last executing test programs: 22.193352895s ago: executing program 2 (id=406): prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004880}, 0xd1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x60000, 0x0) ioctl$TIOCSBRK(r2, 0x5427) 22.192926515s ago: executing program 2 (id=408): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0xc002) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c193f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) 22.189535706s ago: executing program 2 (id=409): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) 22.125011256s ago: executing program 2 (id=410): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x2, 0x1000, &(0x7f0000000700)="d87759001c9b6620c08e355b24fd647ec8d7165919d490652012685734374a60d3ba75ddc5769207f1309477e23ffc65d89de2461edb9693ead2e00d039544c9e70cc5475f6e728dff2758237451ad3dbf1f7e1eacbd08d13fad55d91212d48e46ca9797cc9e7fdd816aa39f65759e9efb5dce46eae415129d577b68aab2c8cf52fcee0b564bbc98e3eecfcbd97e50c5d026d3dabe406dab8aca932064fcf378ec66dad69c83dcc57a2f961c185e6242e893c26cd5db4b728c115043a140887cd24004361255d294f4dccd9b653e9681ded2b82e0d5a50349a7371081fdad88594975f134e5f4ea3c60ff9fd1e9e404e44b3973d026aa3313832f19f78e6363ffef91ff1482c3774ef69ddc25bc91406933196ba1dcccd77d9ebb4b12044d01a9bdd8796220d913e47b4ccb206ccb2062982b92203dfa2beec7c18775316bf70fa6a7422cab2c3f62545001926b862a1fd9731570bd1e2f44f70e6d8364fd9e9257cb42b406bef590f72779e97e8b1743a98de736078ba5b561ab6a8e2768b948363c4caa2a69af80f6f04b6dabb1c78365260f4d77bc44be48d9a0221f7aa7d2b79b0ee8670619dce23cc85e9a2e63e08b026eb768775b1a38f884a66993baa2c1efc574301e0da67a8cf4df818a6d29840ba883ab1a96850dc4ba68896606a51acd326db6d330c2804e3eceed5ab9aca0c57c7dca5b55019f73fb0607ef9fe63bdae570be00a700c465902918f7e225c0856ac69f70d033555c7e17426b3e70cd551e419f86db6c8d470757ffe2d6d81800bc478c82755cb2a563ff0bbafe3986b09bcf65fac113698598561175f16bced91fb89a8ac612d93cc6a1139a53b1956974df372f1a28385cc0bd69acea1c13cd6cd00d0d10f6c77c9abd6e148852eaf75a3e9f280ab8beb9298e7dedc643266aae2a5393985caf07c074c1f850384fc9ac0624909c4733db00f53ce35699caa985dab8f41a14b24fcdf97be312d099f48f289f664f61b472eedc004373708fb64e73c59147d31e3107a00c1e7f8cf874c10d3f7498d561fa82425d95c3091258791664819bed6bc2547e9e14d9700a5e3f44ab96b307faf13580fc3c1e29226298332565297825d89fa42190b5062613e69013c8b02df02f02c200ba892bac5045f3f6a2c072a3adc8f4f5784c104e0935a23c66cee65c52774dd3109f4972fa90c279a90e4442837d26b98565d0fdcdeda27c11d9cca0b552834253f396cb011b51ac1eaca8e3737ec4fa6b56a7e49d2f9da910f19c3392ad07888e77107e8d279828cb16c28a362e6afa74fd6cfa6887494682f5ecacb09a3bfafc1829bb654a691443e59355a15e75f2cb85ae650d5d9c99be95013c3c293c749326bc5e712a86a4451bb10d1f010644b99bb9bccc5078dd65124ec369aeb351c3a1e4b2f7b238c98422e1bf121c91ccf5687aa41130d02c8e6e7e1a2410eead01f564826905a7bbf6a0ebf08f979f14b6ded018f7d6d841231ba3f52ab8212e9eca4901ce9791baba5dbdf2ba979c38075f93e8debdfcc7376540c0d27ca64fbf14fce5ba86f00d91786e5a57688f3d72f6cb14587b4ec320b9d2a9d2ac861e9bab365658848d135c452f191edca4fe70d4c0ebe942bad8778b29efeacb6eb7c1336ea8a0d4bc102e7da4319781a8b276b80dd11a4c9d82e9de8048228c4fd0ebd0cc360a1111d41c95df297361adc65eadad93303471982e7c1de0165eb822dce7a96bc1ed5a99baa55c8dd6e987410ce611b3a8bfc9bebefdca6a26ad7ef41b0cb2145ae6b41c75c1b14693de60aba20bf1be5efde6d955cb66bcb0175985139f332439fbf9d436a310bde81d8cc1cfd29f690191a50e0b68556edf6b97e298275e96576b9c69990639d50ccac43fae2bb2bdd2dbc706438fcfb8750cf521fb0071fc51f5228e5314c10315510abb293f2f5b14ff3286b099735f9fd854bb4b9c293dac8b90b3fc98efbb3976de16c391c15a4ce89845d37a455e2bd0dd5f779c811131dd495d98ea2ed7b8dfc0e703e17177ee531112ef14da06b8e554b951c03b0871dcb636912e1103c54945d546bcde8a13bc9d23add946848bf6a401c9e578aebe81d09034d75f815edb59237974cc369b5f967b8b46e8ef2aee6205c82d649edb30d884d5818800889197f3f177f71a9ba42d4712626e71d0cfd95cb3dbc756f8c8123abee911080b361a251ac2043071c695a86947df4ce714922ff87c3100839845ea29bc65646fe5a0517e41e41af6d039017bd7d9a373b02c87d192deaa601ba55b39353ee1d516c9fa9a65b4932d3211b0ecd13ee524040e1cb08db19850bcbb3927ac99f2f73eed1b9a1ba5110474dcc3df909e0a735aa57cd11ca39fe1dea352a3917cfff5c808e4bf1b855fdf2e9470b2e9aaf1445f1f800c00c73bfede50a29b4d7f216f3812c7b02cd48373c0afd6f073d7e3b04b57d1707d13370ea0dfe978dce2555120e514e68ad151f1695a581b6ec74a5ccd832a56e82d7d1b477fc4f93f787070d3a0e8cdc60e7eeb68c3c26355d9aa9cd86273d4bdbe013bbd8839ece18be1d38e8637fa617ef78b7a5040a6dcd92766c358f70cb42dd62ddc50405dc5c5b6366e659f060a2fd9b05d46f4e7f4169c01dee9cb5e20563ef1aaecaec33d1e6d71e46bde93c3513da856f50b169fe1fef92eabed99cd89ee8f27065853fd8f1702b0d5cdef4fe6c32a05cab6918d0b795e9f117532e8a20c7ca0ee65ca19759ad5379a439883ca867bb8e4f6e26349e1fceae9f3f52107d744f1acf79573fcc0524f0a48bf2b5bec3b3165014c0e9d0ef9c3f35e63d95a811f0474ac7fd02f115a9e522b7341c7502fa6f6a363be2b0e363e706cb1679c032f3ac6f3423a36701a2db4970bd8600bc02c6a5ee9c3362165c59d02a8f8ce705b91af54f084599ee3d2ada930a337d1bdc8d13603237607d87780401d63103d896c0a8518065e37f2bfe6d27bd8fac925c457eb8736b4f0a4a8743dbc6aa8fb1a98e21c766ff4af2da9d2db43554ae1e32ee20f0131aeff3d5b411fba5b1a49f5ba81a3f437a7fd350353b6af9e0e0ba514cf7f90334a663b94d0ce3a10507a5b6fffe46306e16b5f0ef09fb71703a8eca5b25a4da3bcf94b01cf7be6673e3a9221041e2c21451f08c6e58469a9b4351956a289c8d46910c4506bcac670b3bc98e66a9cbdd5f1944de6df8d7a18ea6f05fbd8543d0dda927c000b233826e1b92ec2f99a44d0be20d63f132f8846c76b31c3bb79dcfd3b7adf39adb097d3145eea10def59c58e4a569789d4d2f8d8c32310b789fd8c87819da4bb42e2643da36729da25a02f578c728cd9c76dafec50196e3b425e3ef40bb0585ea3dca99460600a589412affb725d4559141f3bae98463de6b5562400a8187902da788f156769f6b68cee09d13727dc3833b812952a5c4460b3880cd5f1eb09dfa507add642be7f5652d3565e970d49133d6d869fa10d79264d7d88992f34a48ca5eb00d560543d95485875c013eeda6d0533f3794e681872c2abe0e104e4da4a47f41f388435c1faef68757eb7bc1aa1e4b1abd33edb263acfc19b94f50335f6c02762c25571fe451a26db298bfda064393b702ad6d6213b9dc0d9eb2bb1bb0330850802e0c6cdecb40fdc9bd9dc9e9725cebe3bf4f805f222af43957ee696cc6f1268a0e9b46b5a7e86ff7d9d2a83c67277feda3f9ed694116183e03af05a93a5dde6701f44c6dd706602a6f6ad8ba2cf6162aa516227af4630461211cfb61583a3ac22b452603335bd9cbdeee6425395e4ac0c3144f70917be25694fbfa0e13a0ae9166dc11decb134edf0551de97706639659699f03fe0ec53ea669e2948dee041716514b9b9bedb37dd38c09d1d140da40aff393435d865b7365b4e9a2ec69aae59819a91133b1052660b4541916b441d500f2d682b9f4f29c1ce27109268586b6b378f4da2581ff30b24ae5f23ef132989c5020cc23e9f461abbe3b199723a0ae54d4f8e7621d5fd42bdcb71f144aca204c537631f68841566ea81ee25a448cdaf905825fafbe000f5cd95c538ea311a00f914871f09e4e64a9a55d2b35faf5e51a6d2bcd70385e6d65ed9ee28d8b29495d233c7f7e7b3f3ab953ea4767ab4c92a898f37017090bbf9069a8588ae87b7c7046c509e930c2441e5b92a18535fa224f745a1f1caa4616b2dcdc99674eeaf73a2fdbfc5f4bf029f8a0ae7b8d53b0f7f6ba73f79810bec0b103ae3ba9ad2ab3b05c8f3150f112b426eb050cac4ad0f0a818ea49cf4c8f2daa8c9021d6a57c3f0ff45d09c4bbbedb174bbe34bf1e611718bf722cd48c4a5134292b8447940c2657c0f21b27a3099960e6ef72972af207f9f08eb6157c5fb5759998a81ecb171afcbcec6aaa0efe41d80fb60266086903a5821571205efec00e2bc2c0c70bf06018d52bbd2e715a95045f0f5214b605d3f6808f8e8b177978efa645c265716b20bbf18e666b30114a9816a9a11212942b2a23f128348d58db1396f2826d36698886a19ee592c74ca13d76ff75c89c511c6525b11f886f3040e148de5914fc34d561ed4bee307e2d2751a236703e45355a167ef6b86dc64d971fa62c504aeeb55a4959e1233ec956d0d280b9c4be4c594c6802bcc2670e8ed0a30c2e59a191f6dd21ec0ff4608e71f87c6a2d715ce08e92add11249bbf8a9ae303435353b22b4ba81b7c2703b9acbf1bb16beb9734cac2277a25c8d08db20dc266ab8c0b3716ba2fb8c34ec3c70efc4695e3b8511c9b0af33a6ce1f1bb0345ef62d29cdb6a7de6af57b04ce6513fb1aa27f35e9454ec2a3d80daf513e2ea10cdfea514e44474fa224174db378807925362abfdde5051fbff4b4d8f084cb043c265036bdecdd33e17fa155e8b176e4c68331794dc6fa10638d09004da392d6a87b9aca8e19da3d60adae96a2bed6d4dae53f74145409e24e428dbbbb278eeb9315ef85c3fc688f927e52fe7434ac0007eb09ed94fb96815ef33cc9f82c4a88e63a7ad944ac3ac8ca932d0ba6f32a53ac2b36adb38f9cb346517c0c2c9ea7a524d4590395bf47d8c9c288ce7195ac21a24fdfafc288ec1aab74f5af5b81f95b7df46a5167669d005c7f06d4ac7f1b9046c72c76650b846213bae6d60438cc9e9a51f980122b8e08c0a490b092dbda8b4baab462e9eb18bff62967a8d95bb0652f44ce047c7e51741963ca28d7f448c702f3ce5de979374f4892b3ce622fd735eebecfd3dea8fd201c7be01e83ff820ddd4cdd529cc655e1d86394127547af36f2f146f24058b65a2838b9c62ebefd27db088aeddf441fae34e03d3d22b9384fc3802b01d985bf2a9e3fd0f427ec38d883aabe9198d69194bab6707b32028c87149ddd8c5aca651e07ff91225cbf78ecc65d39f0a2e1fd572eef444d9416236a35f50990c2b0c47215349c6a3caacccff6c70bc941dbf4a2ee47b8413b38e24341487c2ff9b13e4663055619ed24d7ca2dfdae2e10b4bfea695e3bc93bbb0deb3353f58518f602618300cada3692aac41a047e6bdcf2b920b691b6da6c8b8488bb80dfe99e0ba0d341adecd8e37327a12145038777c92a74ecbcbf5731b31424ed6dac8f115be4d94ad5c79f0ad31f9c9e4cfa55e5a759ac53c24a003a3333e1030b76aa0844a4bfd6546863788942cad9722630378e1b5a3235e80a055d600a07c65ad9312694c1d24c2df0b5a3325d85ed4008e7dfa57e1e5218c178f2f175ffd3e07c7d750972135b0b592ca9e6530b45172a5255dbc9ac11ffdec6ee9621676027c7097d1f5e04dd"}) fstat(r0, &(0x7f0000000300)) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) 