on invalid socket [ 96.395983][ T8259] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.399184][ T8259] (syz.0.657,8259,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 96.402748][ T8259] (syz.0.657,8259,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 96.405039][ T8259] (syz.0.657,8259,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 96.410891][ T8259] (syz.0.657,8259,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 96.433589][ T8136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.574886][ T8136] veth0_vlan: entered promiscuous mode [ 96.583289][ T8136] veth1_vlan: entered promiscuous mode [ 96.604961][ T8136] veth0_macvtap: entered promiscuous mode [ 96.608811][ T8136] veth1_macvtap: entered promiscuous mode [ 96.617597][ T8136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.625652][ T8136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.631526][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.634393][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.646091][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.650735][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.691790][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.694486][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.716715][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.719223][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.773012][ T8301] sctp: [Deprecated]: syz.3.669 (pid 8301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.773012][ T8301] Use struct sctp_sack_info instead [ 96.779147][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.668'. [ 96.783188][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.668'. [ 96.786181][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.669'. [ 96.880266][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.672'. [ 96.883682][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.672'. [ 96.922397][ T8321] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 96.966058][ T5970] vhci_hcd: vhci_device speed not set [ 97.039341][ T8329] netlink: 666 bytes leftover after parsing attributes in process `syz.3.678'. [ 97.043780][ T8329] netlink: 'syz.3.678': attribute type 10 has an invalid length. [ 97.046622][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.050073][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.057162][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.059923][ T8329] bridge0: port 2(bridge_slave_1) entered listening state [ 97.062585][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.064911][ T8329] bridge0: port 1(bridge_slave_0) entered listening state [ 97.071973][ T8329] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 97.133167][ T8338] /dev/sg0: Can't lookup blockdev [ 97.256776][ T8350] hugetlbfs: syz.2.684 (8350): Using mlock ulimits for SHM_HUGETLB is obsolete [ 97.575439][ T5971] Bluetooth: hci0: command tx timeout [ 97.681560][ T8370] netlink: 'syz.4.692': attribute type 2 has an invalid length. [ 97.685006][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.692'. [ 97.789008][ T8377] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 97.791561][ T8377] dvmrp1: ignored: set checksum disabled [ 97.804317][ T8379] affs: No valid root block on device nullb0 [ 97.913179][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 98.161841][ T8406] Bluetooth: MGMT ver 1.23 [ 98.190381][ T8408] netlink: 152 bytes leftover after parsing attributes in process `syz.4.699'. [ 98.604653][ T8436] ªªªªªª: renamed from wg2 (while UP) [ 98.667563][ T8441] IPv6: Can't replace route, no match found [ 98.680120][ T8442] hfs: can't find a HFS filesystem on dev sr0 [ 98.721272][ T8450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8450 comm=syz.3.714 [ 98.930629][ T5971] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 99.042049][ T8482] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 99.079204][ T8482] bond6: (slave bridge2): making interface the new active one [ 99.089255][ T8482] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 99.191631][ T8498] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.206909][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.209973][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.263620][ T8508] veth1_macvtap: entered allmulticast mode [ 99.338789][ T8512] block nbd4: Attempted send on invalid socket [ 99.341901][ T8512] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.345872][ T8512] vxfs: unable to read disk superblock at 1 [ 99.349032][ T8512] block nbd4: Attempted send on invalid socket [ 99.352014][ T8512] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.358420][ T8512] vxfs: unable to read disk superblock at 8 [ 99.361065][ T8512] vxfs: can't find superblock. [ 99.719201][ T40] kauditd_printk_skb: 308 callbacks suppressed [ 99.719217][ T40] audit: type=1400 audit(97.176:7667): avc: denied { sys_module } for