last executing test programs: 1m23.590576731s ago: executing program 1 (id=2386): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x10001, 0xa695}, 0xc) 1m23.488158805s ago: executing program 1 (id=2389): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'tunl0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x124, 0x30, 0x48b, 0x0, 0x2, {}, [{0x110, 0x1, [@m_xt={0xb8, 0x1c, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x63, 0x6, "d3fc8ce85adcd446b637709ca175166d74fa560329eec112ebb5873aeb2846244a526f61cc4ae5650eeaf319bd5d46eafa4b016252dde0255fb46dbbc7790bac66dec48ca7052abd8367046a2b2109b8443e06da5c96be39e9a35f0210bc09"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d04, 0x0, 0xad}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x5, 0xffffffff], 0x6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@getlink={0x28, 0x12, 0xeb9b95b10abd3225, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x808}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$TIOCNXCL(r5, 0x540d) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r8, 0x0, 0x6, 0x8000}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m23.405113545s ago: executing program 1 (id=2390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x14, 0x36, 0x107, 0x3, 0x0, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x49018}, 0xc000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x24) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x2}) (async, rerun: 32) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x5, 0x6ee6fa5, 0x3, 0xb16f, 0x7fffffff, 0x5, 0x400, 0x8, 0x0, 0x8000000000000001, 0xfffffffffffff001, 0x3, 0xfffffffffffffc01, 0x4, 0x100, 0x1], 0x2000, 0x4}) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, 0xfd, 0x3, 0x20, 0x1, 0xae}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x7}, {0xeda7, 0x1, 0x0, 0xd, 0xfc, 0x0, 0x0, 0x0, 0x8}]}) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xac2, 0x0, 0x1}]}) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x6, 0xb86, 0x2}}}}, 0xd) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0xd000, 0x200306}) (rerun: 64) 1m23.287633616s ago: executing program 1 (id=2394): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000db5f9a3304000000040000000c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r3, &(0x7f0000001500), &(0x7f00000015c0)=""/132}, 0x20) ustat(0x801, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1d19"], 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m23.205719827s ago: executing program 1 (id=2395): ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0404260c"], 0x7) r0 = open_tree(0xffffffffffffffff, &(0x7f0000001880)='./file0\x00', 0x800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000128bd7000fedbdf250f0040000c000298800800030024000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x80) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r2, &(0x7f0000002240)={0x2020}, 0x207e) writev(r2, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}, {&(0x7f0000000080)="37c80900001200000000c3", 0xb}], 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x53, 0x0, 0x5, {0x8007, 0x1}, {0x7f, 0x2}, @const={0x2, {0xf, 0x5, 0x5, 0x1004}}}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x882a01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000001240)={0x4, 0x3}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) sendmsg$inet(r6, &(0x7f00000017c0)={&(0x7f0000001280)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001740)=[{&(0x7f00000012c0)="3c184f7334c23a88abd6b0581605b7149b9bc1ca725dc5b3b7fbce5af9d9e8beb65020021a81af742be8dc4d3fab4858ce121d155374788681c5fd4ecd8b8050fed774e36b0ca9ac8829d3032e747db1517da78d6955d1d18c7a214a7dbbbe61e0057a57c23898379686e14bb78ae2f4c60673f85af29b1d3a882a1b8dacb1f142f11030ca1001d3a2194df38a55807e7aebbbdaab52f071faabb1a2bbf6e792052c3f15b0d8ad759c4e87017cd56fcd5f48", 0xb2}, {&(0x7f0000001380)="08c64981882415f77cee5cebc6f44049137e579c870de5555c8adb6c51411cbf05a519f9a333a8a80615742f61976aa837d82db36cb4e4ba9f532714c3d0753f", 0x40}, {&(0x7f00000013c0)="c47b4051dfb64bd69a61c89bb8826a03b10edb3be157cc7cd94f799b02570e52e5508ce36320bba57376be953a735cb8c20c8d4e4ab136df0941c2201291c7f676504c3e6d37d1a6a7b8b37f3bc7b0f6", 0x50}, {&(0x7f0000001440)="2056a3b37ee91295036b564ca0f9790f3cb17f6ba0af914a4fe7bc3c08a518f03a4b8d61966c3361c7d414f3f7e7bd040b6372d079ee4fef3c7211f50c5bde9ad1eb4c1c39f2cabdca936142cbab9644b30ef2906450e4a041d232181361c2c1aaedeb0c390305cdbb64f4c558217b53573157624b0c34c5015d96d50d6a234996069a18afaaa26e0663c55b879bfa032ae85bb7a21cf30679fab46e772d999c1cc9636c8ef250f587cb31c68498e2a794912d12da02ef2e894ae8b66407b88393c3eecda028825121b27fd8ff51eb067229ef1deb3c9236bd6405b56beb6e265dc608", 0xe3}, {&(0x7f0000001540)="9846da93c1649543a6e82e9fdf52715b9b573dab327eab700a3d4193d6f3068e874600101079882ee2a92a1bfc55f0973985c9c5a5dff877aad226426994073b705cbcacac6ff4047472e914344b18e68d357b4983891fdfc30b44b7accb9f8c0b6542b0eb9877d2592c685d6b9c1b1166ae28d63c0dcbf57e9a72288ba4e2e1f8720a96a403a48e830c3f66ab4dec3e7e5c90f4fd2b5cdf03c60be1134b2952", 0xa0}, {&(0x7f0000001600)="f4f9b30f96953fd643b78b5aa1bbd238166498fda1e8ee8d7f69d9318ed8ce", 0x1f}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000001640)="c584ec182ec3332f6d8815607609a841da71a0d8d079e22ff4e651da63c3d9c4bdc45c60a8be0e430e14c019308a4b364f6e224aee1e8ba3e1036cccc58c04bd60d0fa861d5d986044261617c518644376dcd0d9c6ce5596d5c02d5bf2a4dc5a82f8c0439aeb1e972c5d96663232124ff9d7ec8ffb925a04fab38a06cf1b9ac2250d0e0dc7f57e358f87fda9cdda78c2c6a1ff6a9505256c03bd23988ae9e2020d2605d5865c0cf9a4c31da5eb899f50c9d20e1c2442881c37fee5127a9a74cbe7dfb0afae621d5e815be8d507560a4afafd6f3a936aa8a67bcd1c55115ac097e3a1f9e9efe041827caf51ca8c321a3230402ccc2043e100d7833e3d", 0xfc}], 0x8}, 0x20040000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000001200)) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000deffffff4f00000061117800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x20, '\x00', r7, @fallback=0x22, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1m23.204313842s ago: executing program 1 (id=2397): r0 = syz_io_uring_setup(0x50f6, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="804200000000000014001280090001007663616e000000000400028008003a00", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@private2, 0x2}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x6}, 0x2) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902"], 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0x4}, 0x2) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000140), 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000080)=0xfffffff1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x80}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x10000, 0x4}, {0x10, 0x5}, {0xc, 0x2}, @time=@time={0x5, 0xb436}}, {0x0, 0x3, 0xa, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 1m21.970573839s ago: executing program 2 (id=2422): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x19) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) (async) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}]}) (async) 1m21.851366163s ago: executing program 2 (id=2423): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) accept4(r1, &(0x7f0000000080)=@x25={0x9, @remote}, 0x0, 0x80800) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000480)={0x202, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x3, 0x800000, 0xfffffff3, 0x5, 0x2000983e, 0x1, 0x3, 0x2}}, 0x9}) 1m21.848334339s ago: executing program 2 (id=2424): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xfff5}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x12, 0x10, 0xfa00, {&(0x7f0000000440), 0xffffffffffffffff, r6}}, 0x18) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4600410}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x48, r9, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x1) syz_emit_ethernet(0x12, &(0x7f0000000000)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x800}}, {@generic={0x88ca}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x5, 0x5, 0xc, 0x5, 0x100000000, 0xffffffffffffffff}) 1m21.579870904s ago: executing program 2 (id=2425): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, &(0x7f0000000480)) setpgid(r0, r0) setpgid(0x0, r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 1m21.561447631s ago: executing program 2 (id=2428): r0 = socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) 1m21.241644404s ago: executing program 2 (id=2432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="0103fc73585d71eb5aa1c7196ef3ff7fff7e39"], 0x20}, 0x1, 0x0, 0x0, 0x1800}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="0103fc73585d71eb5aa1c7196ef3ff7fff7e39"], 0x20}, 0x1, 0x0, 0x0, 0x1800}, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) (async) 1m21.171947918s ago: executing program 32 (id=2432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="0103fc73585d71eb5aa1c7196ef3ff7fff7e39"], 0x20}, 0x1, 0x0, 0x0, 0x1800}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="0103fc73585d71eb5aa1c7196ef3ff7fff7e39"], 0x20}, 0x1, 0x0, 0x0, 0x1800}, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) (async) 1m7.982065214s ago: executing program 33 (id=2397): r0 = syz_io_uring_setup(0x50f6, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="804200000000000014001280090001007663616e000000000400028008003a00", @ANYRES32=0x0, @ANYBLOB="1aa24c7917b36cdb14d17004d1d7f907a1456c8d850c5e9a67f93f65e422d59c9e279028c3bc8c15dfa0272cf9a4970c8b2d8c9063603139b92a0e58e938367cbedf1c01a5fef5e2609776011d2fdc68a68cee00de8089a758225e379207a62242248034ff880a2558669ff1fefe8aa3f0c1527203f5d29d66cf2779cc358b1eaf43389692cefeba29a98fba88edd936751cb877c6fe631ad1d6fb408980645ec945ab9492b8c2b359679124482bbfbb7f3bf0dd0bcb969fdec88b3051e251d2d12a6c89fb32ae40ea07ed1010a7bff52c297280e3bebd67c990de831b8cd5dc46a12c06923971e4f24e7743539777ca571c47ce132376285363fc6f8bbeaadbf6251975cb698d94fdb30bc014"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@private2, 0x2}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x6}, 0x2) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902"], 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0x4}, 0x2) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000140), 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000080)=0xfffffff1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x80}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x10000, 0x4}, {0x10, 0x5}, {0xc, 0x2}, @time=@time={0x5, 0xb436}}, {0x0, 0x3, 0xa, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 48.620303495s ago: executing program 0 (id=2923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x34}}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x1, 0x6, 0x81, 0x8001]}, &(0x7f0000000080)=0xc) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000200)={0x1c, r1, 0x1975cf4a263c6c6b, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x600c012) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x34}}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x1, 0x6, 0x81, 0x8001]}, &(0x7f0000000080)=0xc) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000200)={0x1c, r1, 0x1975cf4a263c6c6b, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x600c012) (async) 42.891315528s ago: executing program 0 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 35.799073234s ago: executing program 0 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 29.840543308s ago: executing program 0 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 23.663157853s ago: executing program 0 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 17.569898967s ago: executing program 0 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 449.827826ms ago: executing program 4 (id=3617): fanotify_init(0x1a, 0x800) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0x9f0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x480, 0x0, 0x8000000000000001}]}) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 449.652804ms ago: executing program 5 (id=3618): mkdir(&(0x7f0000000180)='./file0\x00', 0x30) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x3e1482, 0x0) mount$afs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x10800, &(0x7f0000000340)={[{@flock_strict}, {@dyn}, {}, {@flock_local}, {@dyn}, {@dyn}, {@dyn}], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_appraise}, {@flag='mand'}]}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x7) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000100)='f2fs\x00', 0x0, &(0x7f0000000140)='grpquota') 389.144637ms ago: executing program 5 (id=3620): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bynd=s']) 387.175573ms ago: executing program 5 (id=3622): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40002}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x80008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xe, 0x8}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x42, 0x0, &(0x7f00007d0000)) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x440, 0x5, 0x401, 0x5, 0x1}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0)={r6, 0x5, 0x81, 0x8, 0x1cb8, 0x10001}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000040)={@private1}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0xe519413cd68135cc) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x11) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) recvmmsg(r7, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}, 0xfffff51a}], 0x1, 0x40010040, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 387.008489ms ago: executing program 4 (id=3623): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x6}, {0x1e, 0xb, 0x0, 0xfffff010}, {0x9, 0x2, 0xff, 0x3ff}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 328.258725ms ago: executing program 5 (id=3625): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x2, 0x9, 0xfffe}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791028000000000080935e50000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 327.852708ms ago: executing program 4 (id=3626): syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58bbf5993943aea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000380)=[r5], 0x0, 0x0, 0x0, 0x0, 0x8}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) (async) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$packet(0x11, 0x3, 0x300) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ni\x00'}, 0x58) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000080)={'ip_vti0\x00', r9, 0x7f48, 0x8000, 0x101, 0x2, {{0x12, 0x4, 0x0, 0x36, 0x48, 0x66, 0x0, 0xd6, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@noop, @lsrr={0x83, 0xf, 0x7c, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x3d, 0x1, 0xb, [{@rand_addr=0x64010101, 0x3824}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x1a5}]}]}}}}}) 327.651458ms ago: executing program 5 (id=3627): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000100)) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040100011402002000128008000100736974001400028008000100ac"], 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 259.441557ms ago: executing program 5 (id=3628): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mmap(&(0x7f00005f8000/0x3000)=nil, 0x3000, 0xb635773f04ebbee8, 0x1010, 0xffffffffffffffff, 0x6a481000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x608142, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xda, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$fuse(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x131000, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x3a00}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}], [{@seclabel}]}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x8c}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1008004, &(0x7f00000001c0)) 259.189308ms ago: executing program 4 (id=3629): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x800, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x6, 0x6}) 187.410559ms ago: executing program 4 (id=3630): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x103bff, 0x111) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x2, 0x1) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r3, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) (async) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x103bff, 0x111) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket(0x11, 0x2, 0x1) (async) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) (async) setsockopt(r3, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 120.564484ms ago: executing program 4 (id=3632): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$security_evm(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480), &(0x7f00000004c0)=@ng={0x4, 0x15, "8aba8ab75da974aa"}, 0xa, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000040), 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000002c0), 0xca394fcd19bf53c, &(0x7f0000000300)={[{@uuid_auto}, {@volatile}, {@verity_require}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}, {@xino_on}, {@redirect_dir_nofollow}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@smackfsroot={'smackfsroot', 0x3d, '{\xd6!]'