22.124291432s ago: executing program 2 (id=411): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x100, 0x70bd27, 0x0, {0x2, 0x19, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010101}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x0, 0x0, 0x3}) mmap(&(0x7f0000956000/0x2000)=nil, 0x2000, 0x280000b, 0x28011, r4, 0x80c00100000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}}]}, 0x40}}, 0x20040054) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) fsopen(&(0x7f0000000040)='bpf\x00', 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x100, 0x70bd27, 0x0, {0x2, 0x19, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010101}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x40}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x0, 0x0, 0x3}) (async) mmap(&(0x7f0000956000/0x2000)=nil, 0x2000, 0x280000b, 0x28011, r4, 0x80c00100000000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}}]}, 0x40}}, 0x20040054) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) (async) 21.744966149s ago: executing program 2 (id=412): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard') 21.695982497s ago: executing program 32 (id=412): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard') 4.433716273s ago: executing program 4 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000190a0300000000000000000002000000a5647e2d73bc14532bc7cbf76ec7b3d7626109619cc061a94b2341592284f65d98f05d875fdf4aba8f51b90ceb90bf1f99db9806d1dd9584707797b8212c5e258f319484f1c0bc"], 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x98, r3, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 3.99226751s ago: executing program 4 (id=720): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0xd, @win={{0xd, 0x7f, 0x9c3, 0x5}, 0x5, 0x0, 0x0, 0x5, 0x0, 0x5}}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c4) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) fchown(r6, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r8, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @loopback}, 0x10, &(0x7f0000000100)}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x40000) r9 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 3.074337297s ago: executing program 4 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="660f6f8d0070ba410066edf2aff30f40ae000066b9ff0b00000f2b0dd314640f62350f013f640fa5920000", 0x2b}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.903623006s ago: executing program 4 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x97b977891b0b0ba3}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8e}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x48800) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) r4 = accept4$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5, 0x1, 0xa4}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000300)={r5, 0x6, 0x8, 0xf}, &(0x7f0000000340)=0x10) ftruncate(r4, 0x19b0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6gre0\x00', r2, 0x4, 0x0, 0x6, 0x2, 0x0, @mcast1, @private1, 0x7, 0x20, 0xa8, 0x4}}) sendmmsg$inet(r4, &(0x7f0000002280)=[{{&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="aaf5e87224a13c1eb48563f76c384a2f42dbec54026cf0828844a16e3a9fe0e76affced756e8660c9b382444486103f8c039f8469080df4786d9289cb878020edada9cbee71c8962b4f54e1a6d25f2eeb28417fa2379e5cb6536a9e10e426a03f9f47b20ff2502a17e392ab68b11353d9fd1442b42f5349e1411ee951407970f24bc1cbd9c", 0x85}, {&(0x7f00000005c0)="2b84720124fe1b7a0b", 0x9}], 0x2, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8314}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14}}], 0xc0}}, {{&(0x7f0000000700)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000740)="a679b41a069d782ad3742564fb0ed1b7ddf0078660ec073934677aa9821ab51096c6df5ef2876c46fc688387ea3998758a7d48b280a40ad5b0128c703b5514d3d6475dad51ac59e72af13fd7806e1bf2918177f16c3960175f5c5557ba6e79f26245328f7d49d8c52060bcd9f33fa7e22c4eae41f4a7f710bc730bec", 0x7c}, {&(0x7f00000007c0)="6262ad12680e6c2fed12abb7b22d1b18e91b01ef4dbee451129da007551839b4945a7b387c5a44b382ed32509abaa41d728f159d9af8e5876af061a25f990e4c5ec6e103bb77306e6e662ed9d6a394a70bd5ea74def8ccf4c1ba0a0a78723a610b184bb2607ed12056c04b50826d870bb552f89d51ae32c1a678b8a494872509f5952db3", 0x84}, {&(0x7f0000000880)="069f57002e52d8ae4e43f6581cb7ba530a848a09e98f43d4f6bf223dc53e251a54ae750f8c840bac8d44296f4fa9296acc5c826bb73d8046", 0x38}, {&(0x7f00000008c0)="b5e390b76ecdad8d8883139fedb4548c160d25a00a7c7d23671e43dcb7ed1534861e099bb8e9722096842a0f7c3e071a1b6b345a3de759f853be3d9f1d419a4d7ad45936dc1a1cb2f891bf719b65f09aaddd5444fbc1315a022e40f7ce8a5288fbe85a4d8cbca8fa03aca38e3c7dfdf65d73f8b5538a4303cd7ad774e341d5eb9224777594a46f877ac45754e728ba83b8cfb6408e2a92e74cf93f0d4d76b54d40ed6ed274ecf3e6bdac89b29cf0ec1c4e885131c3fc634bf4ea64935b1c20bcea08c20ecaef5ea0c3c2d019f9262df3b1a8be321b0b57eff1b3ac015c32e96950d1609b885e5e61", 0xe8}, {&(0x7f00000009c0)="c7bf102e10ad988c2128f72f2afbd08b24aef666326ddf24a58a487380b48df6c3561d5b4cafa15c33ef5621fb3a9e330e9e6a5acd413013c218354ff149cc1951ae6eca063c0d7ff5a2f21dd99b400645c58dd4cdf97a5dbcc783e3c27cdba9773793cb18952c55fd40b2ca2e3e69cd14856f3b37f75a2e019ee2eb2399daafae13c11cd300ed5593aea31b05505a6711082fe04228edf1428e18aba4c0a66d161bc56d2499d3181f6ca5", 0xab}, {&(0x7f0000000a80)="66fcc5d84a8b679621de236f7c3d3d9efe275a253791b73d8eab5224868993ee12c4c266314a6855cae296e446ea969c8ea409b1ceac35598500a79635e0c043235bde6657ed0ef76c1feea1897285c9c85641a96808d4de2fca2d8f4919696ce7a7e629ca2979c20d175e427eb77a7b7e3d133064485fd0bf8d566731c12c2549151bcc4bb288fff03f953a8fae222a8c76", 0x92}], 0x6, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @loopback}}}], 0x68}}, {{&(0x7f0000000d00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d40)="fe468b57b513e7f9f209f53a8857597451d8972bc9e43945eb65d9e4a0d7406cdff5f6e577bf8d9f97db370ecc818d4091a1013f6327a8dc4e8036212849b7107302874a87b93e59d1fa944b05bc5a849a78430620dba5deadacae193371be7e08d5", 0x62}, {&(0x7f0000000dc0)="b549c14c013e198230d616f59a44d616e77701133fdb5ba6caab64e012992f5021336792cd5846c5d185eff5630f42fa3f6430bd225aa1917f9fd5d78ed314464bb1844a9374c52cfe2e8e86a0cffe767d3ea0589c5a90797b63fef044faa9", 0x5f}, {&(0x7f0000000e40)="2341482e10fca4badb707cb20d36162a23585ad41aecea79f1e55fa72523a83c8359e013", 0x24}, {&(0x7f0000000e80)="4f205a2f65d4662e32b070ff", 0xc}, {&(0x7f0000000ec0)="f95ef28fc02f7123dc43750b180fb20daa8dda0c757e1e23cda9144eef4aa704b696c241665d066701dc9373ec03bbd0c4701a1b8d09b7014bc07af52b89db2ad1d1e8a8a2a9311fa64f96cd910e4fcccc0a5e7e8a1e4db7ac521272f16639ace84fc0815f518d928872c6bdd01b2a577110bda563fbdb4816f3d76d9f26c5a3161fe9dbb80076217e3d42e4aa2421453c663a09eac367dc857bb9", 0x9b}, {&(0x7f0000000f80)="8d268515a84bd3c967300936d050acc3e3131649672c18383b1d1a2ae14f7822bddf966b16366cc99a27f03f4cb8b7dfd948f3f7e13b04745ef1980be4b097af5fd129ca04f18c48fdc0bf151a62ed9464c80e140668c7bc8986d792346fc0aeb02d26e6", 0x64}], 