pid=8549 comm="syz.2.745" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.729808][ T8560] syz.4.747: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 99.737765][ T40] audit: type=1400 audit(97.176:7668): avc: denied { module_request } for pid=8549 comm="syz.2.745" kmod=4020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 99.746010][ T40] audit: type=1400 audit(97.186:7669): avc: denied { read append } for pid=8557 comm="syz.4.747" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.753322][ T40] audit: type=1400 audit(97.186:7670): avc: denied { open } for pid=8557 comm="syz.4.747" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.761440][ T40] audit: type=1400 audit(97.186:7671): avc: denied { read } for pid=8557 comm="syz.4.747" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.768465][ T40] audit: type=1400 audit(97.186:7672): avc: denied { read open } for pid=8557 comm="syz.4.747" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.776608][ T40] audit: type=1400 audit(97.186:7673): avc: denied { read write } for pid=8557 comm="syz.4.747" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.786813][ T40] audit: type=1400 audit(97.186:7674): avc: denied { open } for pid=8557 comm="syz.4.747" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.796338][ T40] audit: type=1400 audit(97.186:7675): avc: denied { ioctl } for pid=8557 comm="syz.4.747" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.808819][ T5971] Bluetooth: hci0: command tx timeout [ 99.808907][ T40] audit: type=1400 audit(97.186:7676): avc: denied { ioctl } for pid=8557 comm="syz.4.747" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 100.001998][ T8571] batman_adv: batadv0: Adding interface: ipvlan1 [ 100.002154][ T6002] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 100.004729][ T8571] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.015209][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.018444][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.021494][ T8571] batman_adv: batadv0: Interface activated: ipvlan1 [ 100.025467][ T8571] netlink: 'syz.0.750': attribute type 6 has an invalid length. [ 100.028197][ T8571] netlink: 'syz.0.750': attribute type 6 has an invalid length. [ 100.174805][ T6002] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.178210][ T6002] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.181812][ T6002] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.185844][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.193239][ T6002] usb 9-1: config 0 descriptor?? [ 100.198528][ T6002] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 100.200951][ T6002] dvb-usb: bulk message failed: -22 (3/0) [ 100.207474][ T6002] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 100.211581][ T6002] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 100.214518][ T6002] usb 9-1: media controller created [ 100.219419][ T6002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.228183][ T6002] dvb-usb: bulk message failed: -22 (6/0) [ 100.230728][ T6002] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 100.235913][ T6002] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input14 [ 100.245116][ T6002] dvb-usb: schedule remote query interval to 150 msecs. [ 100.248052][ T6002] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 100.410976][ T6002] dvb-usb: bulk message failed: -22 (1/0) [ 100.413149][ T6002] dvb-usb: error while querying for an remote control event. [ 100.418655][ T53] usb 9-1: USB disconnect, device number 4 [ 100.437956][ T53] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 100.624194][ T8583] /dev/sr0: Can't open blockdev [ 100.671653][ T8587] sctp: [Deprecated]: syz.3.756 (pid 8587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.671653][ T8587] Use struct sctp_sack_info instead [ 100.929766][ T5332] Bluetooth: hci3: hardware error 0x04 [ 101.012178][ T8602] tmpfs: Bad value for 'nr_inodes' [ 101.014439][ T8603] tmpfs: Bad value for 'nr_inodes' [ 101.756210][ T8665] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 102.022892][ T5971] Bluetooth: hci0: command tx timeout [ 102.086835][ T6002] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 102.212623][ T8690] binder: 8689:8690 ioctl 89f8 200000000140 returned -22 [ 102.238934][ T6002] usb 9-1: device descriptor read/64, error -71 [ 102.267255][ T8698] net_ratelimit: 31 callbacks suppressed [ 102.267270][ T8698] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 102.316203][ T8701] __nla_validate_parse: 13 callbacks suppressed [ 102.316218][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 102.327959][ T8701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8701 comm=syz.3.791 [ 102.371300][ T8703] tipc: Started in network mode [ 102.372957][ T8703] tipc: Node identity 7a688f18f772, cluster identity 4711 [ 102.376272][ T8703] tipc: Enabled bearer , priority 0 [ 102.378890][ T8703] syzkaller0: entered promiscuous mode [ 102.380620][ T8703] syzkaller0: entered allmulticast mode [ 102.441464][ T8702] tipc: Resetting bearer [ 102.456775][ T8702] tipc: Disabling bearer [ 102.514432][ T6002] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 102.653514][ T6002] usb 9-1: device descriptor read/64, error -71 [ 102.665219][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.794'. [ 102.670516][ T8711] tmpfs: Bad value for 'mpol' [ 102.772630][ T6002] usb usb9-port1: attempt power cycle [ 103.021546][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 103.049038][ T5970] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 103.104385][ T8744] program syz.0.809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.110129][ T8746] program syz.0.809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.134591][ T6002] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 103.145319][ T5332] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 103.158019][ T6002] usb 9-1: device descriptor read/8, error -71 [ 103.212881][ T5970] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 103.216551][ T5970] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 103.219842][ T5970] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 103.223322][ T5970] usb 8-1: Manufacturer: syz [ 103.227812][ T5970] usb 8-1: config 0 descriptor?? [ 103.284326][ T5970] rc_core: IR keymap rc-hauppauge not found [ 103.286824][ T5970] Registered IR keymap rc-empty [ 103.290839][ T5970] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 103.299036][ T5970] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input15 [ 103.412581][ T6002] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 103.435511][ T6002] usb 9-1: device descriptor read/8, error -71 [ 103.548346][ T8773] support for the xor transformation has been removed. [ 103.551611][ T6002] usb usb9-port1: unable to enumerate USB device [ 103.561928][ T6039] usb 8-1: USB disconnect, device number 6 [ 103.850970][ T5970] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 103.859563][ T8791] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 103.895920][ T8793] netlink: 'syz.2.824': attribute type 5 has an invalid length. [ 104.027058][ T5970] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 104.031091][ T5970] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 104.035898][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 104.039557][ T5970] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 104.044270][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 104.048125][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.051227][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 104.058409][ T5970] usb 5-1: string descriptor 0 read error: -22 [ 104.060962][ T5970] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 104.064708][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.070923][ T5970] usb 5-1: config 0 descriptor?? [ 104.077174][ T5970] hub 5-1:0.0: bad descriptor, ignoring hub [ 104.079838][ T5970] hub 5-1:0.0: probe with driver hub failed with error -5 [ 104.087816][ T5970] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input16 [ 104.200383][ T8817] openvswitch: netlink: Message has 4668 unknown bytes. [ 104.247335][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.833'. [ 104.257102][ T5332] Bluetooth: hci1: command tx timeout [ 104.413781][ T6002] usb 5-1: USB disconnect, device number 15 [ 104.535474][ T53] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 104.695485][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 104.699299][ T53] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.702261][ T53] usb 8-1: config 0 has no interface number 0 [ 104.704275][ T53] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.708471][ T53] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 104.713219][ T53] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.717849][ T53] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.723149][ T53] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.726924][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.733274][ T53] usb 8-1: config 0 descriptor?? [ 104.742910][ T53] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 104.981573][ T8843] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 105.007522][ T8843] macsec1: entered promiscuous mode [ 105.009227][ T8843] bridge0: entered promiscuous mode [ 105.011353][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.015334][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.098500][ T40] kauditd_printk_skb: 269 callbacks suppressed [ 105.098513][ T40] audit: type=1400 audit(102.209:7946): avc: denied { write } for pid=8842 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.112511][ T40] audit: type=1400 audit(102.209:7947): avc: denied { connect } for pid=8842 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.118335][ T40] audit: type=1400 audit(102.209:7948): avc: denied { name_connect } for pid=8842 comm="syz.0.840" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 105.151100][ T40] audit: type=1400 audit(102.256:7949): avc: denied { watch watch_reads } for pid=8853 comm="syz.4.842" path="/38" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 105.241943][ T40] audit: type=1400 audit(102.349:7950): avc: denied { read } for pid=8863 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.249354][ T40] audit: type=1400 audit(102.349:7951): avc: denied { read write } for pid=8863 comm="syz.4.844" name="radio0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.258083][ T40] audit: type=1400 audit(102.349:7952): avc: denied { open } for pid=8863 comm="syz.4.844" path="/dev/radio0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.265174][ T40] audit: type=1400 audit(102.349:7953): avc: denied { ioctl } for pid=8863 comm="syz.4.844" path="/dev/radio0" dev="devtmpfs" ino=980 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.273942][ T40] audit: type=1400 audit(102.349:7954): avc: denied { create } for pid=8863 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.280247][ T40] audit: type=1400 audit(102.368:7955): avc: denied { write } for pid=8863 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.407766][ T8886] netlink: 'syz.2.852': attribute type 10 has an invalid length. [ 105.417914][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.420970][ T8886] team0: Device bond0 failed to register rx_handler [ 105.481859][ T8889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.566113][ T8889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.665841][ T8889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.691013][ T8893] program syz.0.854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.724646][ T8889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.824042][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.832423][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.840723][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.847698][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.977735][ T8898] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 106.087483][ T8907] debugfs: 'ttyS3' already exists in 'caif_serial' [ 106.180726][ T8910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.240711][ T8927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8927 comm=syz.2.866 [ 106.430809][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 106.431791][ T8942] netlink: 'syz.0.871': attribute type 5 has an invalid length. [ 106.433825][ T8940] netlink: 25 bytes leftover after parsing attributes in process `syz.2.872'. [ 106.436208][ T8942] netlink: 'syz.0.871': attribute type 7 has an invalid length. [ 106.443628][ T8942] : entered promiscuous mode [ 106.452798][ T8942] ip6tnl1: entered promiscuous mode [ 106.454506][ T8942] ip6tnl1: entered allmulticast mode [ 106.467648][ T8944] /dev/nullb0: Can't lookup blockdev [ 106.502144][ T5970] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 106.674386][ T5970] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 106.677853][ T5970] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 106.681048][ T5970] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 106.687061][ T5970] usb 9-1: string descriptor 0 read error: -22 [ 106.689091][ T5970] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.691931][ T5970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.702542][ T8925] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.745168][ T8965] netlink: 'syz.2.878': attribute type 12 has an invalid length. [ 106.922054][ T5970] cdc_ncm 9-1:1.0: bind() failure [ 106.927654][ T5970] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 106.929963][ T5970] cdc_ncm 9-1:1.1: bind() failure [ 106.933950][ T5970] usb 9-1: USB disconnect, device number 9 [ 107.328405][ T53] usb 8-1: USB disconnect, device number 7 [ 107.332781][ T53] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 107.484216][ T8973] syz.3.882 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 107.521983][ T8976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.884'. [ 107.591552][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 107.619323][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 107.622048][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 107.625829][ T8995] loop4: detected capacity change from 0 to 524255232 [ 107.725553][ T8995] loop4: detected capacity change from 524255232 to 524287956 [ 107.792997][ T9017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9017 comm=syz.3.898 [ 107.888556][ T9037] netlink: 'syz.2.904': attribute type 7 has an invalid length. [ 107.899122][ T9037] : entered promiscuous mode [ 107.931572][ T9035] dvmrp17: entered allmulticast mode [ 107.934390][ T9035] dvmrp17: left allmulticast mode [ 