}}]}) personality(0xfe47fef9f5ff7379) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r4, r4) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000100000000000400040000000000100002000000000020"], 0x24, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 118.980628ms ago: executing program 3 (id=3633): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd2, &(0x7f0000000080)=""/210, 0x40f00, 0xe4}, 0x94) 118.879464ms ago: executing program 3 (id=3634): syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0xe00) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_getnetconf={0x1c, 0x52, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 60.973217ms ago: executing program 3 (id=3635): recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}}, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0xc0800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 60.637521ms ago: executing program 3 (id=3636): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x322001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 245.22µs ago: executing program 3 (id=3637): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xd71, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x2, "e4815826b1af9d911c9e181942f697619ff1bcb06be129cd593711aab0d1884a", 0x3234564e}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70107c05219d040000e20400000006000100050000000800090002"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 3 (id=3638): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x9}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x34565559, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x24, &(0x7f0000000000)={r4}, &(0x7f0000000140)=0x8) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 225.590105][T17174] @0: renamed from bond_slave_1 (while UP) [ 225.627066][T17174] netlink: 'syz.3.2708': attribute type 1 has an invalid length. [ 225.629579][T17174] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2708'. [ 225.637275][T17178] debugfs: 'ttyS3' already exists in 'caif_serial' [ 225.638738][T17174] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 225.654852][ T60] bond1: (slave lo): failed to get link speed/duplex [ 225.707346][T17202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2712'. [ 225.745539][T17209] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 225.765357][ T12] bond1: (slave lo): failed to get link speed/duplex [ 225.846761][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 225.849912][ T1113] ata1: failed to read log page 10h (errno=-5) [ 225.852558][ T1113] ata1.00: exception Emask 0x1 SAct 0x40000 SErr 0x0 action 0x0 [ 225.856195][ T1113] ata1.00: irq_stat 0x40000000 [ 225.858243][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 225.860857][ T1113] ata1.00: cmd 61/48:90:ee:0b:10/00:00:00:00:00/40 tag 18 ncq dma 36864 out [ 225.860857][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 225.869309][ T1113] ata1.00: status: { DRDY } [ 225.871265][ T1113] ata1.00: error: { ABRT } [ 225.873454][ T1113] ata1.00: configured for UDMA/100 [ 225.875976][ T1113] ata1: EH complete [ 225.884951][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 225.888813][T17218] program syz.3.2716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.926004][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2716'. [ 225.994026][ T12] bond1: (slave lo): failed to get link speed/duplex [ 225.997498][T17223] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.104051][ T46] bond1: (slave lo): failed to get link speed/duplex [ 226.180978][T17243] omfs: Invalid superblock (0) [ 226.192414][T17245] usb usb8: usbfs: process 17245 (syz.0.2724) did not claim interface 6 before use [ 226.197313][T17245] usb usb8: usbfs: process 17245 (syz.0.2724) did not claim interface 6 before use [ 226.214017][ T46] bond1: (slave lo): failed to get link speed/duplex [ 226.265265][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2725'. [ 226.334565][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 226.370159][T17267] openvswitch: netlink: Message has 8 unknown bytes. [ 226.387240][T17267] loop5: detected capacity change from 0 to 7 [ 226.392334][ T9329] Dev loop5: unable to read RDB block 7 [ 226.395125][ T9329] loop5: unable to read partition table [ 226.397891][ T9329] loop5: partition table beyond EOD, truncated [ 226.404495][T17267] Dev loop5: unable to read RDB block 7 [ 226.406570][T17267] loop5: unable to read partition table [ 226.408604][T17267] loop5: partition table beyond EOD, truncated [ 226.410611][T17267] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 226.471789][T17269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2729'. [ 226.484061][ T5945] Bluetooth: hci3: command tx timeout [ 226.891423][ T5341] Dev loop5: unable to read RDB block 7 [ 226.894009][ T5341] loop5: unable to read partition table [ 226.896675][ T5341] loop5: partition table beyond EOD, truncated [ 227.091335][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2733'. [ 228.101615][T17273] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 228.106560][T17274] mac80211_hwsim hwsim25 pim6reg0: renamed from wlan1 [ 228.109806][ T5341] Dev loop5: unable to read RDB block 7 [ 228.111565][ T5341] loop5: unable to read partition table [ 228.113374][ T5341] loop5: partition table beyond EOD, truncated [ 228.153404][ T5341] Dev loop5: unable to read RDB block 7 [ 228.155566][ T5341] loop5: unable to read partition table [ 228.157846][ T5341] loop5: partition table beyond EOD, truncated [ 229.046380][T17274] mac80211_hwsim hwsim25 pim6reg0: left allmulticast mode [ 229.065347][T17293] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 229.083034][ T40] kauditd_printk_skb: 214 callbacks suppressed [ 229.083044][ T40] audit: type=1400 audit(228.999:1762): avc: denied { create } for pid=17296 comm="syz.3.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.093821][ T40] audit: type=1400 audit(229.009:1763): avc: denied { read write } for pid=17299 comm="syz.4.2738" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 229.101538][ T40] audit: type=1400 audit(229.009:1764): avc: denied { open } for pid=17299 comm="syz.4.2738" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 229.113149][ T40] audit: type=1400 audit(229.009:1765): avc: denied { execute } for pid=17299 comm="syz.4.2738" path="/80/file0" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.123576][ T40] audit: type=1804 audit(229.009:1766): pid=17301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2738" name="/newroot/80/file0" dev="tmpfs" ino=437 res=1 errno=0 [ 229.133018][ T40] audit: type=1400 audit(229.029:1767): avc: denied { read } for pid=17296 comm="syz.3.2737" dev="nsfs" ino=4026533867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 229.143120][ T40] audit: type=1400 audit(229.029:1768): avc: denied { open } for pid=17296 comm="syz.3.2737" path="net:[4026533867]" dev="nsfs" ino=4026533867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 229.173733][T17312] 9pnet_virtio: no channels available for device 127.0.0.1 [ 229.187590][T17313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.193351][ T40] audit: type=1400 audit(229.029:1769): avc: denied { create } for pid=17303 comm="syz.5.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.198494][T17313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.201651][ T40] audit: type=1400 audit(229.029:1770): avc: denied { setopt } for pid=17303 comm="syz.5.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.209709][ T40] audit: type=1400 audit(229.029:1771): avc: denied { create } for pid=17303 comm="syz.5.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 229.228739][T17322] veth1_to_bond: entered allmulticast mode [ 229.236518][T17323] 9pnet_virtio: no channels available for device syz [ 229.276726][T17322] netlink: 'syz.5.2743': attribute type 1 has an invalid length. [ 229.425551][T17321] veth1_to_bond: left allmulticast mode [ 229.503996][ T837] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 229.673964][ T837] usb 8-1: Using ep0 maxpacket: 8 [ 229.677570][ T837] usb 8-1: config 0 has no interfaces? [ 229.679538][ T837] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.682450][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.687681][ T837] usb 8-1: config 0 descriptor?? [ 230.070982][T17339] Invalid ELF header magic: != ELF [ 230.094937][T17309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.100718][T17309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.114977][ T837] usb 8-1: USB disconnect, device number 20 [ 230.144196][T17350] xt_HMARK: spi-set and port-set can't be combined [ 230.184372][T17354] netlink: 'syz.4.2748': attribute type 21 has an invalid length. [ 230.186850][T17354] __nla_validate_parse: 1 callbacks suppressed [ 230.186858][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 230.192477][T17354] netlink: 'syz.4.2748': attribute type 21 has an invalid length. [ 230.195415][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 230.200729][T17354] netlink: 'syz.4.2748': attribute type 21 has an invalid length. [ 230.203292][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 230.207390][T17354] netlink: 'syz.4.2748': attribute type 21 has an invalid length. [ 230.209923][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 230.233236][T17358] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2749'. [ 230.454267][ T4783] net_ratelimit: 16 callbacks suppressed [ 230.454282][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 230.512075][T17389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2754'. [ 230.564954][ T12] bond1: (slave lo): failed to get link speed/duplex [ 230.604807][T17395] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 230.607596][T17395] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 230.611239][T17395] vhci_hcd vhci_hcd.0: Device attached [ 230.657491][T17396] vhci_hcd: connection closed [ 230.658710][ T12] vhci_hcd vhci_hcd.4: stop threads [ 230.662998][ T12] vhci_hcd vhci_hcd.4: release socket [ 230.666243][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 230.674887][ T12] bond1: (slave lo): failed to get link speed/duplex [ 230.682470][ T5945] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 230.784275][ T4007] bond1: (slave lo): failed to get link speed/duplex [ 230.854203][T17416] macvlan0: entered promiscuous mode [ 230.859260][T17416] netlink: 'syz.3.2761': attribute type 1 has an invalid length. [ 230.862114][T17416] netlink: 'syz.3.2761': attribute type 2 has an invalid length. [ 230.867230][T17419] netlink: 'syz.3.2761': attribute type 1 has an invalid length. [ 230.870330][T17419] netlink: 'syz.3.2761': attribute type 2 has an invalid length. [ 230.894703][ T4007] bond1: (slave lo): failed to get link speed/duplex [ 230.975649][T17424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17424 comm=syz.3.2762 [ 230.985045][T17424] gtp0: entered promiscuous mode [ 231.004480][ T12] bond1: (slave lo): failed to get link speed/duplex [ 231.118295][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 231.212591][T17447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'. [ 231.234913][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 231.244992][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2770'. [ 231.316535][T17453] block nbd0: NBD_DISCONNECT [ 231.320279][T17453] block nbd0: Disconnected due to user request. [ 231.323691][T17453] block nbd0: shutting down sockets [ 231.329940][T17455] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2772'. [ 231.374132][ T60] bond1: (slave lo): failed to get link speed/duplex [ 231.428984][T17471] fuseblk: Bad value for 'user_id' [ 231.433001][T17471] fuseblk: Bad value for 'user_id' [ 231.552469][T17491] kvm: MONITOR instruction emulated as NOP! [ 231.557664][ T12] bond1: (slave lo): failed to get link speed/duplex [ 231.611638][T17511] netlink: 'syz.5.2782': attribute type 12 has an invalid length. [ 231.616209][T17511] netlink: 'syz.5.2782': attribute type 5 has an invalid length. [ 231.619371][T17511] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2782'. [ 231.701533][T17527] Failed to initialize the IGMP autojoin socket (err -2) [ 231.821472][T17542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.835761][T17542] fuse: Unknown parameter 'overlay' [ 231.881366][T17559] xt_HMARK: spi-set and port-set can't be combined [ 232.054606][T17574] program syz.4.2796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.289706][T17603] FAT-fs (sr0): bogus number of reserved sectors [ 232.292456][T17603] FAT-fs (sr0): Can't find a valid FAT filesystem [ 232.683994][ T1023] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 232.849549][ T1023] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 232.852453][ T1023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 232.855509][ T1023] usb 8-1: Product: syz [ 232.857053][ T1023] usb 8-1: Manufacturer: syz [ 232.858701][ T1023] usb 8-1: SerialNumber: syz [ 232.861923][ T1023] usb 8-1: config 0 descriptor?? [ 232.869214][ T1023] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 232.871556][ T1023] dvb-usb: bulk message failed: -22 (2/0) [ 232.877026][ T1023] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.880420][ T1023] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 232.883370][ T1023] usb 8-1: media controller created [ 232.898063][ T1023] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.074538][ T1023] cxusb: set interface failed [ 233.076606][ T1023] dvb-usb: bulk message failed: -22 (1/0) [ 233.097708][ T1023] DVB: Unable to find symbol mt352_attach() [ 233.100311][ T1023] dvb-usb: bulk message failed: -22 (5/0) [ 233.102603][ T1023] zl10353_read_register: readreg error (reg=127, ret==-121) [ 233.105776][ T1023] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 233.154019][ T1023] rc_core: IR keymap rc-dvico-mce not found [ 233.156003][ T1023] Registered IR keymap rc-empty [ 233.158193][ T1023] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 233.163193][ T1023] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input31 [ 233.179995][ T1023] dvb-usb: schedule remote query interval to 100 msecs. [ 233.182205][ T1023] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 233.194469][ T1023] usb 8-1: USB disconnect, device number 21 [ 233.237652][ T1023] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 233.274517][ T7692] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 233.404065][ T7692] usb 5-1: device descriptor read/64, error -71 [ 233.654014][ T7692] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 233.804048][ T7692] usb 5-1: device descriptor read/64, error -71 [ 233.914108][ T7692] usb usb5-port1: attempt power cycle [ 233.993972][T17786] random: crng reseeded on system resumption [ 234.016203][T17786] team_slave_0: entered promiscuous mode [ 234.019063][T17786] team_slave_1: entered promiscuous mode [ 234.022850][T17786] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 234.119130][ T40] kauditd_printk_skb: 322 callbacks suppressed [ 234.119140][ T40] audit: type=1400 audit(490.030:2094): avc: denied { read write } for pid=12784 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.129786][ T40] audit: type=1400 audit(490.030:2095): avc: denied { open } for pid=12784 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.138574][ T40] audit: type=1400 audit(490.030:2096): avc: denied { ioctl } for pid=12784 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.161321][ T40] audit: type=1400 audit(490.070:2097): avc: denied { read write } for pid=17797 comm="syz.3.2842" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.170979][ T40] audit: type=1400 audit(490.080:2098): avc: denied { open } for pid=17797 comm="syz.3.2842" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.178948][ T40] audit: type=1400 audit(490.080:2099): avc: denied { ioctl } for pid=17797 comm="syz.3.2842" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.264033][ T7692] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 234.273028][ T40] audit: type=1400 audit(490.180:2100): avc: denied { create } for pid=17805 comm="syz.4.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.281184][ T40] audit: type=1400 audit(490.180:2101): avc: denied { ioctl } for pid=17805 comm="syz.4.2844" path="socket:[64315]" dev="sockfs" ino=64315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.284642][ T7692] usb 5-1: device descriptor read/8, error -71 [ 234.291147][ T40] audit: type=1400 audit(490.200:2102): avc: denied { setopt } for pid=17805 comm="syz.4.