last executing test programs: 1m19.184936222s ago: executing program 0 (id=325): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0xfffffc52, 0x0, 0x0, {0x7, 0x1f, 0x4, 0xffffffffd7110f4b, 0x6, 0x8000, 0x6, 0xffeffffa, 0x0, 0x0, 0x10, 0x101}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38]}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xdb) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m18.954479494s ago: executing program 0 (id=328): mknod$loop(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x10) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x20, 0x1) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='udp\x00') 1m18.884684227s ago: executing program 0 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100100, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000680)="b571e49249", 0x5}], 0x1, 0x2ffffc, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) getpeername$netlink(r4, &(0x7f0000000180), &(0x7f00000001c0)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a03000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f01380f01d1b8010000000f01d9660f3adf8d070000005a0fc77ff4fa0f01c50fc71c7dfcff000066b81f008ed0ff978f040000", 0x34}], 0x1, 0x11, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) close(r4) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x2, 0x3, 0x8000000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000000)) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m18.723943761s ago: executing program 0 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) (async) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x4) (async) listen(r1, 0x5) (async) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m18.723653561s ago: executing program 0 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="81"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f22e0f01be5100c082f6c6030f01cb0f41fb0f017a000f0178f70f005250f4baa10066b80f00000066ef0fc7f9", 0x2d}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r4, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m18.424401696s ago: executing program 0 (id=333): syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0x5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback, 0x7, 0x0, 0xfa670fd8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000300)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc97a, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) listen(r6, 0xa) landlock_restrict_self(r7, 0x0) listen(r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r4, r0, 0x10, 0x4, 0x0, @void, @value=r5, @void, @void, r2}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000400)) r8 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$netlink(0x10, 0x3, 0x0) 1m18.378062604s ago: executing program 32 (id=333): syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) sendfile(r1, r1, 0x0, 0x5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback, 0x7, 0x0, 0xfa670fd8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000300)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc97a, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) listen(r6, 0xa) landlock_restrict_self(r7, 0x0) listen(r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r4, r0, 0x10, 0x4, 0x0, @void, @value=r5, @void, @void, r2}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000400)) r8 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$netlink(0x10, 0x3, 0x0) 1m6.463674181s ago: executing program 3 (id=480): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0x7, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6e801, 0x8) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000280)="0085ea33", 0x4}], 0x1) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xfffffffffffffff5, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000001040)='./file0\x00', 0x0, 0x20, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m6.393743017s ago: executing program 3 (id=482): r0 = socket$alg(0x26, 0x5, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x0, &(0x7f0000000200)) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x32, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x1, 0xff, 0x8}, 0x2c) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x0, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x67}, {@multicast2, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x8, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) exit(0x80000000) timer_settime(r7, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000002380)) preadv(r8, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 1m5.524770065s ago: executing program 3 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg1\x00', @broadcast}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="410f214f410f3066b8190089f3464a504a50cbc403316f4936b266ba420066b8000066efc74424003a000000c7442402665b0000ff2c24c74424000e000000c744240200000100c7442406000000000f011c242e410f220766b809010f00d8", 0x5f}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m5.464013588s ago: executing program 3 (id=494): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a320000000040000380080002400000000608000140000000002c0003801400010070696d726567310000000000000000001400010070696d72656731"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x8880) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a320000000040000380080002400000000608000140000000002c0003801400010070696d726567310000000000000000001400010070696d72656731"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x8880) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0000, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x1, 0x8, 0x500, 0x7, 0x200004}) (async) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x1, 0x8, 0x500, 0x7, 0x200004}) 1m5.414316689s ago: executing program 3 (id=495): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$unix(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="5509272c04d0baa3165db355d3e024d977e6c120608812ff5bbacefa48f663942a132c3b7425990fc7f9db104cf6556b", 0x30}], 0x1, 0x0, 0x0, 0x40000}, 0x4048010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) fchdir(r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) fchmodat(r5, &(0x7f0000000040)='./file1\x00', 0x1b9) socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000200), 0x4) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r10, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r5}, './file1\x00'}) unlinkat(r5, &(0x7f0000000080)='./file1\x00', 0x200) r12 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r12, &(0x7f00000000c0)='FROZEN\x00', 0x7) 1m4.570057624s ago: executing program 3 (id=501): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000003c0)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xf19}, r3}}, 0x38) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r1, &(0x7f0000000100)={[0x1]}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}}}}]}, 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 1m4.511721739s ago: executing program 33 (id=501): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000003c0)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xf19}, r3}}, 0x38) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r1, &(0x7f0000000100)={[0x1]}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}}}}]}, 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 17.203984206s ago: executing program 1 (id=1095): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1000000009, 0x40000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="5000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010069703667726500001800028014000700fe800004000000000000080000000e87aa08000a00", @ANYRES32=r3, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0}, &(0x7f0000001400)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0xffffffffffffffff, r7, r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)=@acquire={0x3c0, 0x17, 0x0, 0x70bd2d, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@private1, @in=@multicast2, 0x4e22, 0xb0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x32, r3, r5}, {{@in=@rand_addr=0x64010100, @in=@broadcast, 0x4e21, 0x7, 0x4e23, 0x65, 0x7, 0x80, 0x0, 0x4, 0x0, r6}, {0x1, 0x5, 0x5, 0x7, 0xfffffffffffffffc, 0x10, 0x1, 0x5}, {0x0, 0xf5, 0x7, 0x39}, 0x5, 0x6e6bba, 0x2, 0x0, 0x1, 0x1}, 0x1, 0x70c42073, 0x401, 0x70bd2b}, [@extra_flags={0x8, 0x18, 0xfffffbc2}, @tfcpad={0x8, 0x16, 0x58}, @algo_crypt={0x99, 0x2, {{'ctr(aes)\x00'}, 0x288, "23bd8db703e3fc62245b7815ec8e7c3107e965ea6758b69141fe99c15857502875d4564074e471b530d2ada227b6cf04730b6441f32177f4989f52ffa68fec5ff8dee65a9891fd048d7c19af4230b23f85"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}, @algo_aead={0x106, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x5d0, 0x100, "c288333ddf20af616a90cb4175641c1e13748047d72637d1179068c4a6b7581cfe6ae6f9c74513febb30c6b63efac819d77b665effaae342085d24b72edca7f68ac3af8dbc2ade0303b655dcfebe491e72a113fa207c654f3f4c62bab29617b7374df844fa5f77820ee089c94fbfacede25c898a0dab530688017eb3fb65e8e50d80cd595ed3324559daf898a94d58de56e02e0c95fb721df302ec31309352442abf3cbf47f13494b7ed6853293564e2b24091e065072bf95a25"}}, @proto={0x5, 0x19, 0x3c}, @proto={0x5, 0x19, 0x2b}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x1, 0x4e21, 0x8, 0xa, 0x80, 0x20, 0xed, 0x0, r7}, {0x0, 0x30, 0x0, 0xfffffffffffffff8, 0x6, 0x1, 0xfffffffffffffff7, 0x5}, {0xe, 0x6, 0xe, 0x8}, 0x5, 0x6e6bbe, 0x0, 0x1, 0x2}}, @srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @lastused={0xc, 0xf, 0x100000001}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x40000, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/4117, 0x1015}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={r9, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001580)=[0x0], &(0x7f00000015c0)=[0x0, 0x0], 0x0, 0xa6, &(0x7f0000001600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0xac, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x18, 0x7, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1efd3de9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000001500)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x1a, '\x00', r4, @fallback=0x13, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, &(0x7f0000001c80)=[r9], 0x0, 0x10, 0x8}, 0x94) 17.134406583s ago: executing program 1 (id=1096): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x2}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x148) r3 = dup2(r2, r2) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x1000000, 0x0, 0x100000}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000000)=0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f00000001c0)=[{r5}], 0x1, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x8a, 0x1, 0x40000000, 0x10}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x81, @mcast2, 0x1}, 0xfffffffffffffe39) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "39c072d8b781f690b35605df39e70e38", '\x00', "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff1780c206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b02024100000071fa258e5c00000000000000000014143b2af52565e7fb42470d2f9c69a2614a8b2da6fb64c2d5d01e603a42813c82773d7aaa6a9fc71ab5c2d62ed0ccdf27bdaf51100ef22c8503e7079501ec1f1e09224a71339077f0b5d428070b0800000000000000f3a9b7da76f439d0e547517892e4bb81bc7e24a9c41e6dd0c85a37fea054dab29a9dcd52b411f9b05a7508048a"], 0x0) syz_emit_ethernet(0x8e, &(0x7f00000021c0)=ANY=[@ANYBLOB="bbbbaaaaaa86dd6003000000582cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa060a02080000000000000000000000000000ffff7f000001fc010000000000000000000000000000fc010000000000000000000000000001fc020000000000000000000000000000fc00"/135], 0x0) 16.894031187s ago: executing program 1 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001400b59527bd7000ffdbdf250a4000ff", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000000000000001080009000b005e2a90675b4dc8bd5735210000"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x5, 0x6, 0x5, 0x13f, 0x5}) 16.824046935s ago: executing program 1 (id=1104): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$nci(r1, &(0x7f0000000240)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x0, {0x5, [{0x4, 0x1e}, {0x4, 0xe}, {0x3}, {0x1, 0x6}, {0x3, 0xfb}]}}, 0xe) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0x1b, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1f}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) (async) r2 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x5, 0x5, &(0x7f0000000100)={0x1c, "b6f5eac76e436afb93e063ed9db4f9bf42fd27e6a154034b28a38d7b6ef7ffe7e6"}}) exit(0x1ff) (async) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2) (async) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000001300)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 16.779722097s ago: executing program 4 (id=1105): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) r0 = inotify_init1(0x80000) (rerun: 64) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) listen(0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 16.674152739s ago: executing program 4 (id=1106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0xfe3bc9be1dbadfdc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="05000000"], 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r1, 0xd76df63585d8493b, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0xc010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="03020a00006b0000004005b6b70108000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008814) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x1dc, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x8000000, 0x0, 0x2}, 0x0, 0xfdffff00}, [@sa={0xe4, 0x6, {{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x1, 0x4e20, 0x8, 0x2, 0x20, 0xa0}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xcd}, @in6=@mcast2, {0x4, 0x2, 0x6, 0x2, 0x7, 0x4, 0xa, 0xeb}, {0x8001, 0xc, 0x4, 0x9}, {0x5, 0x3, 0xd15}, 0x70bd2c, 0x3505, 0xa, 0x0, 0x1, 0x2}}]}, 0x1dc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002bbd7000fddbdf9c4c00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900090000002e0000001400fe000b8902167b739c85e9a15fd68746da071400fe0036f68bf2e20fa00c132c969f4cb67e84"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 16.672803403s ago: executing program 4 (id=1107): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) pipe2(&(0x7f0000000040), 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0x84, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000280)=0xb0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @broadcast}, 0xc) 16.463482363s ago: executing program 2 (id=1110): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@deltclass={0x4c, 0x29, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x8, 0x5}, {0xfff3, 0xffff}, {0xb, 0x2}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./cgroup\x00', 0x9, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x4000, 0x95, 0x28}, 0x18) mknodat$loop(r2, &(0x7f0000000440)='./file0\x00', 0x2000, 0x0) mount$nfs(&(0x7f0000000140)='\\,[.\x00', &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240), 0x1000, &(0x7f0000000280)={[{'#*[\'.[/]}\\#}'}, {'/dev/loop'}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':{'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@deltclass={0x4c, 0x29, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x8, 0x5}, {0xfff3, 0xffff}, {0xb, 0x2}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./cgroup\x00', 0x9, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x4000, 0x95, 0x28}, 0x18) (async) mknodat$loop(r2, &(0x7f0000000440)='./file0\x00', 0x2000, 0x0) (async) mount$nfs(&(0x7f0000000140)='\\,[.\x00', &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240), 0x1000, &(0x7f0000000280)={[{'#*[\'.