108.137371][ T9066] ufs: You didn't specify the type of your ufs filesystem [ 108.137371][ T9066] [ 108.137371][ T9066] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 108.137371][ T9066] [ 108.137371][ T9066] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 108.152778][ T9066] ufs: failed to set blocksize [ 108.234054][ T9075] binder: 9074:9075 ioctl c018620c 200000000000 returned -22 [ 108.303641][ T9090] 9pnet_virtio: no channels available for device syz [ 108.342053][ T9097] libceph: resolve ' [ 108.342053][ T9097] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 108.342053][ T9097] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 108.346519][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 108.466589][ T9104] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 108.818900][ T9116] geneve3: entered promiscuous mode [ 108.821137][ T9116] geneve3: entered allmulticast mode [ 109.156106][ T9125] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.180933][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 109.265251][ T9139] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.327919][ T9146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.937'. [ 109.330123][ T9147] bridge_slave_0: left allmulticast mode [ 109.333145][ T9147] bridge_slave_0: left promiscuous mode [ 109.335590][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.340467][ T9147] bridge_slave_1: left allmulticast mode [ 109.342300][ T9147] bridge_slave_1: left promiscuous mode [ 109.345590][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.354754][ T9147] bond0: (slave bond_slave_0): Releasing backup interface [ 109.359674][ T9147] bond_slave_0: left allmulticast mode [ 109.363739][ T9147] bond0: (slave bond_slave_1): Releasing backup interface [ 109.368316][ T9147] bond_slave_1: left allmulticast mode [ 109.374033][ T9147] team0: Port device team_slave_0 removed [ 109.381277][ T9147] team0: Port device team_slave_1 removed [ 109.384288][ T9147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.387613][ T9147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.391203][ T9147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.397451][ T9147] batman_adv: batadv0: Interface deactivated: gretap1 [ 109.400987][ T9147] batman_adv: batadv0: Removing interface: gretap1 [ 109.432750][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.440514][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 109.456508][ T9155] program syz.4.940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.149290][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.233120][ T5985] Bluetooth: hci0: command 0x0405 tx timeout [ 111.088376][ T5971] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.088416][ T5332] Bluetooth: hci4: command 0x1003 tx timeout [ 122.680028][ T9182] sch_fq: defrate 4294967295 ignored. [ 122.688123][ T9180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.688318][ T40] kauditd_printk_skb: 294 callbacks suppressed [ 122.688327][ T40] audit: type=1400 audit(118.672:8250): avc: denied { module_request } for pid=9178 comm="syz.3.949" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 122.707325][ T40] audit: type=1400 audit(118.681:8251): avc: denied { create } for pid=9179 comm="syz.2.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.713906][ T40] audit: type=1400 audit(118.681:8252): avc: denied { ioctl } for pid=9179 comm="syz.2.948" path="socket:[27397]" dev="sockfs" ino=27397 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.726732][ T40] audit: type=1400 audit(118.700:8253): avc: denied { read } for pid=9184 comm="syz.0.950" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 122.734031][ T40] audit: type=1400 audit(118.700:8254): avc: denied { open } for pid=9184 comm="syz.0.950" path="net:[4026532876]" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 122.741874][ T40] audit: type=1400 audit(118.700:8255): avc: denied { create } for pid=9184 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.748936][ T40] audit: type=1400 audit(118.700:8256): avc: denied { ioctl } for pid=9184 comm="syz.0.950" path="socket:[25579]" dev="sockfs" ino=25579 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.759542][ T40] audit: type=1400 audit(118.700:8257): avc: denied { accept } for pid=9184 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.769301][ T40] audit: type=1400 audit(118.719:8258): avc: denied { read write } for pid=9177 comm="syz.4.947" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.784761][ T40] audit: type=1400 audit(118.719:8259): avc: denied { open } for pid=9177 comm="syz.4.947" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.786995][ T9196] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.953'. [ 122.792098][ T9197] Bluetooth: MGMT ver 1.23 [ 122.797146][ T9200] tipc: Enabling of bearer rejected, failed to enable media [ 122.924631][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 