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.327430][ T40] audit: type=1400 audit(490.240:2103): avc: denied { read } for pid=17807 comm="syz.4.2845" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 234.363815][T17812] Failed to initialize the IGMP autojoin socket (err -2) [ 234.365036][T17809] Failed to initialize the IGMP autojoin socket (err -2) [ 234.534571][ T7692] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 234.554426][ T7692] usb 5-1: device descriptor read/8, error -71 [ 234.674313][ T7692] usb usb5-port1: unable to enumerate USB device [ 234.730039][T17855] /dev/loop3: Can't open blockdev [ 234.796023][ T1023] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 234.889014][T17866] bond0: entered promiscuous mode [ 234.891118][T17866] bond_slave_0: entered promiscuous mode [ 234.893596][T17866] @0: entered promiscuous mode [ 234.895958][T17866] bond1: entered promiscuous mode [ 234.944547][ T1023] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 234.955086][ T1023] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.958864][ T1023] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.963186][ T1023] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.967072][ T1023] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.970759][ T1023] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.974670][ T1023] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.978295][ T1023] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.982089][ T1023] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.987478][ T1023] usb 10-1: config 0 interface 0 has no altsetting 0 [ 234.991338][ T1023] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.994568][ T1023] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.999018][ T1023] usb 10-1: config 0 interface 0 has no altsetting 0 [ 235.002650][ T1023] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.006346][ T1023] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.010825][ T1023] usb 10-1: config 0 interface 0 has no altsetting 0 [ 235.013812][ T1023] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.017480][ T1023] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.021960][ T1023] usb 10-1: config 0 interface 0 has no altsetting 0 [ 235.026004][ T1023] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.029670][ T1023] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.033280][ T1023] usb 10-1: config 0 interface 0 has no altsetting 0 [ 235.037194][ T1023] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.040941][ T1023] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.045726][ T1023] usb 10-1: config 0 interface 0 has no altsetting 0 [ 235.050635][ T1023] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 235.054436][ T1023] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 235.057901][ T1023] usb 10-1: Product: syz [ 235.059736][ T1023] usb 10-1: Manufacturer: syz [ 235.061740][ T1023] usb 10-1: SerialNumber: syz [ 235.067625][ T1023] usb 10-1: config 0 descriptor?? [ 235.075090][ T1023] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 235.188299][T17883] binder: 17882:17883 ioctl aead 0 returned -22 [ 235.241806][T17884] __nla_validate_parse: 13 callbacks suppressed [ 235.241818][T17884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2865'. [ 235.246692][T17884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2865'. [ 235.281482][ T5998] usb 10-1: USB disconnect, device number 3 [ 235.286641][ T5998] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 235.299337][T17895] input: syz1 as /devices/virtual/input/input32 [ 235.314452][T17901] devtmpfs: Cannot change global quota limit on remount [ 235.494145][ T60] net_ratelimit: 35 callbacks suppressed [ 235.494158][ T60] bond1: (slave lo): failed to get link speed/duplex [ 235.614258][ T60] bond1: (slave lo): failed to get link speed/duplex [ 235.724111][ T60] bond1: (slave lo): failed to get link speed/duplex [ 235.834483][ T46] bond1: (slave lo): failed to get link speed/duplex [ 235.965024][ T46] bond1: (slave lo): failed to get link speed/duplex [ 236.077617][T17965] bond1: (slave lo): failed to get link speed/duplex [ 236.224523][T17996] validate_nla: 45 callbacks suppressed [ 236.224539][T17996] netlink: 'syz.5.2885': attribute type 8 has an invalid length. [ 236.232878][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'. [ 236.242657][T17996] bond0: entered promiscuous mode [ 236.245223][T17996] bond_slave_0: entered promiscuous mode [ 236.247711][T17996] bond_slave_1: entered promiscuous mode [ 236.251495][T17996] gretap0: entered promiscuous mode [ 236.274291][T17996] bond0: left promiscuous mode [ 236.276382][T17996] bond_slave_0: left promiscuous mode [ 236.276968][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2885'. [ 236.278605][T17996] bond_slave_1: left promiscuous mode [ 236.294462][T17996] gretap0: left promiscuous mode [ 236.308224][T18017] macvtap1: entered promiscuous mode [ 236.310066][T18017] macvtap1: entered allmulticast mode [ 236.312109][T18017] team0: Device macvtap1 is already an upper device of the team interface [ 236.324512][T17960] bond1: (slave lo): failed to get link speed/duplex [ 236.484170][ T12] bond1: (slave lo): failed to get link speed/duplex [ 236.594048][ T12] bond1: (slave lo): failed to get link speed/duplex [ 236.597984][T18062] nvme_fabrics: unknown parameter or missing value 'ELF9' in ctrl creation request [ 236.603081][T18062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18062 comm=syz.0.2894 [ 236.690969][T18079] overlayfs: conflicting lowerdir path [ 236.704169][T18040] bond1: (slave lo): failed to get link speed/duplex [ 236.772980][T18086] netlink: 'syz.5.2901': attribute type 1 has an invalid length. [ 236.805967][T18086] bond1: (slave gretap1): making interface the new active one [ 236.810001][T18086] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 236.815663][T18125] nfs4: Unknown parameter '' [ 236.817016][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2901'. [ 236.869360][T18128] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2901'. [ 236.890855][T18086] bond1 (unregistering): (slave gretap1): Releasing active interface [ 236.899298][T18086] bond1 (unregistering): Released all slaves [ 237.035109][T18177] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 237.037407][T18177] ALSA: mixer_oss: invalid index 1374389 [ 237.143167][T18190] binder: 18189:18190 ioctl 3b87 2000000000c0 returned -22 [ 237.182429][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'. [ 237.255780][T18204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22288 sclass=netlink_route_socket pid=18204 comm=syz.4.2917 [ 237.462854][T18233] 9pnet_virtio: no channels available for device syz [ 237.521191][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.528705][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.532705][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.538352][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.541751][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.568663][T18238] Failed to initialize the IGMP autojoin socket (err -2) [ 237.611953][T18248] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 237.776857][T18238] chnl_net:caif_netlink_parms(): no params data found [ 237.850803][T15825] bond0: (slave syz_tun): Releasing backup interface [ 237.855227][T15825] syz_tun (unregistering): left promiscuous mode [ 237.857905][T15825] syz_tun (unregistering): left allmulticast mode [ 237.939794][T18347] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2933'. [ 237.966441][T18347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29514 sclass=netlink_route_socket pid=18347 comm=syz.5.2933 [ 238.018280][T18365] netlink: 'syz.5.2934': attribute type 2 has an invalid length. [ 238.021467][T18238] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.023705][T18238] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.026071][T18238] bridge_slave_0: entered allmulticast mode [ 238.027230][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 238.029032][T18238] bridge_slave_0: entered promiscuous mode [ 238.031655][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 238.036518][T18238] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.040740][T18238] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.043810][T18238] bridge_slave_1: entered allmulticast mode [ 238.047283][T18238] bridge_slave_1: entered promiscuous mode [ 238.150084][T18238] team0: Port device team_slave_0 added [ 238.162981][T18238] team0: Port device team_slave_1 added [ 238.195515][T18238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.198502][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.208410][T18238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.215617][T18238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.217937][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.226286][T18238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.296856][T18238] hsr_slave_0: entered promiscuous mode [ 238.299128][T18238] hsr_slave_1: entered promiscuous mode [ 238.307456][T18238] debugfs: 'hsr0' already exists in 'hsr' [ 238.309269][T18238] Cannot create hsr debugfs directory [ 238.532538][T18238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.537018][T18238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 238.540262][T18238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.609660][T18617] gfs2: error -5 reading superblock [ 238.654382][T18238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.657870][T18238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 238.661054][T18238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.755337][T18238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.759327][T18238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 238.763331][T18238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.784540][T18639] netlink: 'syz.5.2950': attribute type 1 has an invalid length. [ 238.801793][T18639] bond1: entered promiscuous mode [ 238.805707][T18639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.826511][T18639] bond1: (slave bridge1): making interface the new active one [ 238.829449][T18639] bridge1: entered promiscuous mode [ 238.832388][T18639] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 238.880941][T18238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.886595][T18238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 238.890908][T18238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.107335][T18238] netdevsim netdevsim0 netdevsim0: renamed from eth10 [ 239.121158][T18238] netdevsim netdevsim0 netdevsim1: renamed from eth11 [ 239.129541][T18238] netdevsim netdevsim0 netdevsim2: renamed from eth12 [ 239.134674][T18238] netdevsim netdevsim0 netdevsim3: renamed from eth13 [ 239.222751][T18748] netlink: 'syz.5.2956': attribute type 1 has an invalid length. [ 239.245951][T18748] bond2: entered promiscuous mode [ 239.247793][T18748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.301639][T18238] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.314412][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 239.341530][T18045] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.344603][T18045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.360310][T18043] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.363344][T18043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.399477][ T40] kauditd_printk_skb: 366 callbacks suppressed [ 239.399486][ T40] audit: type=1400 audit(495.310:2470): avc: denied { create } for pid=18836 comm="syz.5.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.403201][T18842] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 239.411964][ T40] audit: type=1400 audit(495.310:2471): avc: denied { watch watch_reads } for pid=18836 comm="syz.5.2958" path="/79" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 239.419751][ T40] audit: type=1400 audit(495.310:2472): avc: denied { mac_admin } for pid=18836 comm="syz.5.2958" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.432454][ T40] audit: type=1400 audit(495.320:2473): avc: denied { relabelto } for pid=18836 comm="syz.5.2958" name="79" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 239.441578][ T40] audit: type=1400 audit(495.320:2474): avc: denied { associate } for pid=18836 comm="syz.5.2958" name="79" dev="tmpfs" ino=442 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 239.454668][ T40] audit: type=1400 audit(495.370:2475): avc: denied { remove_name } for pid=16180 comm="syz-executor" name="binderfs" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 239.463692][ T40] audit: type=1400 audit(495.370:2476): avc: denied { rmdir } for pid=16180 comm="syz-executor" name="79" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 239.473599][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 239.479207][ T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.482420][ T29] usb 9-1: config 1 has no interfaces? [ 239.484618][ T29] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 239.488215][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.512432][ T40] audit: type=1400 audit(495.420:2477): avc: denied { module_request } for pid=18238 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 239.579267][ T40] audit: type=1400 audit(495.490:2478): avc: denied { create } for pid=18885 comm="syz.5.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.587696][ T40] audit: type=1400 audit(495.500:2479): avc: denied { ioctl } for pid=18885 comm="syz.5.2960" path="socket:[69798]" dev="sockfs" ino=69798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.605989][ T5945] Bluetooth: hci2: command tx timeout [ 239.620688][T18238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.696871][T18706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.699816][T18706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.713728][T18238] veth0_vlan: entered promiscuous mode [ 239.716221][T18924] db51686b0: renamed from lo (while UP) [ 239.723101][T18238] veth1_vlan: entered promiscuous mode [ 239.790155][T18238] veth0_macvtap: entered promiscuous mode [ 239.807376][T18238] veth1_macvtap: entered promiscuous mode [ 239.858192][T18238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.886330][T18238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.924967][T18238] wireguard: wg0: Could not create IPv4 socket [ 239.928515][T18238] wireguard: wg1: Could not create IPv4 socket [ 239.931869][T18238] wireguard: wg2: Could not create IPv4 socket [ 240.257917][T19050] __nla_validate_parse: 9 callbacks suppressed [ 240.258006][T19050] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2970'. [ 240.336196][T19059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 240.554098][T18038] net_ratelimit: 24 callbacks suppressed [ 240.554114][T18038] bond1: (slave lo): failed to get link speed/duplex [ 240.569935][T19073] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2974'. [ 240.623857][T19080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2976'. [ 240.652597][T19082] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 240.664677][T18045] bond1: (slave lo): failed to get link speed/duplex [ 240.774502][T18038] bond1: (slave lo): failed to get link speed/duplex [ 240.885065][T18045] bond1: (slave lo): failed to get link speed/duplex [ 240.994475][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 241.000686][T19095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2983'. [ 241.060663][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 241.104231][ T12] bond1: (slave lo): failed to get link speed/duplex [ 241.215933][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 241.324141][ T12] bond1: (slave lo): failed to get link speed/duplex [ 241.434145][ T12] bond1: (slave lo): failed to get link speed/duplex [ 241.530546][T19126] fuse: Unknown parameter 'group_d' [ 241.544050][T18043] bond1: (slave lo): failed to get link speed/duplex [ 241.647261][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 241.763520][T19137] tmpfs: Unknown parameter '.' [ 241.853245][T19142] sg_write: data in/out 1818846731/175 bytes for SCSI command 0xc5-- guessing data in; [ 241.853245][T19142] program syz.3.2994 not setting count and/or reply_len properly [ 242.046133][ T6019] usb 9-1: USB disconnect, device number 3 [ 242.082267][T19169] SELinux: policydb version 56132436 does not match my version range 15-35 [ 242.082607][T19167] overlayfs: missing 'workdir' [ 242.090008][T19169] SELinux: failed to load policy [ 242.349213][T19197] could not open pipe file descriptor [ 242.382472][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3011'. [ 242.385432][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3011'. [ 242.388245][T19200] netlink: 'syz.4.3011': attribute type 12 has an invalid length. [ 242.441068][T19205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=19205 comm=syz.4.3013 [ 242.499304][T19217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'. [ 242.519217][T19220] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3019'. [ 243.248966][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.253216][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.256998][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.261319][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.264167][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.280446][T19260] Failed to initialize the IGMP autojoin socket (err -2) [ 243.685490][T19305] tipc: Started in network mode [ 243.687077][T19305] tipc: Node identity 02065c5ba9ca, cluster identity 4711 [ 243.689419][T19305] tipc: Enabled bearer , priority 0 [ 243.747949][T19305] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 243.751193][T19305] syzkaller0: entered promiscuous mode [ 243.753302][T19305] syzkaller0: entered allmulticast mode [ 243.761266][T19305] tipc: Resetting bearer [ 243.765118][T19304] tipc: Resetting bearer [ 243.774732][T19304] tipc: Disabling bearer [ 243.847176][T19318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=19318 comm=syz.5.3033 [ 243.895855][T19324] fuse: Unknown parameter 'froup_id' [ 244.001278][T19338] IPv6: Can't replace route, no match found [ 244.033997][ T6019] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 244.214523][ T6019] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 