[/]}\\#}'}, {'/dev/loop'}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':{'}}]}) (async) 16.372222753s ago: executing program 5 (id=1112): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003b00000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) sendto$phonet(r1, 0x0, 0xea, 0x0, &(0x7f00000000c0)={0x23, 0x2, 0x0, 0x3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x10433}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x800}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 16.306831779s ago: executing program 2 (id=1113): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) (async) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x8, 0xee, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x6, 0x2, 0x0, 0x4388, "7f9400", "00007cda", '\x00', "fcffffff", ["b6ed00dcffb6e6fdffffff00", "c000000000000000002100", "0c436d743c97c443084000", "0000008000"]}) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 16.220510564s ago: executing program 5 (id=1114): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0x7f, 0xba5, 0x0, 0x0}) sendfile(r0, r0, 0x0, 0x24002de8) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64\x00'}, 0x58) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat6\x00') r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007"], 0xcc}}, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000280)=0x680d) clock_gettime(0x0, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x40001) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000240)=@x86={0xc, 0x8, 0x8, 0x0, 0x6df7, 0x6, 0x10, 0x9, 0x0, 0x2, 0x2, 0xf, 0x0, 0xe, 0x0, 0x6, 0xc, 0x0, 0x7b, '\x00', 0x3, 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x52, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/65, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x2) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) 16.174290354s ago: executing program 2 (id=1115): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16.173260187s ago: executing program 4 (id=1116): r0 = semget$private(0x0, 0x4000000009, 0x208) semop(r0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) r1 = semget(0x1, 0x1, 0x54) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0xb, 0x4, 0x9]) semop(r0, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0xa8}], 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r2, 0x0, 0x0, 0x80800) 16.113872288s ago: executing program 2 (id=1117): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x24}]}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) lseek(r1, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x80010, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000040)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 16.023255625s ago: executing program 5 (id=1118): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) (async, rerun: 64) mkdir(&(0x7f0000000280)='./file0\x00', 0x13) (rerun: 64) rmdir(&(0x7f0000000000)='./file0\x00') 16.022754598s ago: executing program 5 (id=1119): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) umount2(0x0, 0x9) mount$overlay(0xfffffffffffffff0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 15.954227074s ago: executing program 1 (id=1120): socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x1000000}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000ec0)=ANY=[], 0x3c0}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x8001, @loopback, 0xfffffffb}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="380000000000000029000000360000001103000000000000c910fc"], 0x38}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) 15.946301174s ago: executing program 5 (id=1121): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x2) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0) (rerun: 64) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x9}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000004c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r11, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000280)={r10, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x8], [0x2], [0x0, 0x0, 0xfffffffffffffbaf]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000100)={r13}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r12}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socket$alg(0x26, 0x5, 0x0) 15.884155229s ago: executing program 1 (id=1122): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="2f090000000000000401930730000000010a050100487900000000000006000000000000000b0000000000000007000000000000000200000000000000100100050e0005c20400000004da040000000d0401000000000000"], 0x58) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001040)=0x2001, 0x4) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400000}, 0x48) 15.833123713s ago: executing program 5 (id=1123): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000428000/0x4000)=nil, 0x4000}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4$alg(r6, 0x0, 0x0, 0x800) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd9f, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000240)={0x3, r9, 0x1, 0x10002, 0x20c, 0x16, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000140)={0x2, r9, 0x1fc, 0xffffffff, 0x4, 0x800018, 0x0, 0x4, 0x3ffd}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00082bbd7000fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="480002809efe0100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) r11 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x710, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r12, @ANYBLOB="abe5661ca66ee4942246e923c650bcaddd8b8ee3cedf441e07b491c7a10ea3613ec510d6235fa22dfa5f13d4b67c2cff6f476f693af71e0d333c605badf5684d95e9470d5184b72cd2f15902360cdba59f3163e187a78cf2f6e3fb3ba938e4b8bcd534014a132b37cbd6536f3c4c4971e57bc9b1ddddddfb3a525d9ed81de377"], 0x3c}}, 0x8008084) 15.283028523s ago: executing program 4 (id=1124): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x4e23, 0x0, @private2, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x80007, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @remote, 0x7}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001403000000323b472545b45602117fffffff81004e230e227f000001e809000000ff0000f03ac7102d000000ffffffff15ffffffffe7ee7f000000000000000200"/88, 0x58}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000200", @ANYRES32=0x0, @ANYBLOB="08001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r10 = accept4$bt_l2cap(r8, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfffc}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, &(0x7f0000000080), 0x4) 15.234591248s ago: executing program 2 (id=1125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.time\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) socket(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80400) syz_clone3(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0xb8, 0x1, &(0x7f0000000180)={0x9c, "31407a4e5aab9a6b32805440238300bb5d8898fdfd5d9456936bd60653180ec83b"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) sendfile(r2, r2, 0x0, 0x9) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x2b3}) 15.234126318s ago: executing program 4 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {0x7ffd}, @broadcast, @broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xae, 0xe0}}, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@random={0xff, 0x2, 'fL'}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2102) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r14 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_STD(r14, 0x40085618, &(0x7f0000000040)=0x320000) 15.174544158s ago: executing program 2 (id=1127): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x51) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 134.218287ms ago: executing program 34 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {0x7ffd}, @broadcast, @broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xae, 0xe0}}, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@random={0xff, 0x2, 'fL'}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2102) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r14 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_STD(r14, 0x40085618, &(0x7f0000000040)=0x320000) 93.233045ms ago: executing program 35 (id=1122): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="2f090000000000000401930730000000010a050100487900000000000006000000000000000b0000000000000007000000000000000200000000000000100100050e0005c20400000004da040000000d0401000000000000"], 0x58) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001040)=0x2001, 0x4) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3365959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7dafbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194ba6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3df8fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2c0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000001b0700", 0x1000}}, 0x1006) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400000}, 0x48) 74.596845ms ago: executing program 36 (id=1127): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x51) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 0s ago: executing program 37 (id=1123): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000428000/0x4000)=nil, 0x4000}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4$alg(r6, 0x0, 0x0, 0x800) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd9f, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000240)={0x3, r9, 0x1, 0x10002, 0x20c, 0x16, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000140)={0x2, r9, 0x1fc, 0xffffffff, 0x4, 0x800018, 0x0, 0x4, 0x3ffd}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00082bbd7000fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="480002809efe0100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) r11 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x710, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r12, @ANYBLOB="abe5661ca66ee4942246e923c650bcaddd8b8ee3cedf441e07b491c7a10ea3613ec510d6235fa22dfa5f13d4b67c2cff6f476f693af71e0d333c605badf5684d95e9470d5184b72cd2f15902360cdba59f3163e187a78cf2f6e3fb3ba938e4b8bcd534014a132b37cbd6536f3c4c4971e57bc9b1ddddddfb3a525d9ed81de377"], 0x3c}}, 0x8008084) kernel console output (not intermixed with test programs): 3] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 94.776615][ T6413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6413 comm=syz.1.113 [ 94.830864][ T6415] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 94.835914][ T6415] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 94.951072][ T6418] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 94.963764][ T6418] overlayfs: missing 'lowerdir' [ 94.974277][ T6427] syz.1.119 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.989485][ T40] audit: type=1400 audit(1767621856.823:285): avc: denied { associate } for pid=6426 comm="syz.1.119" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.007518][ T6425] syzkaller0: entered promiscuous mode [ 95.010062][ T6425] syzkaller0: entered allmulticast mode [ 95.348021][ T6430] FAULT_INJECTION: forcing a failure. [ 95.348021][ T6430] name failslab, interval 1, probability 0, space 0, times 0 [ 95.354899][ T6430] CPU: 2 UID: 0 PID: 6430 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(full) [ 95.354926][ T6430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.354938][ T6430] Call Trace: [ 95.354947][ T6430] [ 95.354969][ T6430] dump_stack_lvl+0x16c/0x1f0 [ 95.355034][ T6430] should_fail_ex+0x512/0x640 [ 95.355075][ T6430] should_failslab+0xc2/0x120 [ 95.355102][ T6430] kmem_cache_alloc_noprof+0x83/0x770 [ 95.355121][ T6430] ? __pfx___alloc_skb+0x10/0x10 [ 95.355150][ T6430] ? sctp_chunkify+0x51/0x300 [ 95.355175][ T6430] ? sctp_chunkify+0x51/0x300 [ 95.355193][ T6430] sctp_chunkify+0x51/0x300 [ 95.355213][ T6430] _sctp_make_chunk+0x148/0x270 [ 95.355235][ T6430] sctp_make_control+0x2f/0x2d0 [ 95.355255][ T6430] sctp_make_heartbeat+0xa7/0x2e0 [ 95.355277][ T6430] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 95.355305][ T6430] ? sctp_sm_lookup_event+0x15b/0x570 [ 95.355328][ T6430] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 95.355350][ T6430] ? __pfx_sctp_pname+0x10/0x10 [ 95.355370][ T6430] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 95.355400][ T6430] ? __pfx_sctp_pname+0x10/0x10 [ 95.355419][ T6430] sctp_do_sm+0x181/0x5e00 [ 95.355443][ T6430] ? finish_task_switch.isra.0+0x207/0xbd0 [ 95.355474][ T6430] ? __pfx_sctp_do_sm+0x10/0x10 [ 95.355492][ T6430] ? trace_sched_exit_tp+0xd1/0x110 [ 95.355540][ T6430] ? __lock_sock+0x1f4/0x260 [ 95.355565][ T6430] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 95.355588][ T6430] sctp_apply_peer_addr_params+0x113/0x3400 [ 95.355617][ T6430] sctp_setsockopt+0x1464/0xb8c0 [ 95.355646][ T6430] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 95.355676][ T6430] ? __pfx_sctp_setsockopt+0x10/0x10 [ 95.355712][ T6430] ? find_held_lock+0x2b/0x80 [ 95.355746][ T6430] ? selinux_socket_setsockopt+0x6a/0x80 [ 95.355766][ T6430] ? sock_common_setsockopt+0x2e/0xf0 [ 95.355789][ T6430] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 95.355813][ T6430] do_sock_setsockopt+0xf3/0x1d0 [ 95.355841][ T6430] __sys_setsockopt+0x1a0/0x230 [ 95.355865][ T6430] __x64_sys_setsockopt+0xbd/0x160 [ 95.355883][ T6430] ? do_syscall_64+0x91/0xf80 [ 95.355920][ T6430] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.355944][ T6430] do_syscall_64+0xcd/0xf80 [ 95.355969][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.355989][ T6430] RIP: 0033:0x7fb7f1b8f7c9 [ 95.356004][ T6430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.356020][ T6430] RSP: 002b:00007fb7f2ad0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.356040][ T6430] RAX: ffffffffffffffda RBX: 00007fb7f1de5fa0 RCX: 00007fb7f1b8f7c9 [ 95.356052][ T6430] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 95.356062][ T6430] RBP: 00007fb7f2ad0090 R08: 000000000000009c R09: 0000000000000000 [ 95.356072][ T6430] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 95.356082][ T6430] R13: 00007fb7f1de6038 R14: 00007fb7f1de5fa0 R15: 00007ffc6f881918 [ 95.356109][ T6430] [ 95.846682][ T6467] process 'syz.1.134' launched './file2' with NULL argv: empty string added [ 120.444925][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 120.444941][ T40] audit: type=1400 audit(1767621882.273:292): avc: denied { create } for pid=6494 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.456762][ T40] audit: type=1400 audit(1767621882.273:293): avc: denied { getopt } for pid=6494 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.481841][ T40] audit: type=1400 audit(1767621882.303:294): avc: denied { create } for pid=6489 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.491616][ T40] audit: type=1400 audit(1767621882.303:295): avc: denied { write } for pid=6489 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.500775][ T40] audit: type=1400 audit(1767621882.323:296): avc: denied { read } for pid=6489 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.671623][ T40] audit: type=1400 audit(1767621882.493:297): avc: denied { setopt } for pid=6501 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.513319][ T40] audit: type=1400 audit(1767621883.343:298): avc: denied { write } for pid=6538 comm="syz.0.151" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.513602][ T6539] program syz.0.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.661533][ T6546] Bluetooth: MGMT ver 1.23 [ 121.915168][ T6557] capability: warning: `syz.0.156' uses 32-bit capabilities (legacy support in use) [ 121.938472][ T40] audit: type=1400 audit(1767621883.763:299): avc: denied { read } for pid=6562 comm="syz.1.157" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 121.949373][ T40] audit: type=1400 audit(1767621883.763:300): avc: denied { open } for pid=6562 comm="syz.1.157" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 121.959892][ T40] audit: type=1400 audit(1767621883.783:301): avc: denied { ioctl } for pid=6562 comm="syz.1.157" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x5443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 122.134666][ T6570] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 122.141929][ T6570] overlayfs: overlapping lowerdir path [ 122.729908][ T6588] netlink: 52 bytes leftover after parsing attributes in process `syz.3.165'. [ 123.506245][ T5959] Bluetooth: Wrong link type (-57) [ 123.510105][ T5959] Bluetooth: Wrong link type (-57) [ 123.512059][ T5959] Bluetooth: Wrong link type (-57) [ 123.514142][ T5959] Bluetooth: Wrong link type (-57) [ 123.516167][ T5959] Bluetooth: Wrong link type (-57) [ 123.518176][ T5959] Bluetooth: Wrong link type (-57) [ 123.519966][ T5959] Bluetooth: Wrong link type (-57) [ 123.521686][ T5959] Bluetooth: Wrong link type (-57) [ 123.523778][ T5959] Bluetooth: Wrong link type (-57) [ 123.525527][ T5959] Bluetooth: Wrong link type (-57) [ 123.527434][ T5959] Bluetooth: Wrong link type (-57) [ 123.529128][ T5959] Bluetooth: Wrong link type (-57) [ 123.530812][ T5959] Bluetooth: Wrong link type (-57) [ 123.533427][ T5959] Bluetooth: Wrong link type (-57) [ 123.535854][ T5959] Bluetooth: Wrong link type (-57) [ 123.538600][ T5959] Bluetooth: Wrong link type (-57) [ 123.540375][ T5959] Bluetooth: Wrong link type (-57) [ 123.542067][ T5959] Bluetooth: Wrong link type (-57) [ 123.544513][ T5959] Bluetooth: Wrong link type (-57) [ 123.547106][ T5959] Bluetooth: Wrong link type (-57) [ 123.549757][ T5959] Bluetooth: Wrong link type (-57) [ 123.552167][ T5959] Bluetooth: Wrong link type (-57) [ 123.554734][ T5959] Bluetooth: Wrong link type (-57) [ 123.557036][ T5959] Bluetooth: Wrong link type (-57) [ 123.559637][ T5959] Bluetooth: Wrong link type (-57) [ 123.561988][ T5959] Bluetooth: Wrong link type (-57) [ 123.565193][ T5959] Bluetooth: Wrong link type (-57) [ 123.567782][ T5959] Bluetooth: Wrong link type (-57) [ 123.570390][ T5959] Bluetooth: Wrong link type (-57) [ 123.572884][ T5959] Bluetooth: Wrong link type (-57) [ 123.575235][ T5959] Bluetooth: Wrong link type (-57) [ 123.577746][ T5959] Bluetooth: Wrong link type (-57) [ 123.580249][ T5959] Bluetooth: Wrong link type (-57) [ 123.666525][ T6649] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 123.676302][ T6649] netlink: 'syz.0.176': attribute type 2 has an invalid length. [ 123.764422][ T6658] macvlan0: entered allmulticast mode [ 123.766577][ T6658] veth1_vlan: entered allmulticast mode [ 123.775692][ T6658] pimreg3: entered allmulticast mode [ 123.784126][ T6658] pim6reg: entered allmulticast mode [ 123.788176][ T6658] veth1_vlan: left allmulticast mode [ 123.807775][ T6658] macvlan0 (unregistering): left allmulticast mode [ 124.510429][ T6693] kvm: kvm [6692]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000053) = 0x3 [ 124.669353][ T6698] F2FS-fs: Conflicting test_dummy_encryption options [ 124.823074][ T6709] befs: (nullb0): No write support. Marking filesystem read-only [ 124.827980][ T6709] befs: (nullb0): invalid magic header [ 124.950477][ T6709] xt_SECMARK: invalid mode: 2 [ 125.236072][ T6730] netlink: 72 bytes leftover after parsing attributes in process `syz.1.201'. [ 125.255325][ T6730] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 125.274168][ T6730] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 125.403389][ T6735] block device autoloading is deprecated and will be removed. [ 125.428793][ T6735] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 125.453138][ T6741] fuse: blksize only supported for fuseblk [ 125.470324][ T6740] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 125.540463][ T6744] netlink: 100 bytes leftover after parsing attributes in process `syz.1.207'. [ 125.546125][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 125.546136][ T40] audit: type=1400 audit(1767621887.373:332): avc: denied { map } for pid=6743 comm="syz.1.207" path="socket:[14708]" dev="sockfs" ino=14708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 125.635693][ T6750] netlink: 124 bytes leftover after parsing attributes in process `syz.2.209'. [ 125.722889][ T6752] overlayfs: failed to resolve './file1': -2 [ 125.751230][ T6726] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 125.873164][ T40] audit: type=1400 audit(1767621887.703:333): avc: denied { ioctl } for pid=6755 comm="syz.1.212" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 125.884238][ T40] audit: type=1400 audit(1767621887.703:334): avc: denied { getopt } for pid=6755 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.048444][ T40] audit: type=1400 audit(1767621887.873:335): avc: denied { write } for pid=6766 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.058597][ T40] audit: type=1400 audit(1767621887.893:336): avc: denied { setopt } for pid=6766 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.073664][ T40] audit: type=1400 audit(1767621887.903:337): avc: denied { create } for pid=6766 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.082797][ T40] audit: type=1400 audit(1767621887.903:338): avc: denied { connect } for pid=6766 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.107582][ T40] audit: type=1400 audit(1767621887.933:339): avc: denied { unlink } for pid=6764 comm="syz.0.214" name="#25" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.342697][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 126.348018][ T40] audit: type=1400 audit(1767621888.173:340): avc: denied { create } for pid=6774 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 126.389196][ T40] audit: type=1400 audit(1767621888.213:341): avc: denied { create } for pid=6772 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 126.398117][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.217'. [ 126.410705][ T6775] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 126.417759][ T6775] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.427906][ T6775] bond0: (slave team0): Enslaving as an active interface with an up link [ 127.361007][ T6810] nfs4: Bad value for 'source' [ 127.502307][ T6817] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.504990][ T6817] overlayfs: failed to set xattr on upper [ 127.507076][ T6817] overlayfs: ...falling back to redirect_dir=nofollow. [ 127.509316][ T6817] overlayfs: ...falling back to index=off. [ 127.512695][ T6817] overlayfs: ...falling back to uuid=null. [ 127.605003][ T6819] omfs: Invalid superblock (0) [ 127.613533][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 128.109911][ T6837] overlayfs: failed to verify index (index/00fb2100018b3d9d742f4742c5acd40109da0c9682aa9ee2947601000000000000, ftype=2000, err=-61) [ 128.118358][ T6837] overlayfs: failed index dir cleanup (-61) [ 128.121274][ T6837] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 128.374687][ T6846] team_slave_0: entered promiscuous mode [ 128.376823][ T6846] team_slave_1: entered promiscuous mode [ 128.380211][ T6846] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 128.403293][ T6846] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 128.407073][ T6846] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 128.410078][ T6846] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 128.412830][ T6846] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 128.922296][ T6856] fuse: blksize only supported for fuseblk [ 129.019528][ T6868] fuse: Bad value for 'user_id' [ 129.021921][ T6868] fuse: Bad value for 'user_id' [ 129.195522][ T6887] netlink: 80 bytes leftover after parsing attributes in process `syz.1.256'. [ 129.452631][ T6042] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 129.622625][ T6042] usb 8-1: Using ep0 maxpacket: 16 [ 129.629156][ T6042] usb 8-1: config index 0 descriptor too short (expected 65, got 36) [ 129.631988][ T6042] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.636038][ T6042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.640518][ T6042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 129.645475][ T6042] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.650117][ T6042] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 129.653256][ T6042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.659749][ T6042] usb 8-1: config 0 descriptor?? [ 129.669608][ T6042] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input5 [ 129.676468][ T5327] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.681461][ T5327] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.686577][ T5327] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.690972][ T5327] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.698565][ T6497] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.701323][ T5327] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.707487][ T5327] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.710483][ T5327] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.869109][ T6889] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 129.953468][ T6118] usb 8-1: USB disconnect, device number 2 [ 130.325793][ T6912] netlink: 'syz.1.265': attribute type 7 has an invalid length. [ 130.329438][ T6912] netlink: 'syz.1.265': attribute type 8 has an invalid length. [ 130.827397][ T6918] ======================================================= [ 130.827397][ T6918] WARNING: The mand mount option has been deprecated and [ 130.827397][ T6918] and is ignored by this kernel. Remove the mand [ 130.827397][ T6918] option from the mount to silence this warning. [ 130.827397][ T6918] ======================================================= [ 130.843550][ T6918] kAFS: No cell specified [ 130.906387][ T6920] program syz.3.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.970821][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 131.328344][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 131.328356][ T40] audit: type=1400 audit(1767621893.153:381): avc: denied { getopt } for pid=6935 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.531164][ T6945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.276'. [ 131.654895][ T40] audit: type=1400 audit(1767621893.483:382): avc: denied { watch watch_reads } for pid=6947 comm="syz.2.277" path="/52" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.013664][ T6962] netlink: 'syz.3.280': attribute type 21 has an invalid length. [ 132.017064][ T6962] netlink: 128 bytes leftover after parsing attributes in process `syz.3.280'. [ 132.021008][ T6962] netlink: 'syz.3.280': attribute type 4 has an invalid length. [ 132.023899][ T6962] netlink: 'syz.3.280': attribute type 5 has an invalid length. [ 132.026471][ T6962] netlink: 3 bytes leftover after parsing attributes in process `syz.3.280'. [ 132.055634][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.279'. [ 132.082653][ T6042] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.242570][ T6042] usb 6-1: Using ep0 maxpacket: 32 [ 132.245918][ T6042] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 132.253421][ T6042] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.261091][ T6042] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.267274][ T6042] usb 6-1: Product: syz [ 132.271428][ T6042] usb 6-1: Manufacturer: syz [ 132.273661][ T6042] usb 6-1: SerialNumber: syz [ 132.277252][ T6042] usb 6-1: config 0 descriptor?? [ 132.280612][ T6958] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.281512][ T6967] overlay: Bad value for 'workdir' [ 132.285084][ T6042] hub 6-1:0.0: bad descriptor, ignoring hub [ 132.287865][ T6042] hub 6-1:0.0: probe with driver hub failed with error -5 [ 132.441361][ T40] audit: type=1400 audit(1767621894.263:383): avc: denied { bind } for pid=6970 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.450857][ T6972] netlink: 44 bytes leftover after parsing attributes in process `syz.3.284'. [ 132.453335][ T6971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.284'. [ 132.497689][ T6958] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.505961][ T40] audit: type=1400 audit(1767621894.333:384): avc: denied { mount } for pid=6978 comm="syz.0.287" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.507204][ T6979] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 132.521112][ T40] audit: type=1400 audit(1767621894.333:385): avc: denied { mounton } for pid=6978 comm="syz.0.287" path="/77/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 132.536056][ T40] audit: type=1400 audit(1767621894.353:386): avc: denied { read } for pid=6978 comm="syz.0.287" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 132.536103][ T40] audit: type=1400 audit(1767621894.353:387): avc: denied { read } for pid=6978 comm="syz.0.287" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 132.536142][ T40] audit: type=1400 audit(1767621894.353:388): avc: denied { open } for pid=6978 comm="syz.0.287" path="/77/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 132.536195][ T40] audit: type=1400 audit(1767621894.353:389): avc: denied { read } for pid=6978 comm="syz.0.287" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 132.589801][ T40] audit: type=1400 audit(1767621894.413:390): avc: denied { getattr } for pid=6978 comm="syz.0.287" name="saved_tgids" dev="tracefs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 132.799427][ T6991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19856 sclass=netlink_route_socket pid=6991 comm=syz.2.288 [ 133.263640][ T1143] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.343630][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 133.363647][ T4944] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.432658][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 133.455637][ T61] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.542945][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 133.565122][ T1143] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.611025][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.296'. [ 133.652584][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 133.685506][ T1143] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.752659][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 133.773984][ T4944] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.782798][ T7015] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 133.813210][ T7015] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 133.835109][ T7017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7017 comm=syz.2.300 [ 133.842646][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 133.885822][ T4944] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.928090][ T7019] overlayfs: failed to resolve './file1/file0': -2 [ 133.964292][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 133.988823][ T72] raw-gadget.0 gadget.1: failed to queue suspend event [ 133.998653][ T7023] syzkaller1: entered promiscuous mode [ 134.001166][ T7023] syzkaller1: entered allmulticast mode [ 134.082853][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 134.105415][ T4320] raw-gadget.0 gadget.1: failed to queue suspend event [ 134.189684][ T7031] smc: net device bond0 applied user defined pnetid S [ 134.193367][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 134.213807][ T1143] raw-gadget.0 gadget.1: failed to queue suspend event [ 134.290211][ T7039] ipvlan1: entered promiscuous mode [ 134.292569][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 134.295616][ T7039] ipvlan1: entered allmulticast mode [ 134.297836][ T7039] veth0_vlan: entered allmulticast mode [ 134.313355][ T1143] raw-gadget.0 gadget.1: failed to queue suspend event [ 134.382665][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 134.404256][ T1143] raw-gadget.0 gadget.1: failed to queue suspend event [ 134.482954][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 134.504243][ T72] raw-gadget.0 gadget.1: failed to queue suspend event [ 134.572749][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 134.604350][ T4944] raw-gadget.0 gadget.1: failed to queue suspend event [ 134.692632][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 134.714971][ T4320] raw-gadget.0 gadget.1: failed to queue suspend event [ 134.784775][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 134.803644][ T4320] raw-gadget.0 gadget.1: failed to queue suspend event [ 134.882642][ T6980] raw-gadget.0 gadget.1: failed to queue resume event [ 134.903516][ T4944] raw-gadget.0 gadget.1: failed to queue suspend event [ 134.916590][ T6980] raw-gadget.0 gadget.1: failed to queue disconnect event [ 134.934378][ T6118] usb 6-1: USB disconnect, device number 2 [ 134.993903][ T7046] vcan1: entered allmulticast mode [ 135.103894][ T7052] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 135.107805][ T7051] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 135.111440][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 135.115171][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 135.547162][ T29] IPVS: starting estimator thread 0... [ 135.549928][ T7068] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 135.632665][ T7070] IPVS: using max 44 ests per chain, 105600 per kthread [ 135.894248][ T7081] sctp: [Deprecated]: syz.0.320 (pid 7081) Use of int in max_burst socket option. [ 135.894248][ T7081] Use struct sctp_assoc_value instead [ 136.057872][ T7093] sp0: Synchronizing with TNC [ 136.203152][ T7097] netlink: 'syz.2.326': attribute type 83 has an invalid length. [ 136.346294][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 136.346312][ T40] audit: type=1400 audit(1767621898.173:419): avc: denied { write } for pid=7104 comm="syz.0.330" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.359892][ T40] audit: type=1400 audit(1767621898.183:420): avc: denied { setopt } for pid=7103 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 136.491134][ T40] audit: type=1400 audit(1767621898.313:421): avc: denied { mount } for pid=7110 comm="syz.0.331" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 136.498510][ T40] audit: type=1400 audit(1767621898.313:422): avc: denied { unmount } for pid=7110 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 136.828659][ T1233] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.870521][ T40] audit: type=1400 audit(1767621898.693:423): avc: denied { execute } for pid=7119 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 136.870893][ T7115] "syz.3.334" (7115) uses obsolete ecb(arc4) skcipher [ 136.880994][ T40] audit: type=1400 audit(1767621898.693:424): avc: denied { execute_no_trans } for pid=7119 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 136.932903][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.938068][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.941910][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.948996][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.953129][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.963966][ T1233] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.029681][ T1233] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.090291][ T1233] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.104502][ T7121] chnl_net:caif_netlink_parms(): no params data found [ 137.185565][ T7121] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.188610][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.191634][ T7121] bridge_slave_0: entered allmulticast mode [ 137.196644][ T7121] bridge_slave_0: entered promiscuous mode [ 137.202568][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.206757][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.209273][ T7121] bridge_slave_1: entered allmulticast mode [ 137.211983][ T7121] bridge_slave_1: entered promiscuous mode [ 137.235687][ T7121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.242309][ T7121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.275124][ T7132] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 137.278452][ T7132] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 137.281691][ T7132] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 137.285709][ T7132] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 137.289227][ T7121] team0: Port device team_slave_0 added [ 137.293603][ T7121] team0: Port device team_slave_1 added [ 137.356968][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.359300][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.370156][ T7121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.384701][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.387795][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.399093][ T7121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.426900][ T7139] fuse: Bad value for 'fd' [ 137.430659][ T5950] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 137.440879][ T1233] bridge_slave_1: left allmulticast mode [ 137.443926][ T1233] bridge_slave_1: left promiscuous mode [ 137.448370][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.460846][ T1233] bridge_slave_0: left allmulticast mode [ 137.463620][ T1233] bridge_slave_0: left promiscuous mode [ 137.466292][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.565734][ T40] audit: type=1400 audit(1767621899.393:425): avc: denied { create } for pid=7143 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.574046][ T40] audit: type=1400 audit(1767621899.393:426): avc: denied { setopt } for pid=7143 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.738531][ T40] audit: type=1400 audit(1767621899.563:427): avc: denied { audit_control } for pid=7146 comm="syz.2.342" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.785601][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.788520][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.799730][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 137.802446][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 137.807001][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.814650][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.819343][ T1233] bond0 (unregistering): (slave team0): Releasing backup interface [ 137.823117][ T1233] bond0 (unregistering): Released all slaves [ 137.830689][ T7121] hsr_slave_0: entered promiscuous mode [ 137.832977][ T7121] hsr_slave_1: entered promiscuous mode [ 137.835209][ T7121] debugfs: 'hsr0' already exists in 'hsr' [ 137.836840][ T7121] Cannot create hsr debugfs