0x6}}, {{&(0x7f0000001080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000021c0)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="81235544746acc98132d36bf058448d7a33803c605cedef6ef67ef6d75f834bc9ec567e22dc78fbe5a66a8e3c976f87b609afd30e0247d27d33bd5c132ddd8561d3f5c740b61aeb7b88ad6fd8af19c772c94f289318ff35306e9d1ff2dd0fbabb6a3228fda6f7f2f3a66d363009256446184a8dd2fe632da57facd6ca52aff0c500f0e36dc3a2d11b43f687ba62eb72cf4146e35011bf3d0eab63360463cfef5fea9a23d3ba3e1050237c93766dbc79027b6e6cfda27e74a5cbdeb8d49b4276fb4f227c209ddb51a5cbe35bc74d6fb09127b5e786c1a11ba168a53d43e47be630d060725ebf618005b995edb5ceea38bdfd6946b", 0xf4}], 0x2, &(0x7f0000002200)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffff616}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x60}}], 0x4, 0x5ad5cc57e3ff0cc4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0x11, &(0x7f00000023c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002480)='GPL\x00', 0x8210, 0x24, &(0x7f00000024c0)=""/36, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002500)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002540)={0x5, 0x9, 0x62, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002580)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000025c0)=[{0x4, 0x1, 0x1, 0x1}], 0x10, 0x4}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000002380)='mm_lru_insertion\x00', r9, 0x0, 0x100000001}, 0x18) setsockopt$inet_buf(r4, 0x0, 0x25, &(0x7f0000002700)="9035ea4581b89173a34aed5a3b24e0ce34fb1e7d8cf44cb3ccc44d759afa29476693f93d3df2b3150b57cfbc612fc76881e93dfed833a304e51d3c1eea880fa92bce1c9819f71f8e4de27e200cd765deb6f49888ea2b7b050cfd0a3dceeb4a3d5776259721380d87d253276e27e59c55bedac88185a14369abf44f24800bbebd40eda23725cacf0e11f99ed2b5ce2b77a7199363c1c41945adfe6bc02ea6628809527a9e0011cae867da7cad2c0ee3b6debc9879723568b899b44a4cca17", 0xbe) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002800), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000002940)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0x84, r11, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x4000804) ioctl(r10, 0xb28, &(0x7f0000002980)="72607857592d81700b1011d24ef3fba557ec3ed2ebab77e16f2f64b040e50d0ffc936b8cdd568ef2cd41881f4197a0da088e7bc8fcd8152e7acfc12b668df5774284f51231317885454af95351bc534f382ccf845b56597751e7bb896e840f06d937713259ccc69d38541ff89a9eb53003b441b91fd99c79e8441a72627b1a041d366adf1ce4b9660cb674c6eae5da") ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000002a40)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002a80)={r6, 0x401}, &(0x7f0000002ac0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000002b00)={r12, 0x6}, &(0x7f0000002b40)=0x8) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002b80), 0x280, 0x0) r14 = accept(r13, &(0x7f0000002bc0)=@in={0x2, 0x0, @loopback}, &(0x7f0000002c40)=0x80) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000002c80)={'ip6_vti0\x00'}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r13, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x68, r15, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000000) sendmsg$NL80211_CMD_NEW_MPATH(r14, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x7c, r15, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x71}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c808}, 0x20000015) ioctl$SNDRV_TIMER_IOCTL_CREATE(r13, 0xc02054a5, &(0x7f0000002f80)={0x4d, r9, 'id0\x00'}) ioctl$BTRFS_IOC_GET_FEATURES(r16, 0x80189439, &(0x7f0000003000)) 2.902844594s ago: executing program 4 (id=745): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40842, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0xa0042, 0x101, 0xd}, 0x18) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000804000/0x1000)=nil) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) fstat(r2, &(0x7f0000000340)) (async) fstat(r2, &(0x7f0000000340)) fallocate(r1, 0x0, 0x0, 0x8001) (async) fallocate(r1, 0x0, 0x0, 0x8001) syz_emit_ethernet(0x3d, &(0x7f0000000140)={@empty, @local, @void, {@generic={0x9200, "8097982419a4d9d89b229249f91f4a3fd776528651bb1911553dad9e0733987f01880a707826e47d81ad9c753fde26"}}}, &(0x7f0000000180)={0x1, 0x4, [0x349, 0x4db, 0xe03, 0xfe8]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r1, 0x0, 0x1000000000008) (async) sendfile(r0, r1, 0x0, 0x1000000000008) 2.713519961s ago: executing program 4 (id=747): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) (async) sendto$packet(r1, &(0x7f0000000040)="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", 0x1000, 0x8000, 0x0, 0x0) 2.493873459s ago: executing program 1 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.4906507s ago: executing program 1 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x3, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@random={0xbf, 0xc, "579c524a1c5751d4d58ec71c"}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af2b4a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0xfc}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048010}, 0x20000000) 2.024795757s ago: executing program 0 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000006c0)={0x0, 0x4, @status={[0xa401, 0xf9, 0x0, 0x5, 0x57a, 0x6]}, [0x3, 0x9, 0x100000000000, 0xffffffff80000000, 0x800, 0x776a, 0x9, 0x100, 0x8, 0x8, 0x4, 0x9, 0x2bdc1f4c, 0x200, 0x5, 0x6, 0x8, 0xe52, 0x2, 0x7, 0x8000, 0x4, 0xe, 0x2, 0x100000000, 0x7, 0x10000, 0xffff, 0xe, 0xf, 0xffffffff80000001, 0x2, 0x7, 0x2, 0xffffffff, 0xe78, 0x5, 0x1f0, 0x9, 0x4, 0x5, 0x6, 0x5, 0x2, 0xffffffffffff8001, 0x1, 0x8, 0xfffffffffffff801, 0x8dd, 0xd4, 0x7, 0x3, 0x1, 0x7f, 0x9, 0x10, 0x2, 0x4, 0x3ff, 0x1, 0x0, 0x8000000000000001, 0x0, 0x3]}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e3b643e9df92f0b3fb0d69b4bb4cdb77c3620060d8240c1bc7e27813c122b526ccf041aea516a822dbcbe418e7cb55b59693ab50283c2b1b08450e6e8cf72f1060fdffaab71cb63bd48d86dc28d72fc7cc91fc4175325d32d30d383078eaefe69d9294865d387c1ab577696752eca5e888e4a073d98e63a495ec18667d02ace4419b25eb6747be5105e20129dc04c75190fa695b778ddaf30928ca4672dfa711800ccb5f7cb4b328b08066e96d38748e41baf2a9e0566d392c5d5c2918cf624c46", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/28], 0x48) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x1e5, 0x70bd25, 0x0, {0x7, r5}}, 0x18}, 0x1, 0xf0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.023381508s ago: executing program 0 (id=772): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r3, &(0x7f0000000bc0)=""/4096, 0x1000) sendfile(r2, r2, 0x0, 0x81) 1.96473921s ago: executing program 0 (id=773): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x2e}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x10000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x7, 0x3, 0x4, 0xffffffff, 0xfffffffa}, 0x14) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x9, 0x1, 0x3, 0x1, 0x2, 0xfffffffffffffffc, 0x7f, 0x7, 0xfffffffffffffffa, 0x0, 0x9, 0x8, 0x1, 0x2, 0x9, 0xe], 0x0, 0xb4880}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x800) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000003c0)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x140e, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000051}, 0x40084) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_serviced\x00', 0x0, 0x0) accept4$bt_l2cap(r6, 0x0, &(0x7f0000000680), 0x0) ioctl$I2C_FUNCS(r6, 0x705, &(0x7f00000006c0)=0xfffffffffffffffa) accept4$tipc(r6, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x800) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000780)=0xfffffe01, &(0x7f00000007c0)=0x4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000800)={r1, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f00000008c0)={{0x3, 0x0, 0x64a, 0x5, 0x9}, 0x46, 0x9, 0xffffffffffffffff}) r7 = openat(r6, &(0x7f0000000940)='./file0\x00', 0x400000, 0x80) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r7, 0x100000000) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x18c, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x8b, 