244.218313][ T6019] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 244.221665][ T6019] usb 8-1: Product: syz [ 244.223449][ T6019] usb 8-1: Manufacturer: syz [ 244.229808][T19355] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1298 sclass=netlink_xfrm_socket pid=19355 comm=syz.5.3042 [ 244.232996][ T6019] usb 8-1: SerialNumber: syz [ 244.240275][ T6019] usb 8-1: config 0 descriptor?? [ 244.246020][ T6019] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 244.249035][ T6019] dvb-usb: bulk message failed: -22 (2/0) [ 244.253069][ T6019] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.258874][ T6019] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 244.262549][ T6019] usb 8-1: media controller created [ 244.274516][ T6019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.445184][ T40] kauditd_printk_skb: 225 callbacks suppressed [ 244.445200][ T40] audit: type=1400 audit(500.360:2705): avc: denied { append } for pid=19312 comm="syz.3.3032" name="i2c-2" dev="devtmpfs" ino=3363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.456701][T19313] dvb-usb: bulk message failed: -22 (4/0) [ 244.459026][T19313] cxusb: i2c read failed [ 244.461017][ T6019] cxusb: set interface failed [ 244.464033][ T6019] dvb-usb: bulk message failed: -22 (1/0) [ 244.487243][ T6019] DVB: Unable to find symbol mt352_attach() [ 244.489557][ T6019] dvb-usb: bulk message failed: -22 (5/0) [ 244.491520][ T6019] zl10353_read_register: readreg error (reg=127, ret==-121) [ 244.494016][ T6019] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 244.544008][ T6019] rc_core: IR keymap rc-dvico-mce not found [ 244.544080][ T837] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 244.546059][ T6019] Registered IR keymap rc-empty [ 244.550958][ T6019] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 244.555382][ T6019] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input35 [ 244.559603][ T40] audit: type=1400 audit(500.470:2706): avc: denied { read } for pid=5326 comm="acpid" name="event4" dev="devtmpfs" ino=3367 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.560296][ T6019] dvb-usb: schedule remote query interval to 100 msecs. [ 244.568103][ T40] audit: type=1400 audit(500.470:2707): avc: denied { open } for pid=5326 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3367 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.570400][ T6019] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 244.578335][ T40] audit: type=1400 audit(500.480:2708): avc: denied { ioctl } for pid=5326 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3367 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.582590][ T6019] usb 8-1: USB disconnect, device number 22 [ 244.615944][ T6019] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 244.693986][ T837] usb 9-1: Using ep0 maxpacket: 32 [ 244.698089][ T837] usb 9-1: unable to get BOS descriptor or descriptor too short [ 244.701437][ T837] usb 9-1: config 255 has an invalid interface number: 81 but max is 0 [ 244.707212][ T837] usb 9-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 244.710447][ T837] usb 9-1: config 255 has no interface number 0 [ 244.712766][ T837] usb 9-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 244.716519][ T837] usb 9-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.719985][ T837] usb 9-1: config 255 interface 81 has no altsetting 0 [ 244.724799][ T837] usb 9-1: string descriptor 0 read error: -22 [ 244.726798][ T837] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 244.730215][ T837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.743985][ T837] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:255.81/input/input36 [ 244.777631][ T40] audit: type=1400 audit(500.690:2709): avc: denied { ioctl } for pid=5326 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3375 ioctlcmd=0x4521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.937484][ T40] audit: type=1400 audit(500.850:2710): avc: denied { read append } for pid=19365 comm="syz.4.3045" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 244.947840][ T40] audit: type=1400 audit(500.870:2711): avc: denied { open } for pid=19365 comm="syz.4.3045" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 244.969526][ T40] audit: type=1400 audit(500.880:2712): avc: denied { create } for pid=19260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.971778][T19260] netdevsim netdevsim0 netdevsim0: renamed from eth10 [ 244.977136][ T40] audit: type=1400 audit(500.880:2713): avc: denied { write } for pid=19260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.987462][ T40] audit: type=1400 audit(500.880:2714): avc: denied { read } for pid=19260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.991776][T19260] netdevsim netdevsim0 netdevsim1: renamed from eth11 [ 245.016278][ T837] usb 9-1: USB disconnect, device number 4 [ 245.017262][T19260] netdevsim netdevsim0 netdevsim2: renamed from eth12 [ 245.022928][T19426] debugfs: 'ttyS3' already exists in 'caif_serial' [ 245.059097][T19260] netdevsim netdevsim0 netdevsim3: renamed from eth13 [ 245.171875][T19469] tipc: MTU too low for tipc bearer [ 245.295756][ T5939] Bluetooth: hci0: command tx timeout [ 245.296607][T19260] wireguard: wg0: Could not create IPv4 socket [ 245.301457][T19260] wireguard: wg1: Could not create IPv4 socket [ 245.309697][T19260] wireguard: wg2: Could not create IPv4 socket [ 245.326245][T19481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19481 comm=syz.5.3052 [ 245.452710][T19506] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 245.624724][ T1257] net_ratelimit: 35 callbacks suppressed [ 245.624737][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 245.735134][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 245.846172][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 245.965815][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 246.020360][T19535] __nla_validate_parse: 5 callbacks suppressed [ 246.020434][T19535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3062'. [ 246.074943][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 246.194314][ T46] bond1: (slave lo): failed to get link speed/duplex [ 246.274241][T19545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19545 comm=syz.5.3064 [ 246.304162][ T46] bond1: (slave lo): failed to get link speed/duplex [ 246.424189][ T46] bond1: (slave lo): failed to get link speed/duplex [ 246.526331][T19567] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 246.529383][T19567] overlayfs: failed to set xattr on upper [ 246.531833][T19567] overlayfs: ...falling back to redirect_dir=nofollow. [ 246.534938][T19567] overlayfs: ...falling back to index=off. [ 246.537534][T19567] overlayfs: ...falling back to uuid=null. [ 246.544158][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 246.545280][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 246.564106][ T29] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 246.654306][ T8240] bond1: (slave lo): failed to get link speed/duplex [ 246.716019][ T29] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 246.720642][ T29] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.725435][ T29] usb 10-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 246.730649][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 246.733364][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 246.737391][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.745148][ T29] usb 10-1: config 0 descriptor?? [ 246.748075][T19551] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.953640][T19551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.957753][T19551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.962076][ T29] usbhid 10-1:0.0: can't add hid device: -71 [ 246.969782][ T29] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 246.976933][ T29] usb 10-1: USB disconnect, device number 4 [ 247.045684][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3076'. [ 247.049643][T19601] cifs: Unknown parameter 'cache?no{e' [ 247.051677][T19601] CIFS mount error: No usable UNC path provided in device string! [ 247.051677][T19601] [ 247.055977][T19601] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 247.364049][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 247.364119][ T5939] Bluetooth: hci0: command 0x041b tx timeout [ 247.442117][T19616] md: could not open device unknown-block(0,0). [ 247.442197][T19616] md: md_import_device returned -6 [ 247.484319][ T29] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 247.517030][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.517060][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.517090][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.517109][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.520650][T19606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 247.543856][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.644053][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 247.645827][ T29] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.649946][ T29] usb 10-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 247.649972][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 247.650002][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 247.662062][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.674507][ T29] usb 10-1: config 0 descriptor?? [ 247.678817][ T29] hub 10-1:0.0: bad descriptor, ignoring hub [ 247.678838][ T29] hub 10-1:0.0: probe with driver hub failed with error -5 [ 247.772828][ T10] usb 8-1: USB disconnect, device number 23 [ 248.089041][ T29] plantronics 0003:047F:C055.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.5-1/input0 [ 248.213047][T19681] Failed to initialize the IGMP autojoin socket (err -2) [ 248.356573][T19689] lo: MTU too low for tipc bearer [ 248.358803][T19689] tipc: Enabling of bearer rejected, failed to enable media [ 248.459293][ T29] usb 10-1: USB disconnect, device number 5 [ 249.054548][T19735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3090'. [ 249.064097][T19736] evm: overlay not supported [ 249.152994][T19746] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3092'. [ 249.157252][T19746] unsupported nlmsg_type 40 [ 249.244771][ T1023] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 249.414758][ T1023] usb 8-1: Using ep0 maxpacket: 8 [ 249.417915][ T1023] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 249.420541][ T1023] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.423531][ T1023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.426831][ T1023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.429966][ T1023] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.434009][ T1023] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.437960][ T1023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.504928][ T40] kauditd_printk_skb: 200 callbacks suppressed [ 249.504939][ T40] audit: type=1400 audit(505.420:2915): avc: denied { mounton } for pid=19767 comm="syz.5.3098" path="/128/file0" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.516961][ T40] audit: type=1400 audit(505.430:2916): avc: denied { watch } for pid=19767 comm="syz.5.3098" path="/128/control" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 249.568637][ T40] audit: type=1400 audit(505.480:2917): avc: denied { create } for pid=19774 comm="syz.5.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.575407][ T40] audit: type=1400 audit(505.490:2918): avc: denied { ioctl } for pid=19774 comm="syz.5.3099" path="socket:[73751]" dev="sockfs" ino=73751 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.612623][ T40] audit: type=1400 audit(505.520:2919): avc: denied { read write } for pid=19776 comm="syz.5.3100" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.621174][ T40] audit: type=1400 audit(505.530:2920): avc: denied { open } for pid=19776 comm="syz.5.3100" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.630106][ T40] audit: type=1400 audit(505.530:2921): avc: denied { create } for pid=19776 comm="syz.5.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 249.637793][ T40] audit: type=1400 audit(505.530:2922): avc: denied { setopt } for pid=19776 comm="syz.5.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 249.637934][T19777] netlink: 'syz.5.3100': attribute type 3 has an invalid length. [ 249.643710][ T40] audit: type=1400 audit(505.530:2923): avc: denied { read } for pid=19776 comm="syz.5.3100" dev="nsfs" ino=4026532877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 249.655120][ T1023] usb 8-1: usb_control_msg returned -32 [ 249.657477][ T1023] usbtmc 8-1:16.0: can't read capabilities [ 249.664293][ T40] audit: type=1400 audit(505.530:2924): avc: denied { open } for pid=19776 comm="syz.5.3100" path="net:[4026532877]" dev="nsfs" ino=4026532877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 249.837809][T19793] binder: 19792:19793 ioctl c0189373 200000000540 returned -22 [ 250.006617][T19806] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 250.143997][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 250.235454][T19813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3108'. [ 250.305285][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 250.307855][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 250.310912][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 250.314731][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.317585][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.320170][ T10] usb 9-1: Product: syz [ 250.322333][ T10] usb 9-1: Manufacturer: syz [ 250.324629][ T10] usb 9-1: SerialNumber: syz [ 250.341237][ T10] usb 9-1: config 0 descriptor?? [ 250.345699][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 250.348246][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 250.353674][ T10] usb 9-1: selecting invalid altsetting 0 [ 250.413546][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.419233][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.423075][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.428987][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.432686][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.457555][T19826] Failed to initialize the IGMP autojoin socket (err -2) [ 250.684552][ T12] net_ratelimit: 35 callbacks suppressed [ 250.684569][ T12] bond1: (slave lo): failed to get link speed/duplex [ 250.824001][T18047] bond1: (slave lo): failed to get link speed/duplex [ 250.834015][ T5998] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 250.934155][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 250.964034][ T5998] usb 10-1: device descriptor read/64, error -71 [ 251.015862][T19826] netdevsim netdevsim0 netdevsim0: renamed from eth10 [ 251.021295][T19826] netdevsim netdevsim0 netdevsim1: renamed from eth11 [ 251.029929][T19826] netdevsim netdevsim0 netdevsim2: renamed from eth12 [ 251.035837][T19826] netdevsim netdevsim0 netdevsim3: renamed from eth13 [ 251.044609][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 251.153983][T17960] bond1: (slave lo): failed to get link speed/duplex [ 251.214095][ T5998] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 251.244126][T19800] usb 9-1: reset high-speed USB device number 5 using dummy_hcd [ 251.252816][T19826] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 251.261344][T19826] wireguard: wg0: Could not create IPv4 socket [ 251.267283][T19826] wireguard: wg1: Could not create IPv4 socket [ 251.271915][T19826] wireguard: wg2: Could not create IPv4 socket [ 251.314065][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 251.354297][ T5998] usb 10-1: device descriptor read/64, error -71 [ 251.434140][ T99] bond1: (slave lo): failed to get link speed/duplex [ 251.464324][ T5998] usb usb10-port1: attempt power cycle [ 251.544056][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 251.654307][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 251.804428][ T5998] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 251.824624][ T5998] usb 10-1: device descriptor read/8, error -71 [ 251.988865][ T141] usb 8-1: USB disconnect, device number 24 [ 252.074298][ T5998] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 252.096608][ T5998] usb 10-1: device descriptor read/8, error -71 [ 252.166083][T19875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.170584][T19875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.204432][ T5998] usb usb10-port1: unable to enumerate USB device [ 252.358779][T19965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3120'. [ 252.454564][T19965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3120'. [ 253.206300][ T141] usb 9-1: USB disconnect, device number 5 [ 253.212631][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3124'. [ 253.219684][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3124'. [ 253.222709][T19985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3124'. [ 253.235441][T19986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7168 sclass=netlink_route_socket pid=19986 comm=syz.4.3124 [ 253.235461][T19985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7168 sclass=netlink_route_socket pid=19985 comm=syz.4.3124 [ 253.557683][T20015] team0: Device gtp0 is up. Set it down before adding it as a team port [ 253.630980][T20029] 9pnet_fd: p9_fd_create_tcp (20029): problem creating socket [ 253.653238][T20029] overlay: ./file0 is not a directory [ 253.749862][T20048] netlink: 'syz.5.3135': attribute type 3 has an invalid length. [ 253.752353][T20048] netlink: 'syz.5.3135': attribute type 1 has an invalid length. [ 253.754860][T20048] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3135'. [ 253.772173][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 254.034038][ T141] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 254.184089][ T29] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 254.194011][ T141] usb 10-1: Using ep0 maxpacket: 16 [ 254.197245][ T141] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 254.202002][ T141] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.205941][ T141] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.208794][ T141] usb 10-1: Product: syz [ 254.210345][ T141] usb 10-1: Manufacturer: syz [ 254.211995][ T141] usb 10-1: SerialNumber: syz [ 254.215505][ T141] usb 10-1: config 0 descriptor?? [ 254.219005][ T141] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 254.221975][ T141] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 254.335354][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.338394][ T29] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.341395][ T29] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.347474][ T29] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.350445][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.352974][ T29] usb 9-1: Product: syz [ 254.354401][ T29] usb 9-1: Manufacturer: syz [ 254.355930][ T29] usb 9-1: SerialNumber: syz [ 254.364564][ T29] hub 9-1:1.0: bad descriptor, ignoring hub [ 254.366478][ T29] hub 9-1:1.0: probe with driver hub failed with error -5 [ 254.560865][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 254.560877][ T40] audit: type=1400 audit(510.470:3077): avc: denied { create } for pid=20083 comm="syz.3.