122.942546][ T9214] QAT: failed to copy from user. [ 122.962149][ T9214] XFS (nullb0): Invalid superblock magic number [ 123.082845][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 123.087700][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 123.124919][ T9246] overlayfs: failed to resolve './file0/file0': -2 [ 123.905302][ T9275] macvlan2: entered promiscuous mode [ 123.907672][ T9275] macvlan2: entered allmulticast mode [ 124.457016][ T9304] overlayfs: failed to clone upperpath [ 125.001156][ T9306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.986'. [ 125.075363][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.988'. [ 125.191002][ T9326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.991'. [ 125.210695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.295616][ T9344] binfmt_misc: register: failed to install interpreter file ./file0 [ 125.466061][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 125.578228][ T9367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.579989][ T9373] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1006'. [ 125.618374][ T9373] netlink: 'syz.2.1006': attribute type 3 has an invalid length. [ 125.621125][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 125.796473][ T9381] SELinux: unknown common [ 125.798703][ T9381] SELinux: failed to load policy [ 126.020308][ T9408] cgroup: noprefix used incorrectly [ 126.050086][ T9411] wg1: entered promiscuous mode [ 126.051534][ T9411] wg1: entered allmulticast mode [ 126.086268][ T9415] netlink: 'syz.0.1020': attribute type 10 has an invalid length. [ 126.113655][ T9415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.123902][ T9415] bond_slave_0: entered promiscuous mode [ 126.126040][ T9415] bond_slave_1: entered promiscuous mode [ 126.128137][ T9415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 126.133105][ T9415] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 127.315304][ T5971] Bluetooth: hci1: link tx timeout [ 127.318803][ T5971] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 127.322400][ T9466] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 127.544640][ T9509] 9pnet_fd: p9_fd_create_tcp (9509): problem connecting socket to 127.0.0.1 [ 127.691480][ T9542] bridge1: entered promiscuous mode [ 127.734984][ T9547] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 127.780361][ T9551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.929140][ T9560] ISOFS: Unable to identify CD-ROM format. [ 128.091894][ T40] kauditd_printk_skb: 314 callbacks suppressed [ 128.091907][ T40] audit: type=1400 audit(123.714:8574): avc: denied { create } for pid=9569 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.100936][ T40] audit: type=1400 audit(123.714:8575): avc: denied { write } for pid=9569 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.114401][ T40] audit: type=1400 audit(123.742:8576): avc: denied { bind } for pid=9569 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.138639][ T9573] ================================================================== [ 128.138654][ T9573] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 128.138709][ T9573] Write of size 8 at addr ffffc90005281000 by task syz.0.1068/9573 [ 128.138724][ T9573] [ 128.138732][ T9573] CPU: 2 UID: 0 PID: 9573 Comm: syz.0.1068 Not tainted syzkaller #0 PREEMPT(full) [ 128.138745][ T9573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.138753][ T9573] Call Trace: [ 128.138757][ T9573] [ 128.138761][ T9573] dump_stack_lvl+0x116/0x1f0 [ 128.138780][ T9573] print_report+0xcd/0x630 [ 128.138793][ T9573] ? __virt_addr_valid+0x81/0x610 [ 128.138811][ T9573] ? sys_imageblit+0x1a6f/0x1e60 [ 128.138826][ T9573] kasan_report+0xe0/0x110 [ 128.138839][ T9573] ? sys_imageblit+0x1a6f/0x1e60 [ 128.138855][ T9573] sys_imageblit+0x1a6f/0x1e60 [ 128.138871][ T9573] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 128.138890][ T9573] ? __pfx_sys_imageblit+0x10/0x10 [ 128.138905][ T9573] ? find_held_lock+0x2b/0x80 [ 128.138919][ T9573] ? __queue_work+0x431/0x1160 [ 128.138932][ T9573] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 128.138949][ T9573] ? queue_work_on+0x12a/0x1f0 [ 128.138961][ T9573] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.138977][ T9573] ? queue_work_on+0x8b/0x1f0 [ 128.138989][ T9573] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 128.139002][ T9573] bit_putcs+0x90f/0xde0 [ 128.139016][ T9573] ? __pfx_bit_putcs+0x10/0x10 [ 128.139030][ T9573] ? fb_get_color_depth+0x120/0x250 [ 128.139041][ T9573] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.139055][ T9573] ? __pfx_bit_putcs+0x10/0x10 [ 128.139084][ T9573] fbcon_putcs+0x384/0x4a0 [ 128.139104][ T9573] do_update_region+0x2e6/0x3f0 [ 128.139122][ T9573] csi_J+0x545/0xad0 [ 128.139140][ T9573] do_con_write+0x41d7/0x8280 [ 128.139154][ T9573] ? rcu_is_watching+0x12/0xc0 [ 