0x6, "5c766c2f2986d13d45d2d78ce0a81ba648d0aa01c24a96798c397a18edcbc9e027d48cd991d4dfbf5c2cd5cdff8a2485cdfce886cede8aab7d32d816dc07acd28642fcd2e25ec8e82581d35b1bf9c5000425bd689d108d9920254f4afb07e2431a6ec05aa12437e292aec6a8007fb0921197ffdb2f790460a7267f8faa92ad41c38d44e6e414ed"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xbf, 0x6, "0b0fe0dc07e4d8c9b52ea8f3718b9633857402c346876ca5994ebc2f117530eeb782c42207189ed818c94d5a1dfac8ca84d676c352791497a3d261d75f7ea85aed61ed1581c5fd26bb6d3ad0c7b67a598682116267b1300c52449d53b6571f465d7e3913b2fa5f236660b86dd945258f418ad78b35d9278c5328e7d0abc5df6691cb5612fc5d87e36be895dcf0447ef438601a8ea83a250d6c75cdbb1508b2c7a63d003294d715bbe337c70e420ff3793ebf8a6fc9a0aed46b8066"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x18c}, 0x1, 0x0, 0x0, 0x1000}, 0x1) lsetxattr$security_ima(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000c80)=@ng={0x4, 0x0, "ca10a242212d001505e15aee32fd7e5fff"}, 0x13, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x18, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x34c}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc5c}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d80)='syzkaller\x00', 0x7, 0x51, &(0x7f0000000dc0)=""/81, 0x41000, 0xe5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x0, 0x4, 0x5, 0x8}, 0x10, 0x1ce8f, r6, 0x7, &(0x7f0000000e80)=[r6, r6, r6, 0x1, r7, r7, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7], &(0x7f0000000ec0)=[{0x4, 0x5, 0x5, 0xb}, {0x0, 0x5, 0x6, 0x6}, {0x5, 0x5, 0xc, 0x9}, {0x0, 0x1, 0x9, 0x9}, {0x3, 0x3, 0x4}, {0x5, 0x4, 0x6, 0x6}, {0x1, 0x5, 0x4, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001000)={0x0, r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000001040)={r1, 0x7, 0x0, 0x0, 0x80000000, 0xffff}, 0x14) write$P9_RAUTH(r7, &(0x7f0000001080)={0x14, 0x67, 0x2, {0x40, 0x4, 0x8}}, 0x14) 1.964177549s ago: executing program 0 (id=775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d17, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r5, 0x0, 0xf69}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {r3, r4+10000000}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000340)="0f017a0066b9800000c00f326635001000000f300f564100f30fc7b400480f0866b9800000c00f326635000800000f306635100000000f22c066b9400101c00f320f798a0000f30f300f2a830000", 0x4e}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.414780223s ago: executing program 0 (id=779): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x7, 0x98, 0x72474571, 0x5, 0xfffffffd, 0x9}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000003640)=[{&(0x7f0000001280)}, {0x0}, {0x0}, {&(0x7f0000003440)="512be4f55bc51a9fc82877c8bfe2dc7b4961292727953f49703bde21d2399ad677ada57ee327f018f8d6395b32df533da8361aefacee5c7b5e0eb8328b91aa1dc43afe41cbeff8de02c67ae8ea3a03586fb1ec7ecac5390879c096ff71c75dd43d46dab83b303b9be62f7f68ef5f1bb1207ac3afbc85985e5fb66954841f8a08fe50ec1fbff2bb36eeea8afcd1fe28b1ed1dfe5733ccc98305720243aeeb87269c8e1f0be554df2d91d3d2f51c8979341365e2cc8f6de7643c7f11e8c7bd7dd9581e7841540d82e9b44b819a398e3b", 0xcf}], 0x4, 0x50, 0x7f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r2, 0x9, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20004095) syz_80211_inject_frame(&(0x7f0000003b40), &(0x7f0000003b80)=@ctrl_frame=@ba={{}, {0x7ff9}, @broadcast, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x1}, {0xc, 0x1dc}, "b9ad033bcc351ff26ba9d07017265b7014b201f6fd1133661b04d869717e6edd002b9643e145ad558d1231203d9cdee7a8401d8d19d734c74c5353f414a3d5304f3b2059821b638fa79388c2b7104ee9f2f7072840f9225dd6dd2450353a103d926a21555566c6d9709bbf2736a5e273595fece3752bb30dc859f5b54b8baacf"}}, 0x94) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x40000000) mount$nfs4(&(0x7f0000003e00)='ip6gre0\x00', &(0x7f0000003e40)='./file0\x00', 0x0, 0x100c800, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @remote, 0x5e6}, 0x1c) write$binfmt_register(0xffffffffffffffff, &(0x7f00000040c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, '\xff\xff\xff\xff\xff\xff', 0x3a, 'uid<', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x2e]}, 0x34) openat$zero(0xffffffffffffff9c, &(0x7f0000004100), 0x240000, 0x0) 1.25460844s ago: executing program 1 (id=780): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x7f, @loopback, 0x8}}, 0x4, 0xae}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r6 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r6, 0xd3fc6000) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000018f799f80992010034000008001600020a000000e85b87d92ebe90294991b3dd5d3e9b10d70e48294a102a0dd0033cea324fedc4d1125fb7b38cc3473e406ac9e266c44b9bb5bae3738854d64fcab11f66ffd4641a7279254d4982331b156bf7ebe8539078a74579e10628192004201faa3bc9604e576804"], 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) connect$netrom(r0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.004633626s ago: executing program 3 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0x4000000, 0xf, &(0x7f00000001c0)=[0x1e, 0x7c, 0x1, 0x0, 0x7, 0x1ed, 0x2, 0x3, 0x8, 0xc58f, 0x2060, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="21880000000000001c0034fa01007a5c8bad6373656300000c0002800500030009000000"], 0x3c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001180)={{r0}, 0x0, 0x4, @unused=[0x40, 0x3, 0x7f, 0x1], @devid=r2}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x60, 0x0) 1.004105915s ago: executing program 3 (id=782): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000480)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x13) 854.866818ms ago: executing program 3 (id=783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x201, 0x6000006, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0xc080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x90000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BSG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000180)=0x87) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(r4, 0x40026102, &(0x7f00000001c0)=0x8) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601101000048110000000000000000000000ffff64010101fe8000000000000000000000000000aa4e200e22"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 724.671589ms ago: executing program 3 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @empty, @val, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3aa0467240022e31415de575759936bc41e6a71d5c", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf25010000001c000680080006001400000008000600020000000600010052ba00000800020004000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)={r0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x2}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x5) 724.142575ms ago: executing program 3 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x40, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r4, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x19d) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r8, r9, 0x7, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100677470000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0e828b7a0163eea637a9be922f11ee70ecf05ff158b6c0094e092cad050ebd16b0a76e9acee5d77a01b84c951cea13be8b0e0bb369257a7232c54a"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x40, 0x0) (async) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) fanotify_init(0xf00, 0x0) (async) fanotify_mark(r5, 0x1, 0x5000003a, r4, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x19d) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) ftruncate(r7, 0x2000009) (async) sendfile(r6, r7, 0x0, 0x6) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) tee(r8, r9, 0x7, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100677470000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0e828b7a0163eea637a9be922f11ee70ecf05ff158b6c0094e092cad050ebd16b0a76e9acee5d77a01b84c951cea13be8b0e0bb369257a7232c54a"], 0x40}}, 0x0) (async) 492.8695ms ago: executing program 