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.571629][ T29] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 254.590220][ T40] audit: type=1400 audit(510.500:3078): avc: denied { open } for pid=20088 comm="syz.3.3145" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 254.597547][ T40] audit: type=1400 audit(510.500:3079): avc: denied { ioctl } for pid=20088 comm="syz.3.3145" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 254.605482][ T40] audit: type=1400 audit(510.510:3080): avc: denied { mounton } for pid=20088 comm="syz.3.3145" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 254.617221][ T40] audit: type=1400 audit(510.530:3081): avc: denied { read } for pid=20090 comm="syz.3.3146" path="socket:[72334]" dev="sockfs" ino=72334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.668546][ T40] audit: type=1400 audit(510.580:3082): avc: denied { setopt } for pid=20090 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.675742][ T40] audit: type=1400 audit(510.590:3083): avc: denied { getopt } for pid=20090 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.678904][T20091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3146'. [ 254.681700][ T46] failed while handling packet from 1:16384 [ 254.684033][ T40] audit: type=1400 audit(510.590:3084): avc: denied { create } for pid=20090 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.684071][ T40] audit: type=1400 audit(510.590:3085): avc: denied { connect } for pid=20090 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.684105][ T40] audit: type=1400 audit(510.590:3086): avc: denied { write } for pid=20090 comm="syz.3.3146" path="socket:[72336]" dev="sockfs" ino=72336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.803227][T20097] netfs: Couldn't get user pages (rc=-14) [ 254.826371][ T141] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 255.192001][T20126] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 255.195038][T20126] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 255.200086][T20126] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 255.207204][T20068] usb 9-1: reset high-speed USB device number 6 using dummy_hcd [ 255.233100][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3153'. [ 255.293369][ T141] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 255.298260][ T141] em28xx 10-1:0.0: board has no eeprom [ 255.574034][ T141] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 255.575340][ T5998] usb 9-1: USB disconnect, device number 6 [ 255.580673][ T141] em28xx 10-1:0.0: dvb set to bulk mode. [ 255.583548][ T5935] em28xx 10-1:0.0: Binding DVB extension [ 255.744386][T18047] net_ratelimit: 35 callbacks suppressed [ 255.744405][T18047] bond1: (slave lo): failed to get link speed/duplex [ 255.776625][T20067] usblp0: removed [ 255.854154][T18047] bond1: (slave lo): failed to get link speed/duplex [ 255.964085][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 256.075090][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 256.185322][ T46] bond1: (slave lo): failed to get link speed/duplex [ 256.212576][ T6019] usb 10-1: USB disconnect, device number 10 [ 256.224534][ T6019] em28xx 10-1:0.0: Disconnecting em28xx [ 256.242041][ T5935] em28xx 10-1:0.0: Registering input extension [ 256.244331][ T6019] em28xx 10-1:0.0: Closing input extension [ 256.268742][ T6019] em28xx 10-1:0.0: Freeing device [ 256.287348][T20169] tipc: Started in network mode [ 256.288963][T20169] tipc: Node identity c6a6, cluster identity 4711 [ 256.294585][T20169] netlink: 'syz.5.3157': attribute type 1 has an invalid length. [ 256.295297][ T8240] bond1: (slave lo): failed to get link speed/duplex [ 256.298154][T20169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.310532][T20175] netlink: 'syz.4.3159': attribute type 2 has an invalid length. [ 256.316274][T20175] netlink: 'syz.4.3159': attribute type 1 has an invalid length. [ 256.320164][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.326368][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.329669][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.333793][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.341938][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.360793][T20176] Failed to initialize the IGMP autojoin socket (err -2) [ 256.404337][ T8240] bond1: (slave lo): failed to get link speed/duplex [ 256.534091][ T8240] bond1: (slave lo): failed to get link speed/duplex [ 256.550575][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 256.570248][T20219] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 257.029808][T20252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 257.033833][T20251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 257.038961][T20176] netdevsim netdevsim0 netdevsim0: renamed from eth10 [ 257.039247][T20252] GUP no longer grows the stack in syz.3.3168 (20252): 200000011000-200000018000 (20000000e000) [ 257.047070][T20252] CPU: 0 UID: 0 PID: 20252 Comm: syz.3.3168 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.047095][T20252] Tainted: [L]=SOFTLOCKUP [ 257.047101][T20252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.047111][T20252] Call Trace: [ 257.047124][T20252] [ 257.047131][T20252] dump_stack_lvl+0x16c/0x1f0 [ 257.047169][T20252] gup_vma_lookup+0x1d2/0x220 [ 257.047192][T20252] __get_user_pages+0x241/0x3590 [ 257.047221][T20252] ? find_held_lock+0x2b/0x80 [ 257.047247][T20252] ? __pfx___get_user_pages+0x10/0x10 [ 257.047276][T20252] get_user_pages_remote+0x243/0xab0 [ 257.047298][T20252] ? mas_new_root+0x600/0x6e0 [ 257.047319][T20252] ? __pfx_get_user_pages_remote+0x10/0x10 [ 257.047344][T20252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 257.047369][T20252] __access_remote_vm+0x24d/0x850 [ 257.047394][T20252] ? do_raw_spin_lock+0x12c/0x2b0 [ 257.047417][T20252] ? __pfx___access_remote_vm+0x10/0x10 [ 257.047444][T20252] proc_pid_cmdline_read+0x4de/0x8e0 [ 257.047471][T20252] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 257.047491][T20252] ? rw_verify_area+0xcf/0x6c0 [ 257.047512][T20252] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 257.047529][T20252] vfs_readv+0x5c1/0x8b0 [ 257.047553][T20252] ? __pfx_vfs_readv+0x10/0x10 [ 257.047572][T20252] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 257.047615][T20252] ? __fget_files+0x20e/0x3c0 [ 257.047644][T20252] ? do_preadv+0x1a6/0x270 [ 257.047662][T20252] do_preadv+0x1a6/0x270 [ 257.047681][T20252] ? __pfx_do_preadv+0x10/0x10 [ 257.047712][T20252] do_syscall_64+0xcd/0xf80 [ 257.047732][T20252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.047750][T20252] RIP: 0033:0x7fdffcb8f7c9 [ 257.047763][T20252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.047779][T20252] RSP: 002b:00007fdffdad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 257.047796][T20252] RAX: ffffffffffffffda RBX: 00007fdffcde6090 RCX: 00007fdffcb8f7c9 [ 257.047807][T20252] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003 [ 257.047817][T20252] RBP: 00007fdffcc13f91 R08: 0000000000006a76 R09: 0000000000000000 [ 257.047828][T20252] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 257.047838][T20252] R13: 00007fdffcde6128 R14: 00007fdffcde6090 R15: 00007fff6fd39e88 [ 257.047863][T20252] [ 257.054947][T20176] netdevsim netdevsim0 netdevsim1: renamed from eth11 [ 257.151899][T20176] netdevsim netdevsim0 netdevsim2: renamed from eth12 [ 257.159920][T20176] netdevsim netdevsim0 netdevsim3: renamed from eth13 [ 257.172653][T20186] overlayfs: statfs failed on './file0' [ 257.368958][T20292] __nla_validate_parse: 1 callbacks suppressed [ 257.368971][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3173'. [ 257.392313][T20176] wireguard: wg0: Could not create IPv4 socket [ 257.398302][T20176] wireguard: wg1: Could not create IPv4 socket [ 257.403053][T20176] wireguard: wg2: Could not create IPv4 socket [ 257.481465][T20311] hfsplus: unable to find HFS+ superblock [ 257.500704][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 257.548538][T20320] Failed to initialize the IGMP autojoin socket (err -2) [ 257.653653][T20342] netlink: 'syz.4.3183': attribute type 6 has an invalid length. [ 257.848209][T20362] netlink: 'syz.4.3185': attribute type 1 has an invalid length. [ 257.875927][T20362] bond2: entered promiscuous mode [ 257.878301][T20362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.889499][T20362] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.894828][T20362] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 257.898833][T20362] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 257.963972][ T6113] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 258.151524][ T6113] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.159758][ T6113] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.164005][ T6113] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.167662][ T6113] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.173239][T20351] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 258.181361][ T6113] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.392861][ T29] usb 10-1: USB disconnect, device number 11 [ 258.682732][T20492] syzkaller1: entered promiscuous mode [ 258.685141][T20492] syzkaller1: entered allmulticast mode [ 258.690888][T20492] netlink: 'syz.4.3197': attribute type 5 has an invalid length. [ 258.804287][T20502] No source specified [ 258.921834][T20521] can0: slcan on ttynull. [ 259.004698][T20535] nbd: must specify a device to reconfigure [ 259.046172][T20538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3207'. [ 259.113732][T20573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 259.174149][ T29] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 259.238938][T20586] 9pnet_virtio: no channels available for device syz [ 259.343642][T20593] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 259.350795][ T29] usb 9-1: config index 0 descriptor too short (expected 92, got 36) [ 259.353413][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.356660][ T29] usb 9-1: config 0 has no interfaces? [ 259.358394][ T29] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 259.361248][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.374895][ T29] usb 9-1: config 0 descriptor?? [ 259.406149][T20600] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=20600 comm=syz.5.3214 [ 259.579673][ T29] usb 9-1: string descriptor 0 read error: -71 [ 259.584628][ T29] usb 9-1: USB disconnect, device number 7 [ 259.596800][ T40] kauditd_printk_skb: 236 callbacks suppressed [ 259.596810][ T40] audit: type=1400 audit(515.510:3323): avc: denied { read } for pid=20622 comm="syz.5.3219" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 259.609481][ T40] audit: type=1400 audit(515.510:3324): avc: denied { open } for pid=20622 comm="syz.5.3219" path="/dev/usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 259.618802][ T40] audit: type=1400 audit(515.510:3325): avc: denied { write } for pid=20622 comm="syz.5.3219" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 259.619586][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3219'. [ 259.625774][ T40] audit: type=1400 audit(515.510:3326): avc: denied { open } for pid=20622 comm="syz.5.3219" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 259.625805][ T40] audit: type=1400 audit(515.510:3327): avc: denied { ioctl } for pid=20622 comm="syz.5.3219" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 259.625836][ T40] audit: type=1400 audit(515.530:3328): avc: denied { create } for pid=20622 comm="syz.5.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.657210][ T40] audit: type=1400 audit(515.570:3329): avc: denied { write } for pid=20622 comm="syz.5.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.661188][T20626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3219'. [ 259.666334][ T40] audit: type=1400 audit(515.570:3330): avc: denied { create } for pid=20622 comm="syz.5.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.675592][T20521] can0 (unregistered): slcan off ttynull. [ 259.679428][ T40] audit: type=1400 audit(515.570:3331): avc: denied { ioctl } for pid=20622 comm="syz.5.3219" path="socket:[75417]" dev="sockfs" ino=75417 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.690097][ T40] audit: type=1400 audit(515.570:3332): avc: denied { write } for pid=20622 comm="syz.5.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.866394][T20637] Failed to initialize the IGMP autojoin socket (err -2) [ 260.033263][T20642] batadv0: entered promiscuous mode [ 260.039640][T20642] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 260.043841][T20642] hsr1: entered promiscuous mode [ 260.054483][T20642] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 260.054998][T20637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3221'. [ 260.115623][T20647] sp0: Synchronizing with TNC [ 260.190087][T20657] loop5: detected capacity change from 0 to 7 [ 260.201627][ T9329] Dev loop5: unable to read RDB block 7 [ 260.206351][ T9329] loop5: unable to read partition table [ 260.208946][ T9329] loop5: partition table beyond EOD, truncated [ 260.226763][T20657] Dev loop5: unable to read RDB block 7 [ 260.229172][T20657] loop5: unable to read partition table [ 260.231736][T20657] loop5: partition table beyond EOD, truncated [ 260.243355][T20657] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 260.285390][T20672] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3230'. [ 260.374355][T20690] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3234'. [ 260.377908][T20690] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3234'. [ 260.495735][T20702] input: syz0 as /devices/virtual/input/input38 [ 260.607129][T20719] vlan2: entered promiscuous mode [ 260.608874][T20719] bridge0: entered promiscuous mode [ 260.650848][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.794133][ T12] net_ratelimit: 39 callbacks suppressed [ 260.794148][ T12] bond1: (slave lo): failed to get link speed/duplex [ 260.877306][T20751] usb usb7: usbfs: process 20751 (syz.5.3246) did not claim interface 2 before use [ 260.897525][T20754] netlink: 'syz.4.3247': attribute type 4 has an invalid length. [ 260.904198][T18047] bond1: (slave lo): failed to get link speed/duplex [ 261.014261][ T8240] bond1: (slave lo): failed to get link speed/duplex [ 261.028886][T20763] netlink: zone id is out of range [ 261.031100][T20763] netlink: zone id is out of range [ 261.033503][T20763] netlink: set zone limit has 8 unknown bytes [ 261.124237][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 261.234164][T18047] bond1: (slave lo): failed to get link speed/duplex [ 261.347548][T17960] bond1: (slave lo): failed to get link speed/duplex [ 261.454069][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 261.978706][T20819] ip6erspan0: entered promiscuous mode [ 262.075846][T20828] netlink: 'syz.4.3266': attribute type 10 has an invalid length. [ 262.208085][T20842] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 262.931052][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.935501][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.939768][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.943004][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.946885][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.972816][T20854] Failed to initialize the IGMP autojoin socket (err -2) [ 263.082741][T20901] __nla_validate_parse: 2 callbacks