directory [ 137.948070][ T40] audit: type=1400 audit(1767621899.773:428): avc: denied { mount } for pid=7154 comm="syz.3.345" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 138.074754][ T7121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.083821][ T7121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.088792][ T7121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.096665][ T7121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.188952][ T7121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.220470][ T1233] hsr_slave_0: left promiscuous mode [ 138.224035][ T1233] hsr_slave_1: left promiscuous mode [ 138.226946][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.230222][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.236328][ T6042] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 138.237103][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.243376][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.268643][ T1233] veth1_macvtap: left promiscuous mode [ 138.271225][ T1233] veth0_macvtap: left promiscuous mode [ 138.275297][ T1233] veth1_vlan: left promiscuous mode [ 138.277500][ T1233] veth0_vlan: left promiscuous mode [ 138.350833][ T1233] pim6reg (unregistering): left allmulticast mode [ 138.362321][ T1233] pimreg3 (unregistering): left allmulticast mode [ 138.392602][ T6042] usb 7-1: Using ep0 maxpacket: 8 [ 138.396533][ T6042] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.399366][ T6042] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 138.406359][ T6042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.412062][ T6042] usb 7-1: config 0 descriptor?? [ 138.704064][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 138.726312][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 138.834899][ T6042] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 138.983324][ T5950] Bluetooth: hci0: command tx timeout [ 139.024706][ T7153] i2c i2c-2: unsupported multi-msg i2c transaction [ 139.055745][ T6092] usb 7-1: USB disconnect, device number 2 [ 139.086947][ T7121] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.107781][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.110846][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.121383][ T4944] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.124428][ T4944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.243627][ T7193] netlink: 'syz.3.350': attribute type 2 has an invalid length. [ 139.353396][ T7121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.449111][ T7210] ata1.00: invalid multi_count 128 ignored [ 139.534236][ T7121] veth0_vlan: entered promiscuous mode [ 139.542385][ T7217] Bluetooth: MGMT ver 1.23 [ 139.544954][ T7121] veth1_vlan: entered promiscuous mode [ 139.584187][ T7121] veth0_macvtap: entered promiscuous mode [ 139.588996][ T7121] veth1_macvtap: entered promiscuous mode [ 139.601044][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.611057][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.626571][ T4320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.630683][ T4320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.637005][ T4320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.642390][ T4320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.733905][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.737578][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.776546][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.783602][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.867368][ T7236] ip6tnl1: entered promiscuous mode [ 139.991817][ T7247] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 140.042184][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.045547][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.048364][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.050983][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.056588][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.059893][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.063848][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.067680][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.071027][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.075051][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.078483][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.081592][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.087325][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.090422][ T7254] 9pnet_virtio: no channels available for device /dev/sg# [ 140.100718][ T7258] ALSA: seq fatal error: cannot create timer (-22) [ 140.479799][ T7285] netlink: 48 bytes leftover after parsing attributes in process `syz.3.374'. [ 140.530157][ T7281] kvm: kvm [7275]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000053) = 0x3 [ 140.717116][ T7306] fuse: Bad value for 'user_id' [ 140.719265][ T7306] fuse: Bad value for 'user_id' [ 140.723219][ T7306] netlink: 40 bytes leftover after parsing attributes in process `syz.2.382'. [ 140.888107][ T7311] overlayfs: missing 'workdir' [ 140.890991][ T7311] xt_cgroup: invalid path, errno=-2 [ 140.893203][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'. [ 140.994215][ T7318] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.999001][ T7318] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.012683][ T7318] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.020752][ T7318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.024645][ T7318] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.030401][ T7318] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.035531][ T7318] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.038558][ T7318] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.059434][ T7318] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.065126][ T5950] Bluetooth: hci0: command tx timeout [ 141.091761][ T7318] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.094601][ T7318] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.101965][ T7318] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.239828][ T5950] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 141.250504][ T7340] fuse: Unknown parameter 'r' [ 141.312864][ T7349] netlink: 'syz.2.397': attribute type 3 has an invalid length. [ 141.316814][ T7349] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 141.319646][ T7349] netlink: 224 bytes leftover after parsing attributes in process `syz.2.397'. [ 141.327382][ T7349] NCSI netlink: No device for ifindex 0 [ 141.331304][ T7351] syzkaller1: entered promiscuous mode [ 141.335296][ T7351] syzkaller1: entered allmulticast mode [ 141.345090][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 141.387744][ T7352] erspan1: entered promiscuous mode [ 141.414350][ T7356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7356 comm=syz.2.399 [ 141.638566][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 142.567665][ T7411] IPv6: Can't replace route, no match found [ 142.684617][ T7410] could not allocate digest TFM handle cryptd(blake2b-160) [ 142.862687][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 143.014342][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.018671][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 143.023643][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.027695][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 143.032292][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 143.039173][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.044043][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.047895][ T9] usb 7-1: Product: syz [ 143.049884][ T9] usb 7-1: Manufacturer: syz [ 143.059535][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 143.061866][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 143.062631][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 143.064595][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.064725][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.077218][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 143.080246][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 143.142727][ T5959] Bluetooth: hci0: command 0x0419 tx timeout [ 143.258781][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 143.258798][ T40] audit: type=1400 audit(1767621905.083:449): avc: denied { read write } for pid=7408 comm="syz.2.418" name="cdc-wdm0" dev="devtmpfs" ino=2898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 143.272039][ T40] audit: type=1400 audit(1767621905.083:450): avc: denied { open } for pid=7408 comm="syz.2.418" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 143.319253][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 143.319400][ T6042] usb 7-1: USB disconnect, device number 3 [ 143.322612][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 143.327511][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 143.556017][ T40] audit: type=1400 audit(1767621905.383:451): avc: denied { setopt } for pid=7431 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.570617][ T40] audit: type=1400 audit(1767621905.403:452): avc: denied { sqpoll } for pid=7408 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 143.752641][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 143.914378][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 143.917644][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.921528][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 143.927211][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.930643][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.933406][ T9] usb 6-1: Product: syz [ 143.934810][ T9] usb 6-1: Manufacturer: syz [ 143.936485][ T9] usb 6-1: SerialNumber: syz [ 144.178819][ T9] usb 6-1: USB disconnect, device number 3 [ 144.206634][ T6883] udevd[6883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.238779][ T7442] geneve2: entered promiscuous mode [ 144.241318][ T7442] geneve2: entered allmulticast mode [ 144.277214][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 144.281632][ T7444] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 144.325750][ T7446] fuse: Unknown parameter 'root' [ 144.334486][ T40] audit: type=1400 audit(1767621906.163:453): avc: denied { read } for pid=7445 comm="syz.3.426" path="socket:[19351]" dev="sockfs" ino=19351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.378748][ T7450] netlink: 'syz.3.428': attribute type 4 has an invalid length. [ 144.390978][ T7450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7450 comm=syz.3.428 [ 144.407856][ T40] audit: type=1400 audit(1767621906.233:454): avc: denied { bind } for pid=7451 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.752336][ T7471] fuse: Bad value for 'fd' [ 144.881417][ T40] audit: type=1400 audit(1767621906.703:455): avc: denied { read write } for pid=7475 comm="syz.1.439" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.889955][ T40] audit: type=1400 audit(1767621906.703:456): avc: denied { open } for pid=7475 comm="syz.1.439" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.930569][ T7478] overlayfs: failed to verify index (index/00fb2100018b3d9d742f4742c5acd40109da0c9682b5c5f554a002000000000000, ftype=2000, err=-61) [ 144.935208][ T7478] overlayfs: failed index dir cleanup (-61) [ 144.937384][ T7478] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 145.142852][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.142969][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.143113][ T5958] Bluetooth: hci3: command 0x0405 tx timeout [ 145.232647][ T5950] Bluetooth: hci0: command 0x0419 tx timeout [ 145.609753][ T40] audit: type=1400 audit(1767621907.433:457): avc: denied { execstack } for pid=7491 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 145.682612][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 145.844783][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.850082][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.854569][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.858303][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.865471][ T7490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.871545][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.077417][ T54] usb 9-1: USB disconnect, device number 2 [ 146.269889][ T7503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.326260][ T7502] netlink: 'syz.3.449': attribute type 2 has an invalid length. [ 146.486987][ T40] audit: type=1400 audit(1767621908.313:458): avc: denied { remount } for pid=7516 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.709650][ T7525] fuse: Bad value for 'fd' [ 146.933673][ T7531] netlink: 'syz.3.458': attribute type 7 has an invalid length. [ 146.937129][ T7531] netlink: 'syz.3.458': attribute type 8 has an invalid length. [ 147.223188][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 147.233021][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.233068][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.302816][ T5959] Bluetooth: hci0: command 0x0419 tx timeout [ 147.525112][ T7558] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 148.134827][ T7581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=7581 comm=syz.2.471 [ 148.389830][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 148.389848][ T40] audit: type=1400 audit(1767621910.213:461): avc: denied { read } for pid=7588 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.491043][ T40] audit: type=1400 audit(1767621910.313:462): avc: denied { setopt } for pid=7590 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.573283][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 148.673654][ T7598] netlink: 48 bytes leftover after parsing attributes in process `syz.3.478'. [ 148.797018][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.481'. [ 148.827027][ T7609] IPVS: set_ctl: invalid protocol: 50 172.20.20.11:21 [ 148.835675][ T7609] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 149.255105][ T40] audit: type=1400 audit(1767621911.083:463): avc: denied { read } for pid=7617 comm="syz.4.486" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 149.265013][ T40] audit: type=1400 audit(1767621911.083:464): avc: denied { open } for pid=7617 comm="syz.4.486" path="/22/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 149.272254][ T40] audit: type=1400 audit(1767621911.093:465): avc: denied { ioctl } for pid=7617 comm="syz.4.486" path="/22/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 149.382804][ T5959] Bluetooth: hci0: command 0x0419 tx timeout [ 150.379950][ T7637] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.388002][ T7637] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.391113][ T7637] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.403085][ T40] audit: type=1400 audit(1767621912.233:466): avc: denied { name_bind } for pid=7654 comm="syz.2.496" src=882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 150.587797][ T7672] netlink: 104 bytes leftover after parsing attributes in process `syz.4.498'. [ 150.595048][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 150.734315][ T217] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.819027][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.831655][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.832684][ T217] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.841063][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.845319][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.848635][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.968386][ T217] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.075997][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 151.110288][ T217] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.202139][ T7686] chnl_net:caif_netlink_parms(): no params data found [ 151.280099][ T7712] kvm: kvm [7694]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000053) = 0x3 [ 151.334196][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.336874][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.339412][ T7686] bridge_slave_0: entered allmulticast mode [ 151.343538][ T7686] bridge_slave_0: entered promiscuous mode [ 151.347648][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.352948][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.355350][ T7686] bridge_slave_1: entered allmulticast mode [ 151.359017][ T7686] bridge_slave_1: entered promiscuous mode [ 151.403723][ T217] bridge_slave_1: left allmulticast mode [ 151.406187][ T217] bridge_slave_1: left promiscuous mode [ 151.408716][ T217] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.420965][ T217] bridge_slave_0: left allmulticast mode [ 151.424223][ T217] bridge_slave_0: left promiscuous mode [ 151.426985][ T217] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.622924][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.851331][ T217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.858394][ T217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.866045][ T217] bond0 (unregistering): Released all slaves [ 151.884294][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.899924][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.907498][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.934357][ T7730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.999714][ T7739] comedi comedi1: comedi_config --init_data is deprecated [ 152.008121][ T7686] team0: Port device team_slave_0 added [ 152.016086][ T7686] team0: Port device team_slave_1 added [ 152.068219][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.071189][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.082410][ T7686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.088686][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.091840][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.109079][ T7686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.190677][ T7686] hsr_slave_0: entered promiscuous mode [ 152.195970][ T7686] hsr_slave_1: entered promiscuous mode [ 152.253331][ T217] hsr_slave_0: left promiscuous mode [ 152.256148][ T217] hsr_slave_1: left promiscuous mode [ 152.258526][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.261297][ T217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.265786][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.268324][ T217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.281573][ T217] veth1_macvtap: left promiscuous mode [ 152.284618][ T217] veth0_macvtap: left promiscuous mode [ 152.286585][ T217] veth1_vlan: left promiscuous mode [ 152.288271][ T217] veth0_vlan: left promiscuous mode [ 152.422686][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 152.425479][ T5959] Bluetooth: hci0: command 0x0419 tx timeout [ 152.702006][ T217] team0 (unregistering): Port device team_slave_1 removed [ 152.739593][ T217] team0 (unregistering): Port device team_slave_0 removed [ 152.908121][ T5959] Bluetooth: hci2: command tx timeout [ 152.932267][ T7761] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 153.047740][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 153.097808][ T7761] bond1: entered promiscuous mode [ 153.100271][ T7761] bond1: entered allmulticast mode [ 153.103037][ T7761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.113964][ T7763] erspan1: entered allmulticast mode [ 153.120011][ T7763] bond1: (slave erspan1): making interface the new active one [ 153.123264][ T7763] erspan1: entered promiscuous mode [ 153.125902][ T7763] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 153.215531][ T7765] bond1 (unregistering): (slave erspan1): Releasing active interface [ 153.218502][ T7765] erspan1: left promiscuous mode [ 153.222414][ T7765] bond1 (unregistering): Released all slaves [ 153.361224][ T40] audit: type=1400 audit(1767621915.173:467): avc: denied { setopt } for pid=7770 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.379794][ T40] audit: type=1400 audit(1767621915.203:468): avc: denied { bind } for pid=7770 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.389697][ T7775] bond1: Unable to set down delay as MII monitoring is disabled [ 153.394661][ T7775] bond1 (unregistering): Released all slaves [ 153.414868][ T40] audit: type=1400 audit(1767621915.243:469): avc: denied { bind } for pid=7770 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.429197][ T7771] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3873901568 (7747803136 ns) > initial count (10 ns). Using initial count to start timer. [ 153.433269][ T40] audit: type=1400 audit(1767621915.243:470): avc: denied { listen } for pid=7770 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.467104][ T7686] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.478773][ T7686] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.491418][ T7686] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.499081][ T7686] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.572519][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.596761][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.610542][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.612942][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.631817][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.634810][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.635212][ T217] IPVS: stop unused estimator thread 0... [ 153.790774][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.972275][ T7686] veth0_vlan: entered promiscuous mode [ 153.983864][ T7686] veth1_vlan: entered promiscuous mode [ 154.017615][ T7686] veth0_macvtap: entered promiscuous mode [ 154.024389][ T7686] veth1_macvtap: entered promiscuous mode [ 154.040387][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.050417][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.059791][ T1143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.066293][ T1143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.071343][ T1143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.075568][ T1143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.117009][ T6094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.120972][ T6094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.151456][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.154397][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.175649][ T40] audit: type=1400 audit(1767621916.003:471): avc: denied { mounton } for pid=7686 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 154.232877][ T40] audit: type=1400 audit(1767621916.063:472): avc: denied { write } for pid=7826 comm="syz.5.503" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 154.244095][ T40] audit: type=1400 audit(1767621916.063:473): avc: denied { read append } for pid=7826 comm="syz.5.503" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.244375][ T7827] fuse: Bad value for 'group_id' [ 154.255619][ T40] audit: type=1400 audit(1767621916.063:474): avc: denied { open } for pid=7826 comm="syz.5.503" path="/dev/usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.256735][ T7827] fuse: Bad value for 'group_id' [ 154.923732][ T40] audit: type=1400 audit(1767621916.753:475): avc: denied { getopt } for pid=7841 comm="syz.1.531" lport=37730 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 154.967498][ T40] audit: type=1400 audit(1767621916.793:476): avc: denied { write } for pid=7843 comm="syz.1.532" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.983448][ T5959] Bluetooth: hci2: command tx timeout [ 155.029972][ T7848] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.355044][ T217] Bluetooth: (null): Too short H5 packet [ 155.358042][ T4320] Bluetooth: (null): Invalid header checksum [ 155.617269][ T7861] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.620082][ T7861] overlayfs: failed to set xattr on upper [ 155.622088][ T7861] overlayfs: ...falling back to redirect_dir=nofollow. [ 155.627703][ T7861] overlayfs: ...falling back to index=off. [ 155.629672][ T7861] overlayfs: ...falling back to uuid=null. [ 155.634472][ T40] audit: type=1400 audit(1767621917.463:477): avc: denied { link } for pid=7860 comm="syz.5.539" name="file1" dev="overlay" ino=24513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 155.642187][ T40] audit: type=1400 audit(1767621917.463:478): avc: denied { setattr } for pid=7860 comm="syz.5.539" name="#6b" dev="ramfs" ino=24514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 156.384578][ T7885] virtio-fs: tag not found [ 156.648481][ T7890] binder: 7888:7890 ioctl 40046210 0 returned -14 [ 156.906677][ T7905] veth1_to_bond: entered allmulticast mode [ 156.924612][ T7905] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 156.949866][ T7905] geneve2: entered promiscuous mode [ 156.951640][ T7905] geneve2: entered allmulticast mode [ 156.960576][ T7905] bond1: (slave geneve2): making interface the new active one [ 156.964252][ T7905] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 156.967450][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 156.970779][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 156.984625][ T7904] veth1_to_bond: left allmulticast mode [ 156.990281][ T4320] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 156.992431][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.549'. [ 156.994717][ T4320] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 157.067384][ T5959] Bluetooth: hci2: command tx timeout [ 157.212647][ T6039] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 157.262641][ T6027] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 157.362728][ T6039] usb 6-1: Using ep0 maxpacket: 8 [ 157.369370][ T6039] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.375470][ T6039] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.380244][ T6039] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.384901][ T6039] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.391022][ T6039] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.396271][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.412661][ T6027] usb 9-1: Using ep0 maxpacket: 8 [ 157.418185][ T6027] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 157.422766][ T6027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.437045][ T6027] pvrusb2: Hardware description: Terratec Grabster AV400 [ 157.440320][ T6027] pvrusb2: ********** [ 157.441790][ T6027] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 157.445765][ T6027] pvrusb2: Important functionality might not be entirely working. [ 157.448269][ T6027] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 157.452364][ T6027] pvrusb2: ********** [ 157.610477][ T6039] usb 6-1: GET_CAPABILITIES returned 0 [ 157.613022][ T6039] usbtmc 6-1:16.0: can't read capabilities [ 157.653595][ T2488] pvrusb2: Invalid write control endpoint [ 157.689607][ T2488] pvrusb2: Invalid write control endpoint [ 157.691762][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 157.696150][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 157.699603][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 157.706086][ T2488] pvrusb2: Device being rendered inoperable [ 157.710070][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 157.714133][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 157.719470][ T2488] pvrusb2: Attached sub-driver cx25840 [ 157.721621][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 157.725506][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 157.817408][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.821383][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.825308][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.829164][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.832907][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.837292][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.841606][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.845485][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.851504][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.851889][ T7915] pvrusb2: Attempted to execute control transfer when device not ok [ 157.855299][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.855333][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.855353][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.855372][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.855876][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.875593][ T7915] pvrusb2: Attempted to execute control transfer when device not ok [ 157.876890][ T828] usb 9-1: USB disconnect, device number 3 [ 157.880218][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.890203][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 158.010475][ T6042] usb 6-1: USB disconnect, device number 4 [ 158.094560][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.559'. [ 158.609055][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 158.609075][ T40] audit: type=1400 audit(1767621920.433:486): avc: denied { map } for pid=7935 comm="syz.1.561" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.664477][ T7936] block nbd0: server does not support multiple connections per device. [ 158.670729][ T7936] block nbd0: shutting down sockets [ 159.124730][ T40] audit: type=1400 audit(1767621920.953:487): avc: denied { ioctl } for pid=7953 comm="syz.5.567" path="cgroup:[4026532884]" dev="nsfs" ino=4026532884 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.136466][ T40] audit: type=1400 audit(1767621920.953:488): avc: denied { ioctl } for pid=7953 comm="syz.5.567" path="socket:[25405]" dev="sockfs" ino=25405 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.152803][ T5959] Bluetooth: hci2: command tx timeout [ 159.303696][ T40] audit: type=1400 audit(1767621921.133:489): avc: denied { lock } for pid=7959 comm="syz.1.570" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.500469][ T7968] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 159.504280][ T7968] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 159.508577][ T7968] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 159.509944][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 159.512181][ T7968] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 159.694169][ T7985] xt_ecn: cannot match TCP bits for non-tcp packets [ 159.846829][ T40] audit: type=1400 audit(1767621921.673:490): avc: denied { ioctl } for pid=7991 comm="syz.4.582" path="socket:[26991]" dev="sockfs" ino=26991 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.065744][ T8003] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 160.379184][ T8012] netlink: 'syz.5.589': attribute type 9 has an invalid length. [ 160.383118][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.589'. [ 160.449888][ T8013] overlay: ./bus is not a directory [ 160.560719][ T8015] fuse: Unknown parameter '00000000000000000000003' [ 160.917551][ T8025] netlink: 'syz.4.594': attribute type 1 has an invalid length. [ 160.938986][ T8025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.945850][ T8025] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 160.953430][ T8025] bond2: entered allmulticast mode [ 160.969236][ T8025] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 161.124027][ T40] audit: type=1326 audit(1767621922.943:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.2.596" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa0678f7c9 code=0x0 [ 161.160300][ T8034] netlink: 'syz.1.595': attribute type 9 has an invalid length. [ 161.168180][ T40] audit: type=1400 audit(1767621922.993:492): avc: denied { mounton } for pid=8032 comm="syz.4.597" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.535868][ T6092] hid (null): invalid report_size 3070 [ 161.538332][ T6092] hid (null): global environment stack underflow [ 161.540826][ T6092] hid (null): unknown global tag 0xd [ 161.547543][ T6092] hid (null): report_id 14262 is invalid [ 161.549800][ T6092] hid (null): unknown global tag 0xff [ 161.555563][ T6092] hid (null): bogus close delimiter [ 161.558363][ T6092] hid (null): global environment stack underflow [ 161.561503][ T6092] hid (null): unknown global tag 0xc [ 161.568446][ T6092] hid (null): report_id 0 is invalid [ 161.570458][ T6092] hid (null): unknown global tag 0xe [ 161.572433][ T6092] hid (null): report_id 51044 is invalid [ 161.574995][ T6092] hid (null): unknown global tag 0xd [ 161.576961][ T6092] hid (null): report_id 20854 is invalid [ 161.579036][ T6092] hid (null): global environment stack overflow [ 161.581322][ T6092] hid (null): unknown global tag 0xc [ 161.585986][ T6092] hid (null): unknown global tag 0xe [ 161.588356][ T6092] hid (null): unknown global tag 0xe [ 161.591234][ T8060] comedi comedi0: board detection failed [ 161.594638][ T6092] hid (null): unknown global tag 0xd [ 161.597439][ T6092] hid (null): unknown global tag 0xd [ 161.599453][ T6092] hid (null): unknown global tag 0xe [ 161.601476][ T6092] hid (null): unknown global tag 0xe [ 161.604933][ T6092] hid (null): invalid report_count 19338 [ 161.607315][ T6092] hid (null): unknown global tag 0xc [ 161.609534][ T6092] hid (null): report_id 0 is invalid [ 161.611615][ T6092] hid (null): report_id 90727798 is invalid [ 161.614454][ T6092] hid (null): unknown global tag 0xe [ 161.616543][ T6092] hid (null): unknown global tag 0xc [ 161.618545][ T6092] hid (null): global environment stack overflow [ 161.621354][ T6092] hid (null): unknown global tag 0x87 [ 161.624185][ T6092] hid (null): global environment stack overflow [ 161.626716][ T6092] hid (null): global environment stack overflow [ 161.629796][ T6092] hid (null): invalid report_count 24347 [ 161.630326][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.5.603'. [ 161.631997][ T6092] hid (null): unknown global tag 0x6a [ 161.632043][ T6092] hid (null): unknown global tag 0xe [ 161.641400][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.5.603'. [ 161.643472][ T6092] hid (null): unknown global tag 0xe [ 161.652603][ T6092] hid (null): unknown global tag 0x83 [ 161.654390][ T40] audit: type=1400 audit(1767621923.483:493): avc: denied { getopt } for pid=8059 comm="syz.5.603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 161.654752][ T6092] hid (null): unknown global tag 0xd [ 161.682611][ T6092] hid (null): invalid report_count 23709 [ 161.684667][ T6092] hid (null): report_id 764514076 is invalid [ 161.686827][ T6092] hid (null): unknown global tag 0xd [ 161.688785][ T6092] hid (null): report_id 0 is invalid [ 161.696029][ T6092] hid-generic 0008:0003:0009.0003: unknown main item tag 0x2 [ 161.699143][ T6092] hid-generic 0008:0003:0009.0003: invalid report_size 3070 [ 161.701916][ T6092] hid-generic 0008:0003:0009.0003: item 0 2 1 7 parsing failed [ 161.707661][ T6092] hid-generic 0008:0003:0009.0003: probe with driver hid-generic failed with error -22 [ 161.876948][ T8075] netlink: 72 bytes leftover after parsing attributes in process `syz.4.607'. [ 162.101623][ T40] audit: type=1400 audit(1767621923.923:494): avc: denied { connect } for pid=8088 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 162.334929][ T8095] sd 0:0:0:0: PR command failed: 1026 [ 162.337032][ T8095] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 162.339864][ T8095] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 162.500366][ T8107] Failed to get privilege flags for destination (handle=0x0:0x0) [ 163.660297][ T8134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=8134 comm=syz.5.625 [ 163.666781][ T8135] overlayfs: missing 'lowerdir' [ 163.853675][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 163.871246][ T8141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.884182][ T8141] bond1: (slave batadv1): Opening slave failed [ 163.929590][ T8148] syzkaller1: entered promiscuous mode [ 163.931514][ T8148] syzkaller1: entered allmulticast mode [ 163.938087][ T8147] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.354559][ T40] audit: type=1400 audit(1767621926.183:495): avc: denied { read } for pid=8160 comm="syz.1.632" path="socket:[27360]" dev="sockfs" ino=27360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.612693][ T6027] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 164.752808][ T8173] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.757184][ T8173] fuse: Unknown parameter 'r00p0000000020000' [ 164.763750][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 164.774184][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 164.779041][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.788331][ T6027] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.792259][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 164.796696][ T6027] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 164.800753][ T6027] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 164.805139][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.810871][ T6027] usb 6-1: config 0 descriptor?? [ 164.834459][ T5959] Bluetooth: hci4: urb ffff88802c370a00 submission failed (90) [ 165.002796][ T6027] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 165.016922][ T54] usb 6-1: USB disconnect, device number 5 [ 165.132850][ T6027] usb 10-1: device descriptor read/64, error -71 [ 165.372721][ T6027] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 165.502649][ T6027] usb 10-1: device descriptor read/64, error -71 [ 165.571883][ T40] audit: type=1400 audit(1767621927.393:496): avc: denied { create } for pid=8181 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 165.587038][ T40] audit: type=1400 audit(1767621927.413:497): avc: denied { sys_admin } for pid=8181 comm="syz.1.637" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 165.612914][ T6027] usb usb10-port1: attempt power cycle [ 165.663720][ T8189] comedi comedi1: dac02: I/O port conflict (0x2,8) [ 165.821811][ T8204] netlink: 'syz.1.642': attribute type 7 has an invalid length. [ 165.972844][ T6027] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 165.993664][ T6027] usb 10-1: device descriptor read/8, error -71 [ 166.030895][ T40] audit: type=1400 audit(1767621927.853:498): avc: denied { ioctl } for pid=8206 comm="syz.2.643" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 166.052205][ T8201] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 166.053488][ T40] audit: type=1400 audit(1767621927.863:499): avc: denied { setattr } for pid=8206 comm="syz.2.643" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 166.061509][ T8201] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.225782][ T40] audit: type=1400 audit(1767621928.053:500): avc: denied { relabelfrom } for pid=8226 comm="syz.1.648" name="NETLINK" dev="sockfs" ino=28125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 166.226452][ T8227] SELinux: Context system_u:object_r:initctl_t:s0 is not valid (left unmapped). [ 166.242570][ T6027] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 166.246371][ T40] audit: type=1400 audit(1767621928.073:501): avc: denied { relabelto } for pid=8226 comm="syz.1.648" name="NETLINK" dev="sockfs" ino=28125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:initctl_t:s0" [ 166.266637][ T6027] usb 10-1: device descriptor read/8, error -71 [ 166.311550][ T8231] input: syz0 as /devices/virtual/input/input6 [ 166.316781][ T40] audit: type=1400 audit(1767621928.153:502): avc: denied { listen } for pid=8232 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 166.325520][ T40] audit: type=1400 audit(1767621928.153:503): avc: denied { accept } for pid=8232 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 166.383639][ T6027] usb usb10-port1: unable to enumerate USB device [ 166.788023][ T8244] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 166.791246][ T8244] tmpfs: Unknown parameter 'nr_' [ 166.863757][ T8248] netlink: 'syz.2.655': attribute type 4 has an invalid length. [ 167.437220][ T8259] fuse: Bad value for 'fd' [ 167.641225][ T40] audit: type=1326 audit(1767621929.463:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.1.660" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f1b8f7c9 code=0x0 [ 168.136010][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.663'. [ 168.139603][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.663'. [ 168.688565][ T8298] Cannot find add_set index 46338 as target [ 168.700739][ T8298] rdma_op ffff888031d9f9f0 conn xmit_rdma 0000000000000000 [ 168.705396][ T8298] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 168.723463][ T8298] bond1: entered promiscuous mode [ 168.725555][ T8298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.737349][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 168.740667][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'. [ 169.048249][ T6092] libceph: connect (1)[c::]:6789 error -101 [ 169.051610][ T6092] libceph: mon0 (1)[c::]:6789 connect error [ 169.122254][ T8314] ceph: No mds server is up or the cluster is laggy [ 169.749148][ T8323] netlink: 100 bytes leftover after parsing attributes in process `syz.5.677'. [ 169.959959][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 169.959975][ T40] audit: type=1400 audit(1767621931.783:515): avc: denied { read } for pid=8328 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.014328][ T8335] netlink: 88 bytes leftover after parsing attributes in process `syz.1.680'. [ 170.015004][ T8334] xfrm1: entered allmulticast mode [ 170.024144][ T40] audit: type=1400 audit(1767621931.843:516): avc: denied { view } for pid=8333 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 170.193691][ T8341] 9p: Could not find request transport: vir [ 170.362537][ T40] audit: type=1326 audit(1767621932.183:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.2.685" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa0678f7c9 code=0x0 [ 170.820391][ T40] audit: type=1326 audit(1767621932.643:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8350 comm="syz.1.687" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f1b8f7c9 code=0x0 [ 171.689209][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.692'. [ 171.689234][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.692'. [ 171.692880][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.692'. [ 171.700698][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.692'. [ 171.964912][ T5959] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 172.523074][ T8411] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 172.547411][ T8411] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.565155][ T8411] bond3: (slave erspan1): making interface the new active one [ 172.569257][ T8411] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 172.640566][ T8422] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.708'. [ 172.646138][ T8422] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 173.283755][ T8456] netlink: 25 bytes leftover after parsing attributes in process `syz.1.713'. [ 173.288891][ T8456] sit0: entered promiscuous mode [ 173.367423][ T40] audit: type=1326 audit(1767621935.193:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.715" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x0 [ 173.437429][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 173.789241][ T8482] overlayfs: failed to clone upperpath [ 173.862032][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 173.914815][ T40] audit: type=1326 audit(1767621935.743:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.1.725" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f1b8f7c9 code=0x0 [ 174.257434][ T8497] nbd: must specify at least one socket [ 174.291652][ T40] audit: type=1400 audit(1767621936.113:521): avc: denied { write } for pid=8498 comm="syz.5.729" name="file0" dev="9p" ino=71827861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.304931][ T8499] 9pnet_virtio: no channels available for device syz [ 174.306609][ T40] audit: type=1400 audit(1767621936.113:522): avc: denied { open } for pid=8498 comm="syz.5.729" path="/45/file0/file0" dev="9p" ino=71827861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.315862][ T40] audit: type=1400 audit(1767621936.123:523): avc: denied { setattr } for pid=8498 comm="syz.5.729" name="/" dev="9p" ino=71827819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.497629][ T8512] ip6gre1: entered promiscuous mode [ 174.500164][ T8512] ip6gre1: entered allmulticast mode [ 174.506972][ T217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.511109][ T217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.532702][ T828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.565792][ T8514] netlink: 'syz.5.733': attribute type 14 has an invalid length. [ 174.802680][ T828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.053288][ T40] audit: type=1400 audit(1767621936.883:524): avc: denied { add_name } for pid=8523 comm="syz.2.735" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.066460][ T40] audit: type=1400 audit(1767621936.883:525): avc: denied { create } for pid=8523 comm="syz.2.735" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 175.074981][ T40] audit: type=1400 audit(1767621936.883:526): avc: denied { associate } for pid=8523 comm="syz.2.735" name="blkio.bfq.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 175.086574][ T40] audit: type=1400 audit(1767621936.883:527): avc: denied { read append } for pid=8523 comm="syz.2.735" path="/155/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=71827939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.098754][ T40] audit: type=1400 audit(1767621936.883:528): avc: denied { map } for pid=8523 comm="syz.2.735" path="/155/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=71827939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.312611][ T828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.342382][ T8537] openvswitch: netlink: Message has 592 unknown bytes. [ 175.345772][ T8537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.359204][ T8538] openvswitch: netlink: Message has 592 unknown bytes. [ 175.365782][ T8538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.457612][ T40] audit: type=1400 audit(1767621937.283:529): avc: denied { accept } for pid=8546 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.487716][ T4944] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.493449][ T4944] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.497461][ T4944] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.501484][ T4944] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.518483][ T8550] overlay: ./file0 is not a directory [ 175.770612][ T8550] mmap: syz.2.741 (8550) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.862679][ T34] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 176.012614][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 176.015765][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.018089][ T34] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 176.021243][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.025527][ T5959] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 176.028874][ T5959] Bluetooth: hci0: Injecting HCI hardware error event [ 176.033990][ T34] usb 10-1: config 0 descriptor?? [ 176.036563][ T5950] Bluetooth: hci0: hardware error 0x00 [ 176.056885][ T40] audit: type=1400 audit(1767621937.883:530): avc: denied { mount } for pid=8577 comm="syz.1.753" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 176.460724][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 176.463501][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 176.465864][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 176.469314][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 176.472090][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 176.475295][ T34] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 176.616107][ T40] audit: type=1400 audit(1767621938.443:531): avc: denied { getopt } for pid=8582 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.667992][ T6042] usb 10-1: USB disconnect, device number 6 [ 176.767710][ T8590] __nla_validate_parse: 2 callbacks suppressed [ 176.767731][ T8590] netlink: 92 bytes leftover after parsing attributes in process `syz.1.756'. [ 176.852944][ T8597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.759'. [ 176.857652][ T8597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.759'. [ 176.976693][ T40] audit: type=1326 audit(1767621938.803:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.2.761" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa0678f7c9 code=0x0 [ 176.984475][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 176.990797][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.762'. [ 177.418378][ T8629] xt_hashlimit: size too large, truncated to 1048576 [ 177.435139][ T40] audit: type=1400 audit(1767621939.263:533): avc: denied { module_load } for pid=8630 comm="syz.5.771" path="/54/bus" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 177.443141][ T8631] Invalid ELF header magic: != ELF [ 177.588501][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 177.681303][ T8647] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 177.740286][ T8650] fuse: Invalid rootmode [ 177.847731][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.779'. [ 177.851659][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.779'. [ 178.102721][ T5950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 178.283885][ T8675] syzkaller0: entered promiscuous mode [ 178.285838][ T8675] syzkaller0: entered allmulticast mode [ 178.474661][ T8679] netlink: 'syz.4.787': attribute type 10 has an invalid length. [ 178.477346][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.787'. [ 178.504106][ T8679] team0: Port device geneve0 added [ 178.607007][ T8686] ip6erspan0: entered promiscuous mode [ 178.672646][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.773471][ T8698] netlink: 'syz.5.795': attribute type 21 has an invalid length. [ 178.776707][ T8698] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.865303][ T8710] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 178.882014][ T8710] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 178.893925][ T8710] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 178.900347][ T8710] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 178.902208][ T8712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.801'. [ 178.921382][ T8710] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 178.937384][ T8710] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 178.946774][ T8710] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 178.947518][ T8712] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 178.955840][ T8712] netlink: 'syz.2.801': attribute type 3 has an invalid length. [ 179.095506][ T8737] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.101004][ T8737] block device autoloading is deprecated and will be removed. [ 179.105819][ T8729] netlink: 'syz.4.804': attribute type 10 has an invalid length. [ 179.110183][ T8734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8734 comm=syz.2.803 [ 179.111440][ T8726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8726 comm=syz.2.803 [ 179.119068][ T8729] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 179.147587][ T8736] fuse: Unknown parameter 'ìõÕ¤„AÄ·—$LJVNäÕÜøÆI+#ªG8”gîI*Ú´{' [ 179.153911][ T8736] netlink: 'syz.5.807': attribute type 2 has an invalid length. [ 179.442555][ T6039] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 179.505994][ T8761] ucma_write: process 501 (syz.2.814) changed security contexts after opening file descriptor, this is not allowed. [ 179.592788][ T6039] usb 10-1: Using ep0 maxpacket: 8 [ 179.597064][ T6039] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 179.601206][ T6039] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.610371][ T6039] pvrusb2: Hardware description: Terratec Grabster AV400 [ 179.614144][ T6039] pvrusb2: ********** [ 179.615836][ T6039] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 179.620447][ T6039] pvrusb2: Important functionality might not be entirely working. [ 179.624111][ T6039] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 179.629204][ T6039] pvrusb2: ********** [ 179.792664][ T3246] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 179.814558][ T2488] pvrusb2: Invalid write control endpoint [ 179.857444][ T2488] pvrusb2: Invalid write control endpoint [ 179.860381][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 179.864107][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 179.866937][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 179.870509][ T2488] pvrusb2: Device being rendered inoperable [ 179.874025][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 179.876286][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 179.882875][ T2488] pvrusb2: Attached sub-driver cx25840 [ 179.884661][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 179.888065][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 179.962740][ T3246] usb 7-1: Using ep0 maxpacket: 8 [ 179.966672][ T3246] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 179.970065][ T3246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.981164][ T3246] pvrusb2: Hardware description: Terratec Grabster AV400 [ 179.984387][ T3246] pvrusb2: ********** [ 179.986153][ T3246] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 179.989379][ T3246] pvrusb2: Important functionality might not be entirely working. [ 179.992108][ T3246] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 179.996299][ T3246] pvrusb2: ********** [ 180.022579][ T8748] pvrusb2: Attempted to execute control transfer when device not ok [ 180.035796][ T8748] pvrusb2: Attempted to execute control transfer when device not ok [ 180.039732][ T6118] usb 10-1: USB disconnect, device number 7 [ 180.177943][ T2488] pvrusb2: Invalid write control endpoint [ 180.216364][ T2488] pvrusb2: Invalid write control endpoint [ 180.218923][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 180.223418][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 180.227831][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 180.232108][ T2488] pvrusb2: Device being rendered inoperable [ 180.235242][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 180.238703][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 180.247413][ T2488] pvrusb2: Attached sub-driver cx25840 [ 180.249534][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 180.253428][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 180.378756][ T8766] pvrusb2: Attempted to execute control transfer when device not ok [ 180.389496][ T8766] pvrusb2: Attempted to execute control transfer when device not ok [ 180.394074][ T3246] usb 7-1: USB disconnect, device number 4 [ 180.996657][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 180.996678][ T40] audit: type=1326 audit(1767621942.823:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.1.827" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f1b8f7c9 code=0x0 [ 181.023765][ T40] audit: type=1400 audit(1767621942.853:552): avc: denied { setopt } for pid=8806 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.091724][ T40] audit: type=1400 audit(1767621942.913:553): avc: denied { accept } for pid=8811 comm="syz.2.