3 (id=786): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_clone3(&(0x7f0000000440)={0x1100, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x36}, &(0x7f00000000c0)=""/75, 0x4b, &(0x7f0000000140)=""/106, &(0x7f00000001c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) ioprio_get$pid(0x1, r1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000340)={'dac02\x00', [0x4f29, 0x5, 0x3ff, 0x601, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x809, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x101, 0xe1cb, 0x5, 0x1a44b, 0x20003, 0x201, 0x8f5e, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x3, 0x3c, 0x408, 0x4, 0x8000000, 0x1]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x8}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 308.969161ms ago: executing program 1 (id=787): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000075d41fff3a834e890008000300", @ANYRES32=r3], 0x3c}}, 0x40000) r4 = syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = getpgrp(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x0, 0x125, &(0x7f00000002c0)='\xee\xf1\xc4\x94u\xf4\x00*\x10sR@\x85\xd8\xdd^\rN\x87\x15\x0e\xfdc2\xc3z\xbc\r\xd5a\xe7\xdaU4f\x85j\x06\n\xe27\xeb%=\x1fz\x14\x1f\xcb\x1f\x13\xb2)\xd7\xc9GtNn\nC\x14\x81-\xb4\xa4\xd6\xe0Gh\x7f\x05\xf7RE\xec\x03S\xa6b!Y\xff\n\xa3\x9e\xd9\'\xa7_.\x8d\r\xb6\x18\xb68K\xbb\xd0\x9e\xb8JI\xc4\x9e$\xe7\x15V<\xc2ql\x8a@+\xa4[h\a\xbdE\xe3\'\xe0\xe0\xfd\xf4=dr\t\xe8>\x15\xa73\xdd\xe1\xa0aE@T,\xbe\x97\"xyo\r\x06\x00\x00\x00\xf5:1V,\xef\x10\"\x0e\xf3\x95\xbbx]*\x1ew\x06\xb0\x1c|t\xc2\xafMZh>3\x1dCZ\xcf \xfe\xe6\xf1\x94\xb5lv\xf2^\xce[\x9e\x97\xcd\xf1h\xdaLr<\xcbcG\xe4\xf2Nb\xa6\xad\x93\xaf\x00\x85\t4sp\x17cB\x95\xfe\xb9\x94z\xadG\x16\xe4\xe1\xb8\x9b\x83)n\"]\r\xbe\xf9\xd2I\"\xde\xc5\x04\xc4\xa5\v\x87bG\xb0\xfd|\xb3/\xeb\xe7)\xd4\xd5\xc9\xde\xf8\x97@\xbf\xc4\xfak\x00'/293}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x501281, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r10, 0xc0406619, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001e00010a0000000000000000ac1414aa0000000000050000000000000000000000000000ac1e000100000000"], 0x40}}, 0x0) 458.244µs ago: executing program 0 (id=788): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x109080) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x5, 0x8b}, &(0x7f0000000740), &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000700)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0xf000000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x980901, 0xa, '\x00', @p_u16=0x0}}) 93.983µs ago: executing program 1 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f00000008c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/171, 0x106, 0xab, 0x0, 0x8000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x2f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=790): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) kernel console output (not intermixed with test programs): : Unknown subsys name 'net' [ 47.559066][ T5952] cgroup: Unknown subsys name 'cpuset' [ 47.565393][ T5952] cgroup: Unknown subsys name 'rlimit' [ 47.818226][ T5960] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.515088][ T5952] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.797318][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.797334][ T40] audit: type=1400 audit(1757230200.961:80): avc: denied { execmem } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.014836][ T40] audit: type=1400 audit(1757230201.171:81): avc: denied { create } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.021489][ T40] audit: type=1400 audit(1757230201.171:82): avc: denied { read write } for pid=5968 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.031255][ T40] audit: type=1400 audit(1757230201.171:83): avc: denied { open } for pid=5968 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.038628][ T40] audit: type=1400 audit(1757230201.191:84): avc: denied { ioctl } for pid=5968 comm="syz-executor" path="socket:[3715]" dev="sockfs" ino=3715 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.060469][ T5973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.061646][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.064693][ T5973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.066553][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.071130][ T5971] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.073468][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.079284][ T5975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.080146][ T5980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.082934][ T5975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.085306][ T5984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.088002][ T5975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.093800][ T5975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.099537][ T5982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.099656][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.101792][ T40] audit: type=1400 audit(1757230201.261:85): avc: denied { read } for pid=5968 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.104790][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.110547][ T40] audit: type=1400 audit(1757230201.261:86): avc: denied { open } for pid=5968 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.113004][ T5983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.123768][ T5983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.124555][ T40] audit: type=1400 audit(1757230201.261:87): avc: denied { mounton } for pid=5968 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.126594][ T5983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.135699][ T5983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.138136][ T5983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.355198][ T40] audit: type=1400 audit(1757230201.521:88): avc: denied { module_request } for pid=5977 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.404063][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 52.429138][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 52.504776][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 52.543843][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.546409][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.548565][ T5977] bridge_slave_0: entered allmulticast mode [ 52.551054][ T5977] bridge_slave_0: entered promiscuous mode [ 52.593498][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.595907][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.598184][ T5977] bridge_slave_1: entered allmulticast mode [ 52.601252][ T5977] bridge_slave_1: entered promiscuous mode [ 52.727120][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.730971][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.733869][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.736773][ T5968] bridge_slave_0: entered allmulticast mode [ 52.739461][ T5968] bridge_slave_0: entered promiscuous mode [ 52.745068][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.747341][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.749594][ T5969] bridge_slave_0: entered allmulticast mode [ 52.752148][ T5969] bridge_slave_0: entered promiscuous mode [ 52.756016][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.771908][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.774160][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.776491][ T5968] bridge_slave_1: entered allmulticast mode [ 52.779245][ T5968] bridge_slave_1: entered promiscuous mode [ 52.781792][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 52.790061][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.793070][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.799575][ T5969] bridge_slave_1: entered allmulticast mode [ 52.803478][ T5969] bridge_slave_1: entered promiscuous mode [ 52.888261][ T5977] team0: Port device