suppressed [ 263.082751][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3282'. [ 263.274151][ T5998] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 263.425517][ T5998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.429050][ T5998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.432162][ T5998] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.436549][ T5998] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.439649][ T5998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.444451][ T5998] usb 10-1: config 0 descriptor?? [ 263.517907][T20854] netdevsim netdevsim0 netdevsim0: renamed from eth10 [ 263.522549][T20854] netdevsim netdevsim0 netdevsim1: renamed from eth11 [ 263.538069][T20854] netdevsim netdevsim0 netdevsim2: renamed from eth12 [ 263.542536][T20854] netdevsim netdevsim0 netdevsim3: renamed from eth13 [ 263.631441][T20977] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.679087][T20854] wireguard: wg0: Could not create IPv4 socket [ 263.682139][T20854] wireguard: wg1: Could not create IPv4 socket [ 263.687293][T20854] wireguard: wg2: Could not create IPv4 socket [ 263.858369][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.861483][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.866084][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.868520][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.871643][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.875365][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.878558][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.881554][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.884705][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.887761][ T5998] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 263.900286][ T5998] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 264.001629][T21038] netlink: 'syz.3.3300': attribute type 1 has an invalid length. [ 264.005706][T21038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3300'. [ 264.051251][T21046] netlink: 'syz.4.3301': attribute type 10 has an invalid length. [ 264.058480][T21046] team0: Cannot enslave team device to itself [ 264.289006][T21066] tmpfs: Bad value for 'nr_inodes' [ 264.323287][T21068] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.384220][T21069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3311'. [ 264.467626][T21070] usb 10-1: language id specifier not provided by device, defaulting to English [ 264.628683][ T40] kauditd_printk_skb: 279 callbacks suppressed [ 264.628699][ T40] audit: type=1400 audit(520.540:3612): avc: denied { mounton } for pid=21072 comm="syz.4.3312" path="/273/file0" dev="tmpfs" ino=1448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.641063][ T40] audit: type=1400 audit(520.540:3613): avc: denied { mount } for pid=21072 comm="syz.4.3312" name="/" dev="9p" ino=71827767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 264.683006][ T40] audit: type=1400 audit(520.590:3614): avc: denied { mount } for pid=21072 comm="syz.4.3312" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 264.757419][ T40] audit: type=1400 audit(520.670:3615): avc: denied { module_request } for pid=21072 comm="syz.4.3312" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 265.165077][ T40] audit: type=1400 audit(521.080:3616): avc: denied { unmount } for pid=12784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 265.176944][ T40] audit: type=1400 audit(521.090:3617): avc: denied { unmount } for pid=12784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 265.187974][ T40] audit: type=1400 audit(521.100:3618): avc: denied { read write } for pid=12784 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.197962][ T40] audit: type=1400 audit(521.100:3619): avc: denied { open } for pid=12784 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.208091][ T40] audit: type=1400 audit(521.100:3620): avc: denied { ioctl } for pid=12784 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.217813][ T40] audit: type=1400 audit(521.130:3621): avc: denied { read } for pid=21081 comm="syz.3.3313" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 265.567032][T21114] 9pnet_fd: Insufficient options for proto=fd [ 265.575821][T21116] netlink: 396 bytes leftover after parsing attributes in process `syz.4.3322'. [ 265.616047][T21118] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3323'. [ 265.894070][T17960] net_ratelimit: 39 callbacks suppressed [ 265.894083][T17960] bond1: (slave lo): failed to get link speed/duplex [ 265.934030][ T5935] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 266.004375][ T8240] bond1: (slave lo): failed to get link speed/duplex [ 266.064014][ T5935] usb 9-1: device descriptor read/64, error -71 [ 266.068447][T21142] openvswitch: netlink: Missing valid actions attribute. [ 266.071497][T21142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.114175][ T46] bond1: (slave lo): failed to get link speed/duplex [ 266.159745][T21146] Invalid source name [ 266.159789][T21145] Invalid source name [ 266.161585][T21146] UBIFS error (pid: 21146): cannot open "ubifs", error -22 [ 266.163371][T21145] UBIFS error (pid: 21145): cannot open "ubifs", error -22 [ 266.224041][ T46] bond1: (slave lo): failed to get link speed/duplex [ 266.291077][T21152] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 266.305253][ T29] usb 10-1: USB disconnect, device number 12 [ 266.305323][ T5935] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 266.354544][ T46] bond1: (slave lo): failed to get link speed/duplex [ 266.411404][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3335'. [ 266.444405][ T5935] usb 9-1: device descriptor read/64, error -71 [ 266.449201][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3336'. [ 266.464797][ T46] bond1: (slave lo): failed to get link speed/duplex [ 266.472763][T21176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3336'. [ 266.476171][T21176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3336'. [ 266.554394][ T5935] usb usb9-port1: attempt power cycle [ 266.584742][T21184] fuse: Bad value for 'fd' [ 266.585335][ T12] bond1: (slave lo): failed to get link speed/duplex [ 266.694303][ T12] bond1: (slave lo): failed to get link speed/duplex [ 266.742994][T21194] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 266.746222][T21194] ALSA: mixer_oss: invalid index 1374389 [ 266.792212][T21197] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3341'. [ 266.886086][T21201] tmpfs: Invalid gid '0x00000000ffffffff' [ 266.894156][ T5935] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 266.914395][ T5935] usb 9-1: device descriptor read/8, error -71 [ 267.154125][ T5935] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 267.174760][ T5935] usb 9-1: device descriptor read/8, error -71 [ 267.284188][ T5935] usb usb9-port1: unable to enumerate USB device [ 267.605481][ T5935] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 267.684202][ T29] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 267.753982][ T5935] usb 10-1: Using ep0 maxpacket: 32 [ 267.759039][ T5935] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 267.761630][ T5935] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 267.765387][ T5935] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 267.768866][ T5935] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 267.772022][ T5935] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 267.776283][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 267.780101][ T5935] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 267.782953][ T5935] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 267.786169][ T5935] usb 10-1: Product: syz [ 267.787549][ T5935] usb 10-1: Manufacturer: syz [ 267.789080][ T5935] usb 10-1: SerialNumber: syz [ 267.792323][ T5935] usb 10-1: config 0 descriptor?? [ 267.799500][ T5935] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 267.803425][ T5935] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 267.834006][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 267.840125][ T29] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 267.844031][ T29] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 267.847340][ T29] usb 8-1: Product: syz [ 267.849110][ T29] usb 8-1: Manufacturer: syz [ 267.851612][ T29] usb 8-1: SerialNumber: syz [ 267.856443][ T29] usb 8-1: config 0 descriptor?? [ 268.003140][T21209] ldusb 10-1:0.0: Couldn't submit interrupt_in_urb -90 [ 268.033266][ T29] usb 10-1: USB disconnect, device number 13 [ 268.036772][ T29] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 268.331203][T21216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.334870][T21216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.341063][ T53] usb 8-1: USB disconnect, device number 25 [ 269.089178][T21274] macvtap0: entered allmulticast mode [ 269.091584][T21274] veth0_macvtap: entered allmulticast mode [ 269.130462][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.136453][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.142674][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.146835][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.150285][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.172063][T21279] Failed to initialize the IGMP autojoin socket (err -2) [ 269.228981][T21297] Bluetooth: MGMT ver 1.23 [ 269.419113][T21335] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3357'. [ 269.438161][T21340] trusted_key: encrypted_key: hex blob is missing [ 269.442216][T21340] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 269.448754][T21340] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 269.453013][T21340] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 269.491340][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3366'. [ 269.494345][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3366'. [ 269.530326][T21347] netlink: 'syz.4.3368': attribute type 1 has an invalid length. [ 269.532802][T21347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3368'. [ 269.624650][T21370] netlink: 'syz.4.3371': attribute type 1 has an invalid length. [ 269.655557][T21368] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.658485][T21368] bond6: entered promiscuous mode [ 269.660230][T21368] bond0: (slave bond6): Enslaving as an active interface with an up link [ 269.679436][ T40] kauditd_printk_skb: 202 callbacks suppressed [ 269.679447][ T40] audit: type=1400 audit(525.590:3824): avc: denied { create } for pid=21369 comm="syz.4.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 269.680355][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 269.681593][ T40] audit: type=1400 audit(525.590:3825): avc: denied { ioctl } for pid=21369 comm="syz.4.3371" path="socket:[78638]" dev="sockfs" ino=78638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 269.689757][T21370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.726790][T21368] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.730458][T21368] bond7: entered promiscuous mode [ 269.732749][T21368] bond0: (slave bond7): Enslaving as an active interface with an up link [ 269.744225][ T40] audit: type=1400 audit(525.660:3826): avc: denied { write } for pid=21369 comm="syz.4.3371" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.758665][ T40] audit: type=1400 audit(525.660:3827): avc: denied { ioctl } for pid=21369 comm="syz.4.3371" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.768180][ T40] audit: type=1400 audit(525.660:3828): avc: denied { create } for pid=21369 comm="syz.4.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 269.774688][ T40] audit: type=1400 audit(525.660:3829): avc: denied { getopt } for pid=21369 comm="syz.4.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 269.775470][T21368] 8021q: adding VLAN 0 to HW filter on device bond8 [ 269.785059][T21368] bond8: entered promiscuous mode [ 269.787489][T21368] bond0: (slave bond8): Enslaving as an active interface with an up link [ 269.799166][ T40] audit: type=1400 audit(525.710:3830): avc: denied { module_request } for pid=21512 comm="syz.5.3372" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 269.810411][T21368] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.813564][T21368] bond9: entered promiscuous mode [ 269.816593][T21368] bond0: (slave bond9): Enslaving as an active interface with an up link [ 269.836599][ T40] audit: type=1400 audit(525.750:3831): avc: denied { mount } for pid=21512 comm="syz.5.3372" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 269.840826][T21551] netlink: 'syz.4.3374': attribute type 10 has an invalid length. [ 269.847079][ T40] audit: type=1400 audit(525.750:3832): avc: denied { create } for pid=21550 comm="syz.4.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.854589][ T40] audit: type=1400 audit(525.750:3833): avc: denied { bind } for pid=21550 comm="syz.4.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.892407][T21368] 8021q: adding VLAN 0 to HW filter on device bond10 [ 269.897412][T21368] bond10: entered promiscuous mode [ 269.899993][T21590] binder: 21589:21590 ioctl c0306201 200000004a40 returned -14 [ 269.900461][T21368] bond0: (slave bond10): Enslaving as an active interface with an up link [ 269.918403][T21551] team0: Failed to send options change via netlink (err -105) [ 269.921702][T21551] team0: Port device dummy0 added [ 269.973558][T21368] 8021q: adding VLAN 0 to HW filter on device bond11 [ 269.978711][T21368] bond11: entered promiscuous mode [ 269.981073][T21368] bond0: (slave bond11): Enslaving as an active interface with an up link [ 270.004437][T21630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3378'. [ 270.009899][T21640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3378'. [ 270.025915][T21368] 8021q: adding VLAN 0 to HW filter on device bond12 [ 270.034516][T21368] bond12: entered promiscuous mode [ 270.036896][T21368] bond0: (slave bond12): Enslaving as an active interface with an up link [ 270.068313][T21368] 8021q: adding VLAN 0 to HW filter on device bond13 [ 270.071709][T21368] bond13: entered promiscuous mode [ 270.073633][T21368] bond0: (slave bond13): Enslaving as an active interface with an up link [ 270.111101][T21717] netlink: 'syz.4.3380': attribute type 1 has an invalid length. [ 270.141531][T21368] 8021q: adding VLAN 0 to HW filter on device bond14 [ 270.145161][T21368] bond14: entered promiscuous mode [ 270.147215][T21368] bond0: (slave bond14): Enslaving as an active interface with an up link [ 270.151338][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 270.155347][T21717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3380'. [ 270.196038][T21368] 8021q: adding VLAN 0 to HW filter on device bond15 [ 270.200223][T21368] bond15: entered promiscuous mode [ 270.202642][T21368] bond0: (slave bond15): Enslaving as an active interface with an up link [ 270.249456][T21717] veth5: entered promiscuous mode [ 270.302361][T21368] 8021q: adding VLAN 0 to HW filter on device bond16 [ 270.309101][T21368] bond16: entered promiscuous mode [ 270.311105][T21368] bond0: (slave bond16): Enslaving as an active interface with an up link [ 270.346472][T21368] 8021q: adding VLAN 0 to HW filter on device bond17 [ 270.349519][T21368] bond17: entered promiscuous mode [ 270.351483][T21368] bond0: (slave bond17): Enslaving as an active interface with an up link [ 270.393245][T21368] 8021q: adding VLAN 0 to HW filter on device bond18 [ 270.415765][T21368] bond18: entered promiscuous mode [ 270.417786][T21368] bond0: (slave bond18): Enslaving as an active interface with an up link [ 270.430633][T21368] 8021q: adding VLAN 0 to HW filter on device bond19 [ 270.433584][T21368] bond19: entered promiscuous mode [ 270.436633][T21368] bond0: (slave bond19): Enslaving as an active interface with an up link [ 270.440345][T21279] netdevsim netdevsim0 netdevsim0: renamed from eth10 [ 270.469390][T21279] netdevsim netdevsim0 netdevsim1: renamed from eth11 [ 270.486215][T21279] netdevsim netdevsim0 netdevsim2: renamed from eth12 [ 270.499452][T21279] netdevsim netdevsim0 netdevsim3: renamed from eth13 [ 270.529761][T22009] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 270.710087][T21279] wireguard: wg0: Could not create IPv4 socket [ 270.713195][T21279] wireguard: wg1: Could not create IPv4 socket [ 270.719077][T21279] wireguard: wg2: Could not create IPv4 socket [ 270.849526][T22041] random: crng reseeded on system resumption [ 270.860066][T22041] Failed to initialize the IGMP autojoin socket (err -2) [ 270.974010][ T46] net_ratelimit: 31 callbacks suppressed [ 270.974023][ T46] bond1: (slave lo): failed to get link speed/duplex [ 271.195865][ T46] bond1: (slave lo): failed to get link speed/duplex [ 271.204056][ T5939] Bluetooth: hci0: command tx timeout [ 271.224248][ T6310] e1000 0000:00:06.0 eth0: Reset adapter [ 271.328439][T22059] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3396'. [ 271.398999][ T6310] e1000 0000:00:06.0 eth0: Reset adapter [ 271.514038][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 271.624223][T17961] bond1: (slave lo): failed to get link speed/duplex [ 271.734196][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 271.844230][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 271.954067][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 272.074235][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 