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 181.129648][ T40] audit: type=1400 audit(1767621942.953:554): avc: denied { remount } for pid=8814 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 181.158443][ T40] audit: type=1400 audit(1767621942.983:555): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 181.850835][ T40] audit: type=1400 audit(1767621943.673:556): avc: denied { name_connect } for pid=8830 comm="syz.2.835" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 181.863692][ T8833] __nla_validate_parse: 52 callbacks suppressed [ 181.863710][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 181.917132][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 181.923130][ T8837] netlink: 72 bytes leftover after parsing attributes in process `syz.1.836'. [ 182.016584][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 182.019639][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 182.023692][ T8841] netlink: 'syz.2.839': attribute type 11 has an invalid length. [ 182.028475][ T8841] netlink: 'syz.2.839': attribute type 7 has an invalid length. [ 182.302907][ T40] audit: type=1400 audit(1767621944.133:557): avc: denied { ioctl } for pid=8849 comm="syz.2.842" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 182.350777][ T8852] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.414095][ T40] audit: type=1400 audit(1767621944.243:558): avc: denied { setopt } for pid=8853 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.738956][ T8872] netlink: 76 bytes leftover after parsing attributes in process `syz.2.850'. [ 182.744101][ T40] audit: type=1400 audit(1767621944.573:559): avc: denied { getopt } for pid=8871 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.785431][ T8874] ip6erspan0: entered promiscuous mode [ 182.871361][ T40] audit: type=1400 audit(1767621944.693:560): avc: denied { map } for pid=8879 comm="syz.2.853" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 183.034129][ T8896] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 183.055196][ T8896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.098902][ T8896] bond4: (slave veth9): Enslaving as an active interface with a down link [ 183.112402][ T8896] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 183.115917][ T8896] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 183.210114][ T8908] overlay: Bad value for 'workdir' [ 183.474851][ T8940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8940 comm=syz.1.871 [ 183.651454][ T8948] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.875'. [ 183.880487][ T8954] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 183.896450][ T8954] cramfs: wrong magic [ 184.152592][ T54] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 184.282631][ T54] usb 7-1: device descriptor read/64, error -71 [ 184.533631][ T54] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 184.662641][ T54] usb 7-1: device descriptor read/64, error -71 [ 184.782889][ T54] usb usb7-port1: attempt power cycle [ 184.869708][ T8983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8983 comm=syz.1.889 [ 184.877175][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 184.985568][ T8990] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 185.000274][ T8990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.100524][ T8998] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 185.109773][ T8998] kvm: apic: phys broadcast and lowest prio [ 185.113236][ T8998] kvm: Disabled LAPIC found during irq injection [ 185.132653][ T54] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 185.154964][ T54] usb 7-1: device descriptor read/8, error -71 [ 185.336885][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 185.341053][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 185.392738][ T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 185.413293][ T54] usb 7-1: device descriptor read/8, error -71 [ 185.523120][ T54] usb usb7-port1: unable to enumerate USB device [ 185.693089][ T9019] fuse: Bad value for 'fd' [ 185.890083][ T9038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9038 comm=syz.5.907 [ 186.275403][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 186.275421][ T40] audit: type=1400 audit(1767621948.103:568): avc: denied { setopt } for pid=9075 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 186.305406][ T40] audit: type=1400 audit(1767621948.103:569): avc: denied { accept } for pid=9075 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 186.358569][ T40] audit: type=1400 audit(1767621948.183:570): avc: denied { execute } for pid=9085 comm="syz.4.917" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 186.490281][ T40] audit: type=1326 audit(1767621948.313:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.4.919" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x0 [ 187.007818][ T9116] netlink: 328 bytes leftover after parsing attributes in process `syz.1.926'. [ 187.062703][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.136271][ T9130] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 187.141570][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 187.146213][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.930'. [ 187.251644][ T40] audit: type=1400 audit(1767621949.073:572): avc: denied { block_suspend } for pid=9131 comm="syz.5.932" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.392282][ T9139] can: request_module (can-proto-0) failed. [ 187.503914][ T9144] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 187.507417][ T40] audit: type=1400 audit(1767621949.333:573): avc: denied { lock } for pid=9143 comm="syz.1.936" path="socket:[34888]" dev="sockfs" ino=34888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 187.601112][ T9148] Cannot find add_set index 65532 as target [ 187.620749][ T9151] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 187.632857][ T9151] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 187.639203][ T9151] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 187.701395][ T40] audit: type=1400 audit(1767621949.523:574): avc: denied { getopt } for pid=9154 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.712975][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.824060][ T9165] macvtap0: entered allmulticast mode [ 187.826494][ T9165] veth0_macvtap: entered allmulticast mode [ 187.869674][ T40] audit: type=1400 audit(1767621949.693:575): avc: denied { mounton } for pid=9166 comm="syz.4.945" path="/124/file0" dev="hugetlbfs" ino=33095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 187.872333][ T9168] hugetlbfs: Unknown parameter 'fsname' [ 187.892577][ T40] audit: type=1400 audit(1767621949.693:576): avc: denied { remount } for pid=9166 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 187.927016][ T40] audit: type=1326 audit(1767621949.753:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.1.944" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f1b8f7c9 code=0x0 [ 188.057550][ T9182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.087310][ T9182] SELinux: policydb magic number 0xdd does not match expected magic number 0xf97cff8c [ 188.093924][ T9182] SELinux: failed to load policy [ 188.441855][ T9209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9209 comm=syz.5.958 [ 188.444827][ T9208] loop5: detected capacity change from 0 to 7 [ 188.464339][ T9212] netlink: 'syz.2.959': attribute type 29 has an invalid length. [ 188.465692][ T6883] Dev loop5: unable to read RDB block 7 [ 188.470718][ T6883] loop5: unable to read partition table [ 188.476896][ T6883] loop5: partition table beyond EOD, truncated [ 188.484907][ T9208] Dev loop5: unable to read RDB block 7 [ 188.487445][ T9208] loop5: unable to read partition table [ 188.489068][ T9214] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.960'. [ 188.490307][ T9212] netlink: 'syz.2.959': attribute type 29 has an invalid length. [ 188.492839][ T9208] loop5: partition table beyond EOD, truncated [ 188.492863][ T9208] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà–´) failed (rc=-5) [ 188.504723][ T9212] netlink: 44 bytes leftover after parsing attributes in process `syz.2.959'. [ 188.524120][ T9216] netlink: 'syz.2.959': attribute type 29 has an invalid length. [ 188.625212][ T9219] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 188.695463][ T9231] nfs4: Bad value for 'source' [ 188.805087][ T9242] overlayfs: failed to clone lowerpath [ 189.130053][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.982'. [ 189.469766][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.987'. [ 189.531967][ T9303] geneve2: entered promiscuous mode [ 189.535180][ T9303] geneve2: entered allmulticast mode [ 189.715007][ T9313] netlink: 32 bytes leftover after parsing attributes in process `syz.5.992'. [ 189.960258][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 189.967167][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 190.038772][ T9342] netlink: 'syz.1.1002': attribute type 2 has an invalid length. [ 190.132893][ T9343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9343 comm=syz.2.997 [ 190.136953][ T9343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9343 comm=syz.2.997 [ 191.021926][ T9357] kexec: Could not allocate control_code_buffer [ 191.809354][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 191.809367][ T40] audit: type=1400 audit(1767621953.633:589): avc: denied { write } for pid=9370 comm="syz.1.1011" path="socket:[33579]" dev="sockfs" ino=33579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.819770][ T40] audit: type=1400 audit(1767621953.633:590): avc: denied { accept } for pid=9370 comm="syz.1.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.826147][ T40] audit: type=1400 audit(1767621953.633:591): avc: denied { read } for pid=9370 comm="syz.1.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.226911][ T40] audit: type=1326 audit(1767621954.053:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.5.1021" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f2878f7c9 code=0x0 [ 192.885765][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.888610][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.476076][ T9446] input: syz0 as /devices/virtual/input/input7 [ 193.827939][ T9465] __nla_validate_parse: 1 callbacks suppressed [ 193.827956][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 193.837638][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'. [ 193.886243][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1034'. [ 193.890329][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1034'. [ 193.951923][ T40] audit: type=1400 audit(1767621955.773:593): avc: denied { read append } for pid=9479 comm="syz.5.1036" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 193.966803][ T40] audit: type=1400 audit(1767621955.773:594): avc: denied { open } for pid=9479 comm="syz.5.1036" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 194.105472][ T9497] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 194.105472][ T9497] program syz.5.1041 not setting count and/or reply_len properly [ 194.108507][ T40] audit: type=1326 audit(1767621955.933:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.1.1040" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f1b8f7c9 code=0x0 [ 194.192762][ T9503] netlink: del zone limit has 4 unknown bytes [ 194.196952][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1043'. [ 194.202169][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1043'. [ 194.233477][ T40] audit: type=1400 audit(1767621956.063:596): avc: denied { listen } for pid=9504 comm="syz.5.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.261753][ T9506] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.288704][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1044'. [ 194.372261][ T9506] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.444626][ T9506] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.507460][ T9506] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.600865][ T1233] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.616947][ T1233] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.631266][ T1143] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.641453][ T1143] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.739763][ T9511] netlink: zone id is out of range [ 194.957761][ T40] audit: type=1400 audit(1767621956.783:597): avc: denied { write } for pid=9521 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.958018][ T9522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1049'. [ 194.971965][ T40] audit: type=1326 audit(1767621956.793:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9523 comm="syz.1.1050" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7f1b8f7c9 code=0x0 [ 195.834502][ T9532] xt_hashlimit: invalid rate [ 196.069430][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 196.117592][ T9548] overlayfs: failed to clone upperpath [ 196.313956][ T9562] xt_hashlimit: invalid rate [ 196.323893][ T9562] tmpfs: Bad value for 'nr_blocks' [ 196.449391][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1065'. [ 196.882811][ T6092] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 197.043649][ T9589] tmpfs: Bad value for 'mpol' [ 197.051049][ T6092] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 197.055013][ T6092] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 197.058807][ T6092] usb 7-1: Product: syz [ 197.060870][ T6092] usb 7-1: Manufacturer: syz [ 197.062991][ T6092] usb 7-1: SerialNumber: syz [ 197.066041][ T6092] usb 7-1: config 0 descriptor?? [ 197.075598][ T6092] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 197.078956][ T6092] dvb-usb: bulk message failed: -22 (2/0) [ 197.089656][ T6092] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.093389][ T6092] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 197.097590][ T6092] usb 7-1: media controller created [ 197.106570][ T6092] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.287272][ T9579] dvb-usb: bulk message failed: -22 (4/0) [ 197.293201][ T9579] cxusb: i2c read failed [ 197.432682][ T6118] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 197.460290][ T9617] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 197.463615][ T9617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.470205][ T9619] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 197.475191][ T9619] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 197.516479][ T6092] cxusb: set interface failed [ 197.523282][ T6092] dvb-usb: bulk message failed: -22 (1/0) [ 197.523480][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 197.523492][ T40] audit: type=1400 audit(1767621959.353:607): avc: denied { create } for pid=9622 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.527160][ T9623] dns_resolver: Unsupported server list version (0) [ 197.528478][ T40] audit: type=1400 audit(1767621959.353:608): avc: denied { listen } for pid=9622 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.548247][ T6092] DVB: Unable to find symbol mt352_attach() [ 197.557744][ T9623] netlink: 'syz.4.1083': attribute type 10 has an invalid length. [ 197.561926][ T6092] dvb-usb: bulk message failed: -22 (5/0) [ 197.562058][ T9623] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 197.566283][ T6092] zl10353_read_register: readreg error (reg=127, ret==-121) [ 197.568434][ T9623] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 197.570448][ T6092] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 197.579750][ T9623] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 197.605030][ T6118] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.611769][ T6118] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 197.615879][ T6118] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.618791][ T6118] usb 10-1: Product: á‘© [ 197.620342][ T6118] usb 10-1: SerialNumber: syz [ 197.622841][ T6092] rc_core: IR keymap rc-dvico-mce not found [ 197.624469][ T9596] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 197.625360][ T6092] Registered IR keymap rc-empty [ 197.630248][ T6092] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 197.642325][ T6092] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input8 [ 197.649883][ T6092] dvb-usb: schedule remote query interval to 100 msecs. [ 197.652428][ T6092] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 197.656410][ T6092] usb 7-1: USB disconnect, device number 9 [ 197.701523][ T40] audit: type=1400 audit(1767621959.523:609): avc: denied { map } for pid=9634 comm="syz.4.1087" path="socket:[36945]" dev="sockfs" ino=36945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 197.716371][ T6092] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 198.047495][ T40] audit: type=1400 audit(1767621959.873:610): avc: denied { execute } for pid=9594 comm="syz.5.1075" path="/dev/snd/seq" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 198.060620][ T6118] usb 10-1: USB disconnect, device number 8 [ 198.075403][ T9653] vlan0: entered promiscuous mode [ 198.085575][ T9653] team0: Port device vlan0 added [ 198.167079][ T40] audit: type=1400 audit(1767621959.993:611): avc: denied { mounton } for pid=9660 comm="syz.2.1097" path="/235/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 198.184255][ T9662] erspan1: entered promiscuous mode [ 198.199420][ T40] audit: type=1400 audit(1767621960.023:612): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 198.276561][ T40] audit: type=1400 audit(1767621960.103:613): avc: denied { setattr } for pid=9670 comm="syz.4.1100" name="NETLINK" dev="sockfs" ino=35956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.660162][ T9701] netlink: set zone limit has 4 unknown bytes [ 198.666313][ T40] audit: type=1400 audit(1767621960.493:614): avc: denied { write } for pid=9700 comm="syz.5.