team_slave_0 added [ 52.943187][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.948699][ T5977] team0: Port device team_slave_1 added [ 52.958525][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.964124][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.002064][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.035090][ T5969] team0: Port device team_slave_0 added [ 53.067267][ T5969] team0: Port device team_slave_1 added [ 53.069622][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.071891][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.080204][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.121630][ T5968] team0: Port device team_slave_0 added [ 53.143711][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.146335][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.154045][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.165205][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.168202][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.171201][ T5978] bridge_slave_0: entered allmulticast mode [ 53.175370][ T5978] bridge_slave_0: entered promiscuous mode [ 53.179496][ T5968] team0: Port device team_slave_1 added [ 53.195026][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.197471][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.206947][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.210894][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.213946][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.217383][ T5978] bridge_slave_1: entered allmulticast mode [ 53.221108][ T5978] bridge_slave_1: entered promiscuous mode [ 53.277202][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.279934][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.288469][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.306983][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.347453][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.350733][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.352927][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.360848][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.367672][ T5977] hsr_slave_0: entered promiscuous mode [ 53.370365][ T5977] hsr_slave_1: entered promiscuous mode [ 53.391699][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.394699][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.406371][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.509159][ T5978] team0: Port device team_slave_0 added [ 53.515675][ T5969] hsr_slave_0: entered promiscuous mode [ 53.517855][ T5969] hsr_slave_1: entered promiscuous mode [ 53.519869][ T5969] debugfs: 'hsr0' already exists in 'hsr' [ 53.521682][ T5969] Cannot create hsr debugfs directory [ 53.543286][ T5978] team0: Port device team_slave_1 added [ 53.600495][ T5968] hsr_slave_0: entered promiscuous mode [ 53.603612][ T5968] hsr_slave_1: entered promiscuous mode [ 53.606524][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 53.608917][ T5968] Cannot create hsr debugfs directory [ 53.677285][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.680183][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.690953][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.731895][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.735130][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.745235][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.868520][ T5978] hsr_slave_0: entered promiscuous mode [ 53.871821][ T5978] hsr_slave_1: entered promiscuous mode [ 53.875079][ T5978] debugfs: 'hsr0' already exists in 'hsr' [ 53.877437][ T5978] Cannot create hsr debugfs directory [ 54.078605][ T5977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.096967][ T5977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.113390][ T5977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.116175][ T5983] Bluetooth: hci0: command tx timeout [ 54.130444][ T5977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.152439][ T5969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.156597][ T5969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.160914][ T5969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.170437][ T5969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.184713][ T5971] Bluetooth: hci2: command tx timeout [ 54.184805][ T63] Bluetooth: hci1: command tx timeout [ 54.184827][ T5983] Bluetooth: hci3: command tx timeout [ 54.213195][ T5968] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.220834][ T5968] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.226229][ T5968] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.230689][ T5968] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.303260][ T5978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.308178][ T5978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.312810][ T5978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.318175][ T5978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.361297][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.403986][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.424485][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.427736][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.435643][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.447024][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.450046][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.456313][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.477277][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.483103][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.492964][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.495270][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.505096][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.507343][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.511712][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.513953][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.530377][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.539919][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.542181][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.564194][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.570424][ T40] audit: type=1400 audit(1757230203.731:89): avc: denied { sys_module } for pid=5977 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.580053][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.582325][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.591449][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.594040][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.631201][ T5978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.652865][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.679997][ T5977] veth0_vlan: entered promiscuous mode [ 54.686004][ T5977] veth1_vlan: entered promiscuous mode [ 54.703958][ T5977] veth0_macvtap: entered promiscuous mode [ 54.711009][ T5977] veth1_macvtap: entered promiscuous mode [ 54.728274][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.733779][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.738348][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.742816][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.750674][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.757738][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.760486][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.772316][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.788578][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.835358][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.837891][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.857863][ T5968] veth0_vlan: entered promiscuous mode [ 54.867456][ T5969] veth0_vlan: entered promiscuous mode [ 54.873429][ T5968] veth1_vlan: entered promiscuous mode [ 54.880855][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.882169][ T5978] veth0_vlan: entered promiscuous