272.194462][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 272.314324][ T1257] bond1: (slave lo): failed to get link speed/duplex [ 273.606484][ T6020] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 273.892216][T22081] vimc link validate: Scaler:src:16x16 (0x33524742, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 274.397597][T22137] 9pnet_virtio: no channels available for device syz [ 274.427179][T22136] can0: slcan on ttynull. [ 274.431595][T22136] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 274.434469][T22136] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 274.440143][T22136] vhci_hcd vhci_hcd.0: Device attached [ 274.442259][T22144] vhci_hcd: unknown pdu 2 [ 274.446898][T18047] vhci_hcd vhci_hcd.4: stop threads [ 274.449453][T18047] vhci_hcd vhci_hcd.4: release socket [ 274.451333][T18047] vhci_hcd vhci_hcd.4: disconnect device [ 274.455710][T22136] overlayfs: conflicting lowerdir path [ 274.592541][T22157] 9pnet_virtio: no channels available for device syz [ 274.608773][T22135] can0 (unregistered): slcan off ttynull. [ 274.839954][ T40] kauditd_printk_skb: 33329 callbacks suppressed [ 274.839967][ T40] audit: type=1400 audit(530.750:37163): avc: denied { read write } for pid=12784 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.849831][ T40] audit: type=1400 audit(530.750:37164): avc: denied { open } for pid=12784 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.857413][ T40] audit: type=1400 audit(530.750:37165): avc: denied { ioctl } for pid=12784 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.865320][ T40] audit: type=1400 audit(530.770:37166): avc: denied { ioctl } for pid=22164 comm="syz.3.3420" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=80031 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 274.904209][ T6310] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 274.906579][ T40] audit: type=1400 audit(530.820:37167): avc: denied { read write } for pid=22169 comm="syz.3.3421" name="vbi3" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 274.915519][ T40] audit: type=1400 audit(530.820:37168): avc: denied { open } for pid=22169 comm="syz.3.3421" path="/dev/vbi3" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 274.924038][ T40] audit: type=1400 audit(530.840:37169): avc: denied { ioctl } for pid=22169 comm="syz.3.3421" path="/dev/vbi3" dev="devtmpfs" ino=991 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 274.957788][ T40] audit: type=1400 audit(530.870:37170): avc: denied { append } for pid=22171 comm="syz.3.3422" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.965826][ T40] audit: type=1400 audit(530.890:37171): avc: denied { create } for pid=22171 comm="syz.3.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 274.979952][ T40] audit: type=1400 audit(530.890:37172): avc: denied { setopt } for pid=22171 comm="syz.3.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 275.019889][T22174] __nla_validate_parse: 2 callbacks suppressed [ 275.019905][T22174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3423'. [ 275.077756][ T6310] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.082071][ T6310] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 275.086065][ T6310] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 275.090784][ T6310] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.097353][ T6310] usb 10-1: config 0 descriptor?? [ 275.108242][ T6310] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 275.111026][ T6310] dvb-usb: bulk message failed: -22 (3/0) [ 275.117558][ T6310] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 275.123450][ T6310] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 275.126815][ T6310] usb 10-1: media controller created [ 275.130239][ T6310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.144252][ T6310] dvb-usb: bulk message failed: -22 (6/0) [ 275.146758][ T6310] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 275.154933][ T6310] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input41 [ 275.167628][ T6310] dvb-usb: schedule remote query interval to 150 msecs. [ 275.170482][ T6310] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 275.307386][T22160] dvb-usb: bulk message failed: -22 (2/0) [ 275.312779][ T837] usb 10-1: USB disconnect, device number 14 [ 275.337178][ T837] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 275.734056][ T5935] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 275.865123][ T5935] usb 9-1: device descriptor read/64, error -71 [ 276.084380][T18047] net_ratelimit: 32 callbacks suppressed [ 276.084399][T18047] bond1: (slave lo): failed to get link speed/duplex [ 276.114021][ T5935] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 276.162415][T22279] Failed to initialize the IGMP autojoin socket (err -2) [ 276.204060][T17961] bond1: (slave lo): failed to get link speed/duplex [ 276.239734][T22285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3430'. [ 276.244720][ T5935] usb 9-1: device descriptor read/64, error -71 [ 276.286406][T22279] tipc: Enabled bearer , priority 0 [ 276.296683][T22278] tipc: Resetting bearer [ 276.360475][ T5935] usb usb9-port1: attempt power cycle [ 276.696917][ T5935] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 276.715841][ T5935] usb 9-1: device descriptor read/8, error -71 [ 276.954137][ T5935] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 276.974898][ T5935] usb 9-1: device descriptor read/8, error -71 [ 277.097721][ T5935] usb usb9-port1: unable to enumerate USB device [ 277.576346][T22278] tipc: Disabling bearer [ 277.580410][ T6310] tipc: Node number set to 3332767744 [ 277.594193][T18037] bond1: (slave lo): failed to get link speed/duplex [ 277.612451][T22309] syzkaller0: entered promiscuous mode [ 277.614378][T22309] syzkaller0: entered allmulticast mode [ 277.704196][T18037] bond1: (slave lo): failed to get link speed/duplex [ 277.824096][T18047] bond1: (slave lo): failed to get link speed/duplex [ 277.848801][T22320] mkiss: ax0: crc mode is auto. [ 277.934189][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 278.044268][ T99] bond1: (slave lo): failed to get link speed/duplex [ 278.099828][T22341] netlink: 'syz.3.3442': attribute type 2 has an invalid length. [ 278.109438][T22341] !: entered promiscuous mode [ 278.113116][T22341] netlink: 'syz.3.3442': attribute type 2 has an invalid length. [ 278.116809][T22341] !: left promiscuous mode [ 278.154389][T17959] bond1: (slave lo): failed to get link speed/duplex [ 278.264113][T17959] bond1: (slave lo): failed to get link speed/duplex [ 278.384681][ T99] bond1: (slave lo): failed to get link speed/duplex [ 278.518139][T22368] fuse: Bad value for 'fd' [ 278.520664][T22368] fuse: Bad value for 'fd' [ 278.522889][T22368] fuse: Bad value for 'fd' [ 278.534108][T22368] afs: Unknown parameter 'dyn0xffffffffffffffff' [ 278.537108][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3448'. [ 278.540853][T22370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.543735][T22370] batadv_slave_0: entered promiscuous mode [ 278.633180][T22377] netlink: 'syz.3.3450': attribute type 3 has an invalid length. [ 278.636456][T22377] netlink: 'syz.3.3450': attribute type 1 has an invalid length. [ 278.638994][T22377] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3450'. [ 278.641789][T22377] NCSI netlink: No device for ifindex 0 [ 278.671492][T22387] netlink: 'syz.5.3452': attribute type 1 has an invalid length. [ 278.672634][T22386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 278.672654][T22386] netlink: 'syz.3.3453': attribute type 30 has an invalid length. [ 278.728882][T22400] netlink: 'syz.5.3455': attribute type 8 has an invalid length. [ 278.771564][T22404] netlink: 'syz.4.3457': attribute type 1 has an invalid length. [ 278.777703][T22407] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3458'. [ 278.780674][T22408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3458'. [ 278.797685][T22404] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.802422][T22404] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 278.808052][T22404] bond4: entered allmulticast mode [ 278.813175][T22404] syz.4.3457 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 279.020928][T22462] netlink: 'syz.5.3466': attribute type 1 has an invalid length. [ 279.310003][T22497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3474'. [ 279.358899][T22505] Failed to initialize the IGMP autojoin socket (err -2) [ 279.592295][T22514] tipc: Enabled bearer , priority 0 [ 279.595691][T22514] syzkaller0: entered promiscuous mode [ 279.597447][T22514] syzkaller0: entered allmulticast mode [ 279.675440][T22513] tipc: Resetting bearer [ 279.695430][T22513] tipc: Disabling bearer [ 279.832394][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 279.854559][ T40] kauditd_printk_skb: 138 callbacks suppressed [ 279.854575][ T40] audit: type=1400 audit(535.770:37311): avc: denied { getopt } for pid=22530 comm="syz.4.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 279.909608][ T40] audit: type=1400 audit(535.820:37312): avc: denied { mounton } for pid=22540 comm="syz.5.3485" path="/242/file3" dev="tmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 279.919375][T22542] Device name not specified. [ 279.919375][T22542] [ 279.946653][ T40] audit: type=1400 audit(535.860:37313): avc: denied { setopt } for pid=22546 comm="syz.3.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.955620][ T40] audit: type=1400 audit(535.860:37314): avc: denied { create } for pid=22546 comm="syz.3.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 279.963431][ T40] audit: type=1400 audit(535.860:37315): avc: denied { write } for pid=22546 comm="syz.3.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 279.973020][ T40] audit: type=1400 audit(535.870:37316): avc: denied { read append } for pid=22536 comm="syz.4.3484" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 279.982433][ T40] audit: type=1400 audit(535.870:37317): avc: denied { open } for pid=22536 comm="syz.4.3484" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 279.984991][T22538] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 279.996749][T22538] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 280.005193][ T40] audit: type=1400 audit(535.870:37318): avc: denied { ioctl } for pid=22536 comm="syz.4.3484" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 280.014848][ T40] audit: type=1400 audit(535.890:37319): avc: denied { create } for pid=22549 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 280.017433][T22538] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 280.023624][T22553] xfrm1: entered allmulticast mode [ 280.028853][T22538] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 280.033184][T22538] kvm: requested 60342 ns i8254 timer period limited to 200000 ns [ 280.035573][ T40] audit: type=1400 audit(535.950:37320): avc: denied { create } for pid=22551 comm="syz.3.3489" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 280.052908][T22538] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 280.059695][T22556] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3488'. [ 280.067023][T22538] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 280.080457][T22538] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 280.095572][T22538] kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 280.108391][T22538] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 280.259130][T22581] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 280.261845][T22581] PKCS7: Only support pkcs7_signedData type [ 280.295215][T22586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3496'. [ 280.755036][T22638] mkiss: ax0: crc mode is auto. [ 280.824266][ T837] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 280.992267][ T837] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.996802][ T837] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.000398][ T837] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.004303][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.012218][T22614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.018712][ T837] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.047093][T22661] loop4: detected capacity change from 0 to 2560 [ 281.050899][T22661] buffer_io_error: 6 callbacks suppressed [ 281.050908][T22661] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 281.053547][ T9331] Buffer I/O error on dev loop4, logical block 3, async page read [ 281.056608][T22661] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 281.084619][T22661] loop0: detected capacity change from 0 to 7 [ 281.090264][T22661] Dev loop0: unable to read RDB block 7 [ 281.092701][T22661] loop0: AHDI p4 [ 281.096083][T22661] loop0: partition table partially beyond EOD, truncated [ 281.127229][T22661] Option ''MO' to dns_resolver key: bad/missing value [ 281.164148][T17959] net_ratelimit: 24 callbacks suppressed [ 281.164160][T17959] bond1: (slave lo): failed to get link speed/duplex [ 281.171842][T22682] overlayfs: failed to clone upperpath [ 281.197980][T22685] smc: net device bond0 applied user defined pnetid SYZ2 [ 281.200527][T22685] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3517'. [ 281.213741][T22685] smc: removing net device bond0 with user defined pnetid SYZ2 [ 281.220399][T22685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.223276][ T1023] usb 8-1: USB disconnect, device number 26 [ 281.229440][T22685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.236154][T22685] bond0 (unregistering): Released all slaves [ 281.264756][T22703] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3517'. [ 281.276239][T18043] bond1: (slave lo): failed to get link speed/duplex [ 281.352247][T22721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 281.394437][T17959] bond1: (slave lo): failed to get link speed/duplex [ 281.514106][T17957] bond1: (slave lo): failed to get link speed/duplex [ 281.570254][T22728] macvtap1: entered promiscuous mode [ 281.572084][T22728] macvtap1: entered allmulticast mode [ 281.573990][T22728] team0: Device macvtap1 is already an upper device of the team interface [ 281.634198][T17959] bond1: (slave lo): failed to get link speed/duplex [ 281.681058][T22737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3521'. [ 281.700072][T22737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.722717][T22737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.725874][T22737] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.730684][T22737] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 281.744078][T18043] bond1: (slave lo): failed to get link speed/duplex [ 281.847787][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3523'. [ 281.852033][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3523'. [ 281.855775][T18047] bond1: (slave lo): failed to get link speed/duplex [ 281.964097][T17963] bond1: (slave lo): failed to get link speed/duplex [ 282.074306][T17963] bond1: (slave lo): failed to get link speed/duplex [ 282.074714][ T5935] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 282.194250][T18043] bond1: (slave lo): failed to get link speed/duplex [ 282.228479][ T5935] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 282.231804][ T5935] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.237412][ T5935] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 282.240324][ T5935] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 282.242874][ T5935] usb 9-1: Manufacturer: syz [ 282.250349][ T5935] usb 9-1: config 0 descriptor?? [ 282.314170][ T5935] rc_core: IR keymap rc-hauppauge not found [ 282.316322][ T5935] Registered IR keymap rc-empty [ 282.318406][ T5935] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 282.325392][ T5935] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input42 [ 282.361872][T22820] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3534'. [ 282.478056][ T1023] usb 9-1: USB disconnect, device number 16 [ 282.543199][T22854] tmpfs: Cannot disable swap on remount [ 282.563362][T22854] Failed to initialize the IGMP autojoin socket (err -2) [ 282.655403][T22854] trusted_key: encrypted_key: insufficient parameters specified [ 282.658370][T22854] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3541'. [ 282.747130][T22875] tipc: MTU too low for tipc bearer [ 282.788965][T22879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=22879 comm=syz.5.3548 [ 282.828804][T22881] netlink: 'syz.5.3549': attribute type 3 has an invalid length. [ 283.008865][T22898] fuse: Bad value for 'fd' [ 283.010469][T22897] fuse: Bad value for 'fd' [ 283.553689][T22962] vxcan1: left allmulticast mode [ 283.809978][T22975] netlink: 'syz.5.3576': attribute type 3 has an invalid length. [ 283.813567][T22975] netlink: 'syz.5.3576': attribute type 1 has an invalid length. [ 283.854791][T22981] 9pnet_fd: Insufficient options for proto=fd [ 284.893621][T23065] netlink: 'syz.5.3603': attribute type 1 has an invalid length. [ 284.912699][T23065] smc: adding net device bond0 with user defined pnetid SYZ2 [ 284.918782][T23065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.929134][T23065] bond0: entered promiscuous mode [ 284.931341][T23065] bond0: entered allmulticast mode [ 284.937950][T23065] bond0: (slave dummy0): making interface the new active one [ 284.941068][T23065] dummy0: entered promiscuous mode [ 284.943409][T23065] dummy0: entered allmulticast mode [ 284.945715][ T40] kauditd_printk_skb: 214 callbacks suppressed [ 284.945727][ T40] audit: type=1400 audit(540.860:37535): avc: denied { read } for pid=23099 comm="syz.3.3604" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 284.946101][ T40] audit: type=1400 audit(540.860:37536): avc: denied { open } for pid=23099 comm="syz.3.3604" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 284.951537][T23065] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 284.968833][ T40] audit: type=1400 audit(540.860:37537): avc: denied { ioctl } for pid=23099 comm="syz.3.3604" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x561a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 285.071850][T23065] smc: removing net device bond0 with user defined pnetid SYZ2 [ 285.076729][T23065] bond0 (unregistering): (slave dummy0): Releasing active interface [ 285.080175][T23065] dummy0: left promiscuous mode [ 285.082511][T23065] dummy0: left allmulticast mode [ 285.087165][T23065] bond0 (unregistering): Released all slaves [ 285.182271][ T40] audit: type=1400 audit(541.090:37538): avc: denied { bind } for pid=23137 comm="syz.5.