128.139168][ T9573] ? trace_contention_end+0xdd/0x130 [ 128.139181][ T9573] ? __pfx___mutex_lock+0x10/0x10 [ 128.139193][ T9573] ? __pfx_do_con_write+0x10/0x10 [ 128.139205][ T9573] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.139219][ T9573] ? con_write+0x93/0xb0 [ 128.139231][ T9573] con_write+0x23/0xb0 [ 128.139246][ T9573] n_tty_write+0x41c/0x11e0 [ 128.139271][ T9573] ? __pfx_n_tty_write+0x10/0x10 [ 128.139297][ T9573] ? rcu_is_watching+0x12/0xc0 [ 128.139318][ T9573] ? __pfx_woken_wake_function+0x10/0x10 [ 128.139339][ T9573] ? kfree+0x24f/0x4d0 [ 128.139361][ T9573] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 128.139380][ T9573] ? __pfx_n_tty_write+0x10/0x10 [ 128.139396][ T9573] file_tty_write.constprop.0+0x504/0x9b0 [ 128.139410][ T9573] vfs_write+0x7d3/0x11d0 [ 128.139421][ T9573] ? __pfx_tty_write+0x10/0x10 [ 128.139432][ T9573] ? __pfx_vfs_write+0x10/0x10 [ 128.139442][ T9573] ? find_held_lock+0x2b/0x80 [ 128.139459][ T9573] ksys_write+0x12a/0x250 [ 128.139470][ T9573] ? __pfx_ksys_write+0x10/0x10 [ 128.139482][ T9573] do_syscall_64+0xcd/0x4c0 [ 128.139495][ T9573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.139507][ T9573] RIP: 0033:0x7f15c8f8ebe9 [ 128.139517][ T9573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.139528][ T9573] RSP: 002b:00007f15c9e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.139540][ T9573] RAX: ffffffffffffffda RBX: 00007f15c91c5fa0 RCX: 00007f15c8f8ebe9 [ 128.139548][ T9573] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000003 [ 128.139555][ T9573] RBP: 00007f15c9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 128.139562][ T9573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.139568][ T9573] R13: 00007f15c91c6038 R14: 00007f15c91c5fa0 R15: 00007ffd237f3368 [ 128.139579][ T9573] [ 128.139583][ T9573] [ 128.139586][ T9573] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004f81000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 128.139614][ T9573] Memory state around the buggy address: [ 128.139621][ T9573] ffffc90005280f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 128.139629][ T9573] ffffc90005280f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 128.139638][ T9573] >ffffc90005281000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.139644][ T9573] ^ [ 128.139650][ T9573] ffffc90005281080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.139658][ T9573] ffffc90005281100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.139664][ T9573] ================================================================== [ 128.139760][ T9573] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.139775][ T9573] CPU: 2 UID: 0 PID: 9573 Comm: syz.0.1068 Not tainted syzkaller #0 PREEMPT(full) [ 128.139798][ T9573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.139809][ T9573] Call Trace: [ 128.139816][ T9573] [ 128.139821][ T9573] dump_stack_lvl+0x3d/0x1f0 [ 128.139834][ T9573] vpanic+0x6e8/0x7a0 [ 128.139850][ T9573] ? __pfx_vpanic+0x10/0x10 [ 128.139867][ T9573] ? __pfx_vprintk_emit+0x10/0x10 [ 128.139884][ T9573] ? sys_imageblit+0x1a6f/0x1e60 [ 128.139898][ T9573] panic+0xca/0xd0 [ 128.139913][ T9573] ? __pfx_panic+0x10/0x10 [ 128.139930][ T9573] ? sys_imageblit+0x1a6f/0x1e60 [ 128.139945][ T9573] ? preempt_schedule_common+0x44/0xc0 [ 128.139957][ T9573] ? preempt_schedule_thunk+0x16/0x30 [ 128.139974][ T9573] check_panic_on_warn+0xab/0xb0 [ 128.139984][ T9573] end_report+0x107/0x170 [ 128.139996][ T9573] kasan_report+0xee/0x110 [ 128.140008][ T9573] ? sys_imageblit+0x1a6f/0x1e60 [ 128.140024][ T9573] sys_imageblit+0x1a6f/0x1e60 [ 128.140040][ T9573] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 128.140058][ T9573] ? __pfx_sys_imageblit+0x10/0x10 [ 128.140072][ T9573] ? find_held_lock+0x2b/0x80 [ 128.140086][ T9573] ? __queue_work+0x431/0x1160 [ 128.140099][ T9573] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 128.140117][ T9573] ? queue_work_on+0x12a/0x1f0 [ 128.140128][ T9573] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.140140][ T9573] ? queue_work_on+0x8b/0x1f0 [ 128.140153][ T9573] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 128.140165][ T9573] bit_putcs+0x90f/0xde0 [ 128.140181][ T9573] ? __pfx_bit_putcs+0x10/0x10 [ 128.140194][ T9573] ? fb_get_color_depth+0x120/0x250 [ 128.140204][ T9573] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.140219][ T9573] ? __pfx_bit_putcs+0x10/0x10 [ 128.140242][ T9573] fbcon_putcs+0x384/0x4a0 [ 128.140263][ T9573] do_update_region+0x2e6/0x3f0 [ 128.140279][ T9573] csi_J+0x545/0xad0 [ 128.140301][ T9573] do_con_write+0x41d7/0x8280 [ 128.140314][ T9573] ? rcu_is_watching+0x12/0xc0 [ 128.140328][ T9573] ? trace_contention_end+0xdd/0x130 [ 128.140341][ T9573] ? __pfx___mutex_lock+0x10/0x10 [ 128.140353][ T9573] ? __pfx_do_con_write+0x10/0x10 [ 128.140365][ T9573] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.140380][ T9573] ? con_write+0x93/0xb0 [ 128.140392][ T9573] con_write+0x23/0xb0 [ 128.140404][ T9573] n_tty_write+0x41c/0x11e0 [ 128.140421][ T9573] ? __pfx_n_tty_write+0x10/0x10 [ 128.140435][ T9573] ? rcu_is_watching+0x12/0xc0 [ 128.140449][ T9573] ? __pfx_woken_wake_function+0x10/0x10 [ 128.140462][ T9573] ? kfree+0x24f/0x4d0 [ 128.140476][ T9573] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 128.140489][ T9573] ? __pfx_n_tty_write+0x10/0x10 [ 128.140504][ T9573] file_tty_write.constprop.0+0x504/0x9b0 [ 128.140518][ T9573] vfs_write+0x7d3/0x11d0 [ 128.140529][ T9573] ? __pfx_tty_write+0x10/0x10 [ 128.140541][ T9573] ? __pfx_vfs_write+0x10/0x10 [ 128.140552][ T9573] ? find_held_lock+0x2b/0x80 [ 128.140570][ T9573] ksys_write+0x12a/0x250 [ 128.140581][ T9573] ? __pfx_ksys_write+0x10/0x10 [ 128.140594][ T9573] do_syscall_64+0xcd/0x4c0 [ 128.140607][ T9573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.140618][ T9573] RIP: 0033:0x7f15c8f8ebe9 [ 128.140628][ T9573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.140639][ T9573] RSP: 002b:00007f15c9e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.140650][ T9573] RAX: ffffffffffffffda RBX: 00007f15c91c5fa0 RCX: 00007f15c8f8ebe9 [ 128.140658][ T9573] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000003 [ 128.140664][ T9573] RBP: 00007f15c9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 128.140671][ T9573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.140678][ T9573] R13: 00007f15c91c6038 R14: 00007f15c91c5fa0 R15: 00007ffd237f3368 [ 128.140689][ T9573] [ 128.141389][ T9573] Kernel Offset: disabled VM DIAGNOSIS: 14:32:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888026ecc880 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005006f000 CR4=00350ef0 DR0=0000000100000000 DR1=0000000000001000 DR2=0000000000000009 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2986f4e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2986f666 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2986f666 00007ffc2986f66c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496e612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496e612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496e612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496e612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496e612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496e612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801dea2440 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f35e7860d58 CR3=000000004dbb1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff705105e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff70510766 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff70510766 00007fff7051076c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb3a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb3a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb3a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb3a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb3a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb3a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85644675 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90003b6ef58 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000037353954 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b112060 R15=ffffffff85644610 RIP=ffffffff8564469f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f15c9e316c0 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000057f000 CR3=000000002c8c5000 CR4=00352ef0 DR0=0000040000100000 DR1=000000000000064f DR2=0000000000000004 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd237f36f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd237f3876 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd237f3876 00007ffd237f387c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c9012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c9012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c9012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c9012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c9012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15c9012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff8880281aa440 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcd90e4f00 CR3=000000003644c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd90e5c70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd90e5df6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd90e5df6 00007ffcd90e5dfc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35e6a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35e6a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35e6a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35e6a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35e6a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35e6a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000