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.787664][ T9712] efs: cannot read volume header [ 198.852282][ T9712] efs: cannot read volume header [ 198.977138][ T9698] sit0: entered promiscuous mode [ 198.986887][ T9698] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 198.990380][ T9698] __nla_validate_parse: 10 callbacks suppressed [ 198.990462][ T9698] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1107'. [ 199.120865][ T40] audit: type=1326 audit(1767621960.943:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.1117" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa0678f7c9 code=0x0 [ 199.169740][ T40] audit: type=1400 audit(1767621960.993:616): avc: denied { accept } for pid=9730 comm="syz.4.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 199.227590][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.230334][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.338807][ T9747] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 199.408751][ T9754] bridge_slave_0: left allmulticast mode [ 199.410725][ T9754] bridge_slave_0: left promiscuous mode [ 199.413410][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.063309][ T9767] netlink: 'syz.2.1127': attribute type 1 has an invalid length. [ 202.532637][ T40] kauditd_printk_skb: 19932 callbacks suppressed [ 202.532651][ T40] audit: type=1326 audit(1767621964.353:20549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 202.544499][ T40] audit: type=1326 audit(1767621964.363:20550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 202.552858][ T40] audit: type=1326 audit(1767621964.363:20551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 202.560061][ T40] audit: type=1326 audit(1767621964.363:20552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 202.569696][ T40] audit: type=1326 audit(1767621964.363:20553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 202.578409][ T40] audit: type=1326 audit(1767621964.363:20554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 202.587947][ T40] audit: type=1326 audit(1767621964.363:20555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 202.597052][ T40] audit: type=1326 audit(1767621964.363:20556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 202.605556][ T40] audit: type=1326 audit(1767621964.363:20557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 202.613434][ T40] audit: type=1326 audit(1767621964.363:20558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b178f7c9 code=0x50000 [ 215.284380][ T1420] ================================================================== [ 215.288094][ T1420] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 215.291930][ T1420] Read of size 8 at addr ffff888026701020 by task aoe_tx0/1420 [ 215.297188][ T1420] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.299053][ T1420] CPU: 0 UID: 0 PID: 1420 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.299084][ T1420] Tainted: [L]=SOFTLOCKUP [ 215.299091][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.299104][ T1420] Call Trace: [ 215.299111][ T1420] [ 215.299120][ T1420] dump_stack_lvl+0x116/0x1f0 [ 215.299163][ T1420] print_report+0xcd/0x630 [ 215.299187][ T1420] ? __virt_addr_valid+0x81/0x610 [ 215.299206][ T1420] ? __phys_addr+0xe8/0x180 [ 215.299224][ T1420] ? handle_tx+0x5a5/0x630 [ 215.299251][ T1420] kasan_report+0xe0/0x110 [ 215.299275][ T1420] ? handle_tx+0x5a5/0x630 [ 215.299304][ T1420] handle_tx+0x5a5/0x630 [ 215.299333][ T1420] dev_hard_start_xmit+0x97/0x6e0 [ 215.299365][ T1420] __dev_queue_xmit+0x6d7/0x46b0 [ 215.299393][ T1420] ? rcu_is_watching+0x12/0xc0 [ 215.299412][ T1420] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 215.299439][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.299470][ T1420] ? __lock_acquire+0x436/0x2890 [ 215.299493][ T1420] ? ref_tracker_free+0x37c/0x830 [ 215.299512][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 215.299542][ T1420] ? rcu_is_watching+0x12/0xc0 [ 215.299561][ T1420] tx+0xcc/0x190 [ 215.299584][ T1420] ? __pfx_tx+0x10/0x10 [ 215.299607][ T1420] kthread+0x1e4/0x3e0 [ 215.299628][ T1420] ? find_held_lock+0x2b/0x80 [ 215.299661][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.299688][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 215.299723][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.299748][ T1420] ? __kthread_parkme+0x19e/0x250 [ 215.299768][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.299788][ T1420] kthread+0x3c5/0x780 [ 215.299810][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.299833][ T1420] ? rcu_is_watching+0x12/0xc0 [ 215.299850][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.299874][ T1420] ret_from_fork+0x983/0xb10 [ 215.299895][ T1420] ? __pfx_ret_from_fork+0x10/0x10 [ 215.299918][ T1420] ? __switch_to+0x7af/0x10d0 [ 215.299943][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.299965][ T1420] ret_from_fork_asm+0x1a/0x30 [ 215.300003][ T1420] [ 215.300010][ T1420] [ 215.323366][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.323425][ T1420] Allocated by task 8207: [ 215.323439][ T1420] kasan_save_stack+0x33/0x60 [ 215.393006][ T1420] kasan_save_track+0x14/0x30 [ 215.395230][ T1420] __kasan_kmalloc+0xaa/0xb0 [ 215.397481][ T1420] alloc_tty_struct+0x96/0x8c0 [ 215.399346][ T1420] tty_init_dev.part.0+0x1e/0x500 [ 215.401211][ T1420] tty_open+0xa4f/0xf90 [ 215.402787][ T1420] chrdev_open+0x234/0x6a0 [ 215.404443][ T1420] do_dentry_open+0x748/0x1590 [ 215.406232][ T1420] vfs_open+0x82/0x3f0 [ 215.408159][ T1420] path_openat+0x2078/0x3140 [ 215.410322][ T1420] do_filp_open+0x20b/0x470 [ 215.412276][ T1420] do_sys_openat2+0x121/0x290 [ 215.414368][ T1420] __x64_sys_openat+0x174/0x210 [ 215.416514][ T1420] do_syscall_64+0xcd/0xf80 [ 215.418347][ T1420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.420567][ T1420] [ 215.421508][ T1420] Freed by task 53: [ 215.423095][ T1420] kasan_save_stack+0x33/0x60 [ 215.425075][ T1420] kasan_save_track+0x14/0x30 [ 215.427068][ T1420] kasan_save_free_info+0x3b/0x60 [ 215.429144][ T1420] __kasan_slab_free+0x5f/0x80 [ 215.431542][ T1420] kfree+0x2f8/0x6e0 [ 215.433181][ T1420] process_one_work+0x9ba/0x1b20 [ 215.435555][ T1420] worker_thread+0x6c8/0xf10 [ 215.437298][ T1420] kthread+0x3c5/0x780 [ 215.438858][ T1420] ret_from_fork+0x983/0xb10 [ 215.440637][ T1420] ret_from_fork_asm+0x1a/0x30 [ 215.442659][ T1420] [ 215.443678][ T1420] Last potentially related work creation: [ 215.445962][ T1420] kasan_save_stack+0x33/0x60 [ 215.448077][ T1420] kasan_record_aux_stack+0xa7/0xc0 [ 215.450296][ T1420] insert_work+0x36/0x230 [ 215.451940][ T1420] __queue_work+0x94f/0x10e0 [ 215.453736][ T1420] queue_work_on+0x1a4/0x1f0 [ 215.455533][ T1420] release_tty+0x4de/0x5d0 [ 215.457222][ T1420] tty_release_struct+0xb7/0xe0 [ 215.459092][ T1420] tty_release+0xe2d/0x1470 [ 215.460824][ T1420] __fput+0x402/0xb70 [ 215.462526][ T1420] task_work_run+0x150/0x240 [ 215.464347][ T1420] do_exit+0x87f/0x2bd0 [ 215.465966][ T1420] do_group_exit+0xd3/0x2a0 [ 215.467786][ T1420] get_signal+0x2671/0x26d0 [ 215.469450][ T1420] arch_do_signal_or_restart+0x8f/0x7e0 [ 215.471819][ T1420] exit_to_user_mode_loop+0x8c/0x540 [ 215.474217][ T1420] ret_from_fork+0x79d/0xb10 [ 215.476264][ T1420] ret_from_fork_asm+0x1a/0x30 [ 215.478145][ T1420] [ 215.479071][ T1420] The buggy address belongs to the object at ffff888026701000 [ 215.479071][ T1420] which belongs to the cache kmalloc-cg-2k of size 2048 [ 215.484707][ T1420] The buggy address is located 32 bytes inside of [ 215.484707][ T1420] freed 2048-byte region [ffff888026701000, ffff888026701800) [ 215.491047][ T1420] [ 215.492132][ T1420] The buggy address belongs to the physical page: [ 215.495194][ T1420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26700 [ 215.498931][ T1420] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 215.502061][ T1420] memcg:ffff888038ac5b01 [ 215.503649][ T1420] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 215.506501][ T1420] page_type: f5(slab) [ 215.508400][ T1420] raw: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 215.511860][ T1420] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888038ac5b01 [ 215.515566][ T1420] head: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 215.518976][ T1420] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888038ac5b01 [ 215.522179][ T1420] head: 00fff00000000003 ffffea000099c001 00000000ffffffff 00000000ffffffff [ 215.525332][ T1420] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 215.529074][ T1420] page dumped because: kasan: bad access detected [ 215.531796][ T1420] page_owner tracks the page as allocated [ 215.534223][ T1420] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5945, tgid 5945 (syz-executor), ts 64092230398, free_ts 62086961713 [ 215.543043][ T1420] post_alloc_hook+0x1af/0x220 [ 215.544915][ T1420] get_page_from_freelist+0xd0b/0x31a0 [ 215.547195][ T1420] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 215.549499][ T1420] alloc_pages_mpol+0x1fb/0x550 [ 215.551633][ T1420] new_slab+0x2c3/0x430 [ 215.553955][ T1420] ___slab_alloc+0xe18/0x1c90 [ 215.555870][ T1420] __slab_alloc.constprop.0+0x63/0x110 [ 215.558126][ T1420] __kmalloc_noprof+0x4fc/0x910 [ 215.560008][ T1420] __register_sysctl_table+0xb3/0x1900 [ 215.562042][ T1420] __devinet_sysctl_register+0x1b9/0x360 [ 215.564120][ T1420] devinet_sysctl_register+0x17b/0x200 [ 215.566250][ T1420] inetdev_init+0x2b8/0x580 [ 215.567923][ T1420] inetdev_event+0xc32/0x1870 [ 215.569828][ T1420] notifier_call_chain+0xbc/0x3e0 [ 215.572290][ T1420] call_netdevice_notifiers_info+0xbe/0x110 [ 215.574918][ T1420] register_netdevice+0x1792/0x21d0 [ 215.577240][ T1420] page last free pid 5928 tgid 5928 stack trace: [ 215.579687][ T1420] __free_frozen_pages+0x7df/0x1170 [ 215.581667][ T1420] __folio_put+0x329/0x450 [ 215.583376][ T1420] skb_release_data+0x81a/0x9e0 [ 215.585233][ T1420] skb_attempt_defer_free+0x1f5/0x710 [ 215.587396][ T1420] tcp_recvmsg_locked+0x11e3/0x2910 [ 215.589852][ T1420] tcp_recvmsg+0x12f/0x680 [ 215.591868][ T1420] inet_recvmsg+0x129/0x6a0 [ 215.593738][ T1420] sock_recvmsg+0x1b2/0x250 [ 215.595647][ T1420] sock_read_iter+0x2b9/0x3b0 [ 215.597989][ T1420] vfs_read+0xa98/0xcf0 [ 215.599874][ T1420] ksys_read+0x1f8/0x250 [ 215.601689][ T1420] do_syscall_64+0xcd/0xf80 [ 215.603501][ T1420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.605759][ T1420] [ 215.606714][ T1420] Memory state around the buggy address: [ 215.608793][ T1420] ffff888026700f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 215.612028][ T1420] ffff888026700f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 215.615176][ T1420] >ffff888026701000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.618287][ T1420] ^ [ 215.620282][ T1420] ffff888026701080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.623378][ T1420] ffff888026701100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.626382][ T1420] ================================================================== [ 215.629753][ T1420] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.632962][ T1420] CPU: 0 UID: 0 PID: 1420 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.637484][ T1420] Tainted: [L]=SOFTLOCKUP [ 215.639007][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.642905][ T1420] Call Trace: [ 215.644328][ T1420] [ 215.645692][ T1420] dump_stack_lvl+0x3d/0x1f0 [ 215.647777][ T1420] vpanic+0x640/0x6f0 [ 215.649671][ T1420] panic+0xca/0xd0 [ 215.651563][ T1420] ? __pfx_panic+0x10/0x10 [ 215.653833][ T1420] ? check_panic_on_warn+0x1f/0xb0 [ 215.655667][ T1420] check_panic_on_warn+0xab/0xb0 [ 215.657684][ T1420] end_report+0x107/0x160 [ 215.659178][ T1420] kasan_report+0xee/0x110 [ 215.660688][ T1420] ? handle_tx+0x5a5/0x630 [ 215.662170][ T1420] handle_tx+0x5a5/0x630 [ 215.663599][ T1420] dev_hard_start_xmit+0x97/0x6e0 [ 215.665294][ T1420] __dev_queue_xmit+0x6d7/0x46b0 [ 215.667033][ T1420] ? rcu_is_watching+0x12/0xc0 [ 215.668899][ T1420] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 215.671241][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.673275][ T1420] ? __lock_acquire+0x436/0x2890 [ 215.675395][ T1420] ? ref_tracker_free+0x37c/0x830 [ 215.677254][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 215.679016][ T1420] ? rcu_is_watching+0x12/0xc0 [ 215.680753][ T1420] tx+0xcc/0x190 [ 215.681994][ T1420] ? __pfx_tx+0x10/0x10 [ 215.683467][ T1420] kthread+0x1e4/0x3e0 [ 215.684836][ T1420] ? find_held_lock+0x2b/0x80 [ 215.686419][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.688175][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 215.690146][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.691655][ T1420] ? __kthread_parkme+0x19e/0x250 [ 215.693293][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.695089][ T1420] kthread+0x3c5/0x780 [ 215.696677][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.698381][ T1420] ? rcu_is_watching+0x12/0xc0 [ 215.700113][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.701682][ T1420] ret_from_fork+0x983/0xb10 [ 215.703281][ T1420] ? __pfx_ret_from_fork+0x10/0x10 [ 215.705027][ T1420] ? __switch_to+0x7af/0x10d0 [ 215.706581][ T1420] ? __pfx_kthread+0x10/0x10 [ 215.708205][ T1420] ret_from_fork_asm+0x1a/0x30 [ 215.710014][ T1420] [ 215.712063][ T1420] Kernel Offset: disabled [ 215.713691][ T1420] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:06:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853265b5 RDI=ffffffff9aeedc40 RBP=ffffffff9aeedc00 RSP=ffffc90006f3f3d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9aeedc00 R15=ffffffff85326550 RIP=ffffffff853265df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6f295cdf98 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b1815050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b181505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b1815057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b181506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b18150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b18151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b19ba4a8 00007f91b19ba4a0 00007f91b19ba498 00007f91b19ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b251d100 00007f91b19ba460 00007f91b19b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b19ba4b8 00007f91b19ba4b0 00007f91b19ba4a8 00007f91b19ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 00000000000001ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff8b77814d RBX=0000000000000001 RCX=ffffc90003510000 RDX=ffffc9000350ff01 RSI=ffffc9000350ff10 RDI=ffffc9000350ff10 RBP=ffffc9000350f128 RSP=ffffc9000350f068 R8 =ffffffff911b4e52 R9 =000000003f01a8e9 R10=0000000000000002 R11=0000000000002bb7 R12=ffffc9000350f130 R13=ffffc9000350f0e0 R14=ffffc9000350ff18 R15=ffffc9000350f114 RIP=ffffffff816cab93 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f050e717d60 CR3=0000000029682000 CR4=00352ef0 DR0=00000000000000b3 DR1=0000200000001002 DR2=0000000100000001 DR3=0000000000000081 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f050dbba6c3 00007f050dbba6c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc7cf2160 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577e8163e 0000555577e81600 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d0173500000002c ab91086900000000 4cb9e2fd75466048 2df48ca411dc4f4e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 456cbecd00000000 99f79e0348248992 f23d5873dd348725 5d86da760000002f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d51dbac200000000 e882a885b32f96a7 799b5474d21e9443 f292ad240000002e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 16b54ca300000000 b078c4a5cf677482 2c87c75b35426f49 edefe92d0000002d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b904f13700000000 9b354105cf36d4ec bd80878b33d4089e 4d0173500000002c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=ffffffff8e3c96a0 RCX=000000004271e021 RDX=0000000000000000 RSI=ffffffff8daa845f RDI=ffffffff8bf2b480 RBP=0000000000000002 RSP=ffffc9000414f490 R8 =000000002945be64 R9 =0000000042945be6 R10=0000000000000002 R11=ffff888057868b30 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8199fbc2 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f209bfe5f40 CR3=00000000572bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f209cb1d100 00007f209bfba460 00007f209bfba478 00007f209bfba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888116000000 RCX=0000000000001000 RDX=fffffbfff1bae6ae RSI=fffffbfff1bae6ac RDI=ffff888116000000 RBP=ffffea0004580000 RSP=ffffc9000421f820 R8 =0000000000100000 R9 =0000000000000000 R10=ffffed1022c00000 R11=dffffc0000000000 R12=00000000000029c2 R13=ffffea0004580000 R14=000000000000000a R15=ffffea0004590000 RIP=ffffffff8b76a5bb RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555890bb500 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9428a31186 CR3=0000000056f25000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f176751d100 00007f17669ba460 00007f17669ba478 00007f17669ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000