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.191312][ T40] audit: type=1400 audit(541.100:37539): avc: denied { execute_no_trans } for pid=23137 comm="syz.5.3605" path="/313/file1" dev="tmpfs" ino=1699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 285.224131][ T40] audit: type=1400 audit(541.140:37540): avc: denied { create } for pid=23142 comm="syz.3.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 285.231617][ T40] audit: type=1400 audit(541.140:37541): avc: denied { setopt } for pid=23142 comm="syz.3.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 285.239234][ T40] audit: type=1400 audit(541.140:37542): avc: denied { ioctl } for pid=23142 comm="syz.3.3607" path="socket:[80870]" dev="sockfs" ino=80870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 285.250862][ T40] audit: type=1400 audit(541.150:37543): avc: denied { sys_module } for pid=23137 comm="syz.5.3605" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 285.313515][ T40] audit: type=1400 audit(541.220:37544): avc: denied { read } for pid=23154 comm="syz.3.3610" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 285.322634][T23151] smc: adding net device bond0 with user defined pnetid SYZ2 [ 285.326335][T23151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.352585][T23191] Failed to initialize the IGMP autojoin socket (err -2) [ 285.489601][T23198] PM: Enabling pm_trace changes system date and time during resume. [ 285.489601][T23198] PM: Correct system time has to be restored manually after resume. [ 285.531718][T23204] MTD: Couldn't look up './bus': -15 [ 285.546354][T23208] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 285.561537][T23211] __nla_validate_parse: 2 callbacks suppressed [ 285.561546][T23211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3619'. [ 285.569052][T23211] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3619'. [ 285.604327][T23219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3622'. [ 285.607972][T23219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3622'. [ 285.642974][T23224] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 285.665309][T23249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3627'. [ 285.695405][T23224] gretap1: entered promiscuous mode [ 285.700711][T23224] bond20: (slave gretap1): making interface the new active one [ 285.703846][T23224] bond20: (slave gretap1): Enslaving as an active interface with an up link [ 285.716773][T23224] macvlan2: entered promiscuous mode [ 285.718597][T23224] macvlan2: entered allmulticast mode [ 285.720699][T23224] bond20: entered promiscuous mode [ 285.722944][T23224] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.729647][T23224] bond20: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 285.737173][T23224] bond20: left promiscuous mode [ 285.809728][T23286] netlink: 'syz.4.3630': attribute type 6 has an invalid length. [ 285.814873][T23286] netlink: 'syz.4.3630': attribute type 6 has an invalid length. [ 285.918281][T23306] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3635'. [ 285.958746][T23309] overlayfs: failed lookup in lower (newroot/349, name='file1', err=-40): overlapping layers [ 285.964700][T23309] overlayfs: failed lookup in lower (newroot/349, name='bus', err=-40): overlapping layers [ 285.968660][T23309] overlayfs: failed lookup in lower (newroot/349, name='bus', err=-40): overlapping layers [ 285.975350][T23311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3637'. [ 286.007986][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3638'. [ 286.008248][T23317] ================================================================== [ 286.013332][T23317] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1fed/0x43c0 [ 286.016161][T23317] Write of size 2880 at addr ffffc90003b31500 by task vivid-000-vid-c/23317 [ 286.019833][T23317] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.021391][T23317] CPU: 3 UID: 0 PID: 23317 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 286.021416][T23317] Tainted: [L]=SOFTLOCKUP [ 286.021422][T23317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.021432][T23317] Call Trace: [ 286.021438][T23317] [ 286.021445][T23317] dump_stack_lvl+0x116/0x1f0 [ 286.021468][T23317] print_report+0xcd/0x630 [ 286.021497][T23317] ? __virt_addr_valid+0x81/0x610 [ 286.021517][T23317] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 286.021536][T23317] kasan_report+0xe0/0x110 [ 286.021556][T23317] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 286.021578][T23317] kasan_check_range+0x100/0x1b0 [ 286.021601][T23317] __asan_memcpy+0x3c/0x60 [ 286.021619][T23317] tpg_fill_plane_buffer+0x1fed/0x43c0 [ 286.021649][T23317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.021669][T23317] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 286.021692][T23317] vivid_fillbuff+0x8d2/0x4250 [ 286.021711][T23317] ? __lock_acquire+0x436/0x2890 [ 286.021732][T23317] ? __lock_acquire+0x436/0x2890 [ 286.021757][T23317] ? __pfx_vivid_fillbuff+0x10/0x10 [ 286.021779][T23317] ? __lock_acquire+0x436/0x2890 [ 286.021804][T23317] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 286.021827][T23317] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.021847][T23317] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 286.021864][T23317] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 286.021885][T23317] vivid_thread_vid_cap+0x454/0xda0 [ 286.021906][T23317] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 286.021925][T23317] ? do_raw_spin_lock+0x12c/0x2b0 [ 286.021948][T23317] ? find_held_lock+0x2b/0x80 [ 286.021974][T23317] ? rcu_is_watching+0x12/0xc0 [ 286.021990][T23317] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.022016][T23317] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.022034][T23317] ? __kthread_parkme+0x19e/0x250 [ 286.022052][T23317] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 286.022068][T23317] kthread+0x3c5/0x780 [ 286.022088][T23317] ? __pfx_kthread+0x10/0x10 [ 286.022108][T23317] ? rcu_is_watching+0x12/0xc0 [ 286.022124][T23317] ? __pfx_kthread+0x10/0x10 [ 286.022144][T23317] ret_from_fork+0x983/0xb10 [ 286.022163][T23317] ? __pfx_ret_from_fork+0x10/0x10 [ 286.022182][T23317] ? __switch_to+0x7af/0x10d0 [ 286.022203][T23317] ? __pfx_kthread+0x10/0x10 [ 286.022224][T23317] ret_from_fork_asm+0x1a/0x30 [ 286.022255][T23317] [ 286.022261][T23317] [ 286.078020][T23317] The buggy address belongs to a vmalloc virtual mapping [ 286.078033][T23317] The buggy address belongs to the physical page: [ 286.078038][T23317] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x506b7 [ 286.078048][T23317] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 286.110942][T23317] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 286.113735][T23317] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 286.116557][T23317] page dumped because: kasan: bad access detected [ 286.118758][T23317] page_owner tracks the page as allocated [ 286.120587][T23317] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 23314, tgid 23313 (syz.3.3638), ts 286003742320, free_ts 286003718313 [ 286.126492][T23317] post_alloc_hook+0x1af/0x220 [ 286.128066][T23317] get_page_from_freelist+0xd0b/0x31a0 [ 286.129887][T23317] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 286.131777][T23317] alloc_pages_bulk_noprof+0x77a/0x1410 [ 286.133539][T23317] alloc_pages_bulk_mempolicy_noprof+0x244/0x12a0 [ 286.135712][T23317] __vmalloc_node_range_noprof+0xb98/0x16b0 [ 286.137653][T23317] vmalloc_user_noprof+0x9e/0xe0 [ 286.139396][T23317] vb2_vmalloc_alloc+0x135/0x410 [ 286.141031][T23317] __vb2_queue_alloc+0x8c9/0x1280 [ 286.142699][T23317] vb2_core_reqbufs+0xa90/0xfe0 [ 286.144319][T23317] __vb2_init_fileio+0x3f1/0x1100 [ 286.145969][T23317] vb2_core_poll+0x5ec/0x700 [ 286.147502][T23317] vb2_poll+0x4b/0xe0 [ 286.148857][T23317] vb2_fop_poll+0x10f/0x2c0 [ 286.150349][T23317] v4l2_poll+0x163/0x320 [ 286.151835][T23317] do_sys_poll+0x55c/0xdf0 [ 286.153316][T23317] page last free pid 23314 tgid 23313 stack trace: [ 286.155448][T23317] __free_frozen_pages+0x7df/0x1170 [ 286.157153][T23317] __kasan_populate_vmalloc+0x149/0x220 [ 286.159098][T23317] alloc_vmap_area+0x98d/0x2a50 [ 286.160709][T23317] __get_vm_area_node+0x1ca/0x330 [ 286.162349][T23317] __vmalloc_node_range_noprof+0x247/0x16b0 [ 286.164370][T23317] vmalloc_user_noprof+0x9e/0xe0 [ 286.166008][T23317] vb2_vmalloc_alloc+0x135/0x410 [ 286.167635][T23317] __vb2_queue_alloc+0x8c9/0x1280 [ 286.169279][T23317] vb2_core_reqbufs+0xa90/0xfe0 [ 286.170898][T23317] __vb2_init_fileio+0x3f1/0x1100 [ 286.172543][T23317] vb2_core_poll+0x5ec/0x700 [ 286.174146][T23317] vb2_poll+0x4b/0xe0 [ 286.175513][T23317] vb2_fop_poll+0x10f/0x2c0 [ 286.177021][T23317] v4l2_poll+0x163/0x320 [ 286.178496][T23317] do_sys_poll+0x55c/0xdf0 [ 286.179968][T23317] __x64_sys_ppoll+0x254/0x2d0 [ 286.181555][T23317] [ 286.182389][T23317] Memory state around the buggy address: [ 286.184233][T23317] ffffc90003b31f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 286.186867][T23317] ffffc90003b31f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 286.189498][T23317] >ffffc90003b32000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 286.192135][T23317] ^ [ 286.193504][T23317] ffffc90003b32080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 286.196098][T23317] ffffc90003b32100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 286.198757][T23317] ================================================================== [ 286.204615][ T4783] net_ratelimit: 35 callbacks suppressed [ 286.204625][ T4783] bond1: (slave lo): failed to get link speed/duplex [ 286.257529][T23317] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 286.259944][T23317] CPU: 3 UID: 0 PID: 23317 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 286.263653][T23317] Tainted: [L]=SOFTLOCKUP [ 286.265140][T23317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.268659][T23317] Call Trace: [ 286.269724][T23317] [ 286.270752][T23317] dump_stack_lvl+0x3d/0x1f0 [ 286.272285][T23317] vpanic+0x640/0x6f0 [ 286.273638][T23317] panic+0xca/0xd0 [ 286.274977][T23317] ? __pfx_panic+0x10/0x10 [ 286.276466][T23317] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 286.278406][T23317] ? preempt_schedule_common+0x44/0xc0 [ 286.280212][T23317] ? preempt_schedule_thunk+0x16/0x30 [ 286.281979][T23317] ? check_panic_on_warn+0x1f/0xb0 [ 286.283676][T23317] check_panic_on_warn+0xab/0xb0 [ 286.285380][T23317] end_report+0x107/0x160 [ 286.286819][T23317] kasan_report+0xee/0x110 [ 286.288301][T23317] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 286.290124][T23317] kasan_check_range+0x100/0x1b0 [ 286.291773][T23317] __asan_memcpy+0x3c/0x60 [ 286.293253][T23317] tpg_fill_plane_buffer+0x1fed/0x43c0 [ 286.295137][T23317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.297079][T23317] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 286.299110][T23317] vivid_fillbuff+0x8d2/0x4250 [ 286.300688][T23317] ? __lock_acquire+0x436/0x2890 [ 286.302309][T23317] ? __lock_acquire+0x436/0x2890 [ 286.303956][T23317] ? __pfx_vivid_fillbuff+0x10/0x10 [ 286.305654][T23317] ? __lock_acquire+0x436/0x2890 [ 286.307263][T23317] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 286.309179][T23317] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.310909][T23317] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 286.312821][T23317] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 286.314802][T23317] vivid_thread_vid_cap+0x454/0xda0 [ 286.316494][T23317] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 286.318391][T23317] ? do_raw_spin_lock+0x12c/0x2b0 [ 286.320123][T23317] ? find_held_lock+0x2b/0x80 [ 286.321706][T23317] ? rcu_is_watching+0x12/0xc0 [ 286.323306][T23317] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.325215][T23317] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.326981][T23317] ? __kthread_parkme+0x19e/0x250 [ 286.328620][T23317] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 286.330468][T23317] kthread+0x3c5/0x780 [ 286.331832][T23317] ? __pfx_kthread+0x10/0x10 [ 286.333358][T23317] ? rcu_is_watching+0x12/0xc0 [ 286.334968][T23317] ? __pfx_kthread+0x10/0x10 [ 286.336552][T23317] ret_from_fork+0x983/0xb10 [ 286.338115][T23317] ? __pfx_ret_from_fork+0x10/0x10 [ 286.339797][T23317] ? __switch_to+0x7af/0x10d0 [ 286.341360][T23317] ? __pfx_kthread+0x10/0x10 [ 286.342903][T23317] ret_from_fork_asm+0x1a/0x30 [ 286.344490][T23317] [ 286.346347][T23317] Kernel Offset: disabled [ 286.347790][T23317] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:50:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000309311 RBX=0000000000000000 RCX=ffffffff8b7796d9 RDX=0000000000000000 RSI=ffffffff8dacbd61 RDI=ffffffff8bf2a880 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100d48673d R10=ffff88806a4339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff908881d0 R15=0000000000000000 RIP=ffffffff8b777dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68fa000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdffdab1fb8 CR3=0000000033d48000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000eb73219f DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefcff Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdecfab0c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6dab215050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6dab21505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6dab215057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6dab21506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6dab2150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6dab2151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000001a RBX=0000000000000000 RCX=0000000000020000 RDX=000000000000001a RSI=0000000000000000 RDI=ffffffff8e3c9560 RBP=0000000000000003 RSP=ffffc90003257610 R8 =0000000000000000 R9 =000000000000001a R10=0000000000001000 R11=ffff88802fd10b30 R12=ffff88802fd10000 R13=ffffffff8e3c9560 R14=ffff88802fd10ba8 R15=0000000000000000 RIP=ffffffff8199ca02 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69fa000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8f7f917d60 CR3=000000003e1ef000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f7edba6c3 00007f8f7edba6c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a591c60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558eeedca 0000555558eeed20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558ef5ff0 0000555558ef5e00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558eeefb8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0188030008000180 0300100055800401 000002080606015a 9e00080055e00300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0105800400044808 0002880800010000 0008060a010cd010 0800058003000800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0803000000080806 0003080180080502 800401800401ec08 0002880800010000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008060a010cb810 0800028003040800 0188030008000180 0300100055800401 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002080606015a 9e00080055e00300 100055d003001000 55c00302100055b0 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002d87af RBX=0000000000000002 RCX=ffffffff8b7796d9 RDX=0000000000000000 RSI=ffffffff8dacbd61 RDI=ffffffff8bf2a880 RBP=ffffed1003bd3930 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=ffff88801de9d4b0 R12=0000000000000002 R13=ffff88801de9c980 R14=ffffffff908881d0 R15=0000000000000000 RIP=ffffffff8b777dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6afa000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c31e629 CR3=000000002bdf1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000eb73219f DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8531fbe5 RDI=ffffffff9aee8bc0 RBP=ffffffff9aee8b80 RSP=ffffc9000c45f0b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9aee8b80 R15=ffffffff8531fb80 RIP=ffffffff8531fc0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bfa000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdffcb73460 CR3=0000000063247000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000