mode [ 54.884083][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.888791][ T5969] veth1_vlan: entered promiscuous mode [ 54.915494][ T5978] veth1_vlan: entered promiscuous mode [ 54.920357][ T5968] veth0_macvtap: entered promiscuous mode [ 54.929543][ T5968] veth1_macvtap: entered promiscuous mode [ 54.935384][ T5969] veth0_macvtap: entered promiscuous mode [ 54.935899][ T5977] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.940085][ T5969] veth1_macvtap: entered promiscuous mode [ 54.953028][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.959834][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.968267][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.972996][ T1199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.982089][ T1199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.986547][ T1199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.990819][ T5978] veth0_macvtap: entered promiscuous mode [ 54.995000][ T1199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.999423][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.005406][ T5978] veth1_macvtap: entered promiscuous mode [ 55.014461][ T1170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.022648][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.028605][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.030207][ T6058] loop6: detected capacity change from 0 to 2560 [ 55.032781][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.035715][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.037286][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.039800][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.046343][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.049435][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.049526][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.055863][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.059225][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.061314][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.062532][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.065456][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.068467][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.073624][ T6058] ldm_validate_partition_table(): Disk read failed. [ 55.076157][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.078678][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.080091][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.081239][ T6058] Dev loop6: unable to read RDB block 0 [ 55.086429][ T6058] loop6: unable to read partition table [ 55.088456][ T6058] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 55.095240][ T6059] ldm_validate_partition_table(): Disk read failed. [ 55.097599][ T6059] Dev loop6: unable to read RDB block 0 [ 55.097666][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.099593][ T6059] loop6: unable to read partition table [ 55.123953][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.126758][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.139902][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.143142][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.159066][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.162413][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.174326][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.177408][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.187773][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.191003][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.222341][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.227795][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.232859][ T6062] openvswitch: netlink: Key type 155 is out of range max 32 [ 55.237593][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 55.243732][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 55.408556][ T6083] syz.3.9 (6083): drop_caches: 2 [ 55.508938][ T6104] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.618430][ T6112] Zero length message leads to an empty skb [ 55.620942][ T63] Bluetooth: hci3: Malformed Event: 0x02 [ 55.686234][ T6115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 55.689702][ T6115] x_tables: ip_tables: udp match: only valid for protocol 17 [ 55.721894][ T6117] ldm_validate_partition_table(): Disk read failed. [ 55.724348][ T6117] Dev loop6: unable to read RDB block 0 [ 55.726765][ T6117] loop6: unable to read partition table [ 55.731556][ T5382] ldm_validate_partition_table(): Disk read failed. [ 55.733969][ T5382] Dev loop6: unable to read RDB block 0 [ 55.737020][ T5382] loop6: unable to read partition table [ 55.774688][ T6055] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 55.861716][ T6129] geneve1: entered allmulticast mode [ 55.954748][ T6055] usb 7-1: Invalid ep0 maxpacket: 64 [ 55.999167][ T6146] tipc: Enabling of bearer rejected, media not registered [ 56.046648][ T6155] loop6: detected capacity change from 0 to 2560 [ 56.052273][ T5974] ldm_validate_partition_table(): Disk read failed. [ 56.055571][ T5974] Dev loop6: unable to read RDB block 0 [ 56.058355][ T5974] loop6: unable to read partition table [ 56.062070][ T6155] ldm_validate_partition_table(): Disk read failed. [ 56.064363][ T6155] Dev loop6: unable to read RDB block 0 [ 56.068487][ T6155] loop6: unable to read partition table [ 56.070340][ T6155] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 56.077882][ T6155] ldm_validate_partition_table(): Disk read failed. [ 56.080147][ T6155] Dev loop6: unable to read RDB block 0 [ 56.082070][ T6155] loop6: unable to read partition table [ 56.095030][ T6055] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 56.117934][ T6160] netlink: 92 bytes leftover after parsing attributes in process `syz.3.28'. [ 56.151273][ T6162] input: syz1 as /devices/virtual/input/input5 [ 56.185273][ T63] Bluetooth: hci0: command tx timeout [ 56.230236][ T6165] bridge: RTM_NEWNEIGH with invalid ether address [ 56.258491][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 56.261618][ T63] CPU: 2 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 56.261633][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.261640][ T63] Workqueue: hci0 hci_rx_work [ 56.261657][ T63] Call Trace: [ 56.261670][ T63] [ 56.261674][ T63] dump_stack_lvl+0x16c/0x1f0 [ 56.261691][ T63] sysfs_warn_dup+0x7f/0xa0 [ 56.261705][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 56.261719][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 56.261732][ T63] ? find_held_lock+0x2b/0x80 [ 56.261749][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 56.261761][ T63] kobject_add_internal+0x2c4/0x9b0 [ 56.261778][ T63] kobject_add+0x16e/0x240 [ 56.261792][ T63] ? __pfx_kobject_add+0x10/0x10 [ 56.261807][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 56.261819][ T63] ? kobject_put+0xab/0x5a0 [ 56.261836][ T63] device_add+0x288/0x1aa0 [ 56.261851][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 56.261860][ T63] ? __pfx_device_add+0x10/0x10 [ 56.261875][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 56.261889][ T63] hci_conn_add_sysfs+0x17e/0x230 [ 56.261901][ T63] le_conn_complete_evt+0x1075/0x1d70 [ 56.261911][ T63] ? preempt_count_sub+0xb0/0x160 [ 56.261927][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 56.261936][ T63] ? hci_event_packet+0x459/0x11c0 [ 56.261951][ T63] hci_le_conn_complete_evt+0x23c/0x370 [ 56.261964][ T63] hci_le_meta_evt+0x354/0x5e0 [ 56.261975][ T63] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 56.261988][ T63] hci_event_packet+0x682/0x11c0 [ 56.261999][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 56.262012][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 56.262024][ T63] ? kcov_remote_start+0x3c9/0x6d0 [ 56.262035][ T63] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.262050][ T63] hci_rx_work+0x2c5/0x16b0 [ 56.262062][ T63] ? rcu_is_watching+0x12/0xc0 [ 56.262076][ T63] process_one_work+0x9cc/0x1b70 [ 56.262092][ T63] ? __pfx_process_one_work+0x10/0x10 [ 56.262107][ T63] ? assign_work+0x1a0/0x250 [ 56.262118][ T63] worker_thread+0x6c8/0xf10 [ 56.262135][ T63] ? __pfx_worker_thread+0x10/0x10 [ 56.262146][ T63] kthread+0x3c2/0x780 [ 56.262156][ T63] ? __pfx_kthread+0x10/0x10 [ 56.262167][ T63] ? rcu_is_watching+0x12/0xc0 [ 56.262179][ T63] ? __pfx_kthread+0x10/0x10 [ 56.262189][ T63] ret_from_fork+0x5d4/0x6f0 [ 56.262199][ T63] ? __pfx_kthread+0x10/0x10 [ 56.262209][ T63] ret_from_fork_asm+0x1a/0x30 [ 56.262228][ T63] [ 56.262251][ T63] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 56.266420][ T5971] Bluetooth: hci1: command tx timeout [ 56.268896][ T63] Bluetooth: hci0: failed to register connection device [ 56.275038][ T6055] usb 7-1: Invalid ep0 maxpacket: 64 [ 56.276042][ T63] Bluetooth: hci2: command tx timeout [ 56.277202][ T5971] Bluetooth: hci3: command tx timeout [ 56.357906][ T6055] usb usb7-port1: attempt power cycle [ 56.368078][ T6179] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 56.370437][ T6179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 56.422311][ T6180] syz.3.34 uses obsolete (PF_INET,SOCK_PACKET) [ 56.424785][ T6018] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.574780][ T6018] usb 5-1: Using ep0 maxpacket: 8 [ 56.578376][ T6018] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 56.581282][ T6018] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.584863][ T6018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.589050][ T6018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.593051][ T6018] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.598677][ T6018] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 56.601629][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.724789][ T6055] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 56.747284][ T6055] usb 7-1: Invalid ep0 maxpacket: 64 [ 56.810966][ T6018] usb 5-1: GET_CAPABILITIES returned 0 [ 56.813575][ T6018] usbtmc 5-1:16.0: can't read capabilities [ 56.874962][ T6055] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 56.908092][ T6055] usb 7-1: Invalid ep0 maxpacket: 64 [ 56.909934][ T6055] usb usb7-port1: unable to enumerate USB device [ 56.910024][ T6186] ptrace attach of "/syz-executor exec"[5978] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 56.913184][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 56.942545][ C3] vkms_vblank_simulate: vblank timer overrun [ 56.950077][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.952772][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.989745][ T6188] capability: warning: `syz.1.37' uses deprecated v2 capabilities in a way that may be insecure [ 57.017471][ T6055] usb 5-1: USB disconnect, device number 2 [ 57.052948][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 57.052958][ T40] audit: type=1400 audit(1757230206.211:210): avc: denied { connect } for pid=6191 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.053887][ T6192] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 57.055649][ T40] audit: type=1400 audit(1757230206.211:211): avc: denied { getopt } for pid=6191 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.061263][ T6192] CIFS mount error: No usable UNC path provided in device string! [ 57.061263][ T6192] [ 57.069372][ T40] audit: type=1400 audit(1757230206.211:212): avc: denied { mounton } for pid=6191 comm="syz.1.39" path="/15/file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.076710][ T6192] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.119702][ T40] audit: type=1400 audit(1757230206.281:213): avc: denied { create } for pid=6196 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 57.126133][ T40] audit: type=1400 audit(1757230206.281:214): avc: denied { ioctl } for pid=6196 comm="syz.1.40" path="socket:[9092]" dev="sockfs" ino=9092 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 57.134420][ T40] audit: type=1400 audit(1757230206.281:215): avc: denied { create } for pid=6196 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 57.137887][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 57.272790][ T40] audit: type=1400 audit(1757230206.431:216): avc: denied { setopt } for pid=6204 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.403433][ T40] audit: type=1400 audit(1757230206.561:217): avc: denied { execute } for pid=6207 comm="syz.1.43" path="/19/cpu.stat" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.436020][ T6210] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 57.466218][ T40] audit: type=1400 audit(1757230206.621:218): avc: denied { setopt } for pid=6211 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.482165][ T40] audit: type=1400 audit(1757230206.641:219): avc: denied { bind } for pid=6211 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.482693][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 58.264933][ T5971] Bluetooth: hci0: command tx timeout [ 58.345359][ T5971] Bluetooth: hci1: command tx timeout [ 58.345371][ T5983] Bluetooth: hci2: command tx timeout [ 58.424967][ T5971] Bluetooth: hci3: command tx timeout [ 58.534989][ T6224] warning: `syz.2.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.644912][ T6226] IPv6: sit1: Disabled Multicast RS [ 58.647936][ T6226] sit1: entered allmulticast mode [ 59.009145][ T13] syzkaller0: tun_net_xmit 76 [ 59.010812][ T13] syzkaller0: tun_net_xmit 48 [ 59.234089][ T6274] IPv6: addrconf: prefix option has invalid lifetime [ 59.677836][ T6272] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 59.764682][ T1221] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.765614][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 59.824856][ T6299] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 59.840768][ T6299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.850564][ T6299] bond1: (slave geneve2): making interface the new active one [ 59.853901][ T6299] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 59.858991][ T6299] bond1: entered promiscuous mode [ 59.860575][ T6299] geneve2: entered promiscuous mode [ 59.888132][ T6303] 9pnet_fd: p9_fd_create_tcp (6303): problem binding to privport [ 59.924677][ T1221] usb 8-1: Using ep0 maxpacket: 16 [ 59.930022][ T1221] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.935188][ T1221] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.939263][ T1221] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 59.945577][ T1221] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 59.949238][ T1221] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.957720][ T1221] usb 8-1: config 0 descriptor?? [ 60.023196][ T6318] netlink: 'syz.1.78': attribute type 10 has an invalid length. [ 60.025913][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.78'. [ 60.029815][ T6318] batadv0: entered promiscuous mode [ 60.032050][ T6318] batadv0: entered allmulticast mode [ 60.035905][ T6318] bridge0: port 3(batadv0) entered blocking state [ 60.038729][ T6318] bridge0: port 3(batadv0) entered disabled state [ 60.209163][ T6323] fuse: Unknown parameter '00000000000000000000' [ 60.344941][ T5971] Bluetooth: hci0: command tx timeout [ 60.369476][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.370055][ T6338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.371886][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.378243][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.378258][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.378270][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.378281][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.378293][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.378305][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.378316][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.378328][ T1221] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 60.379473][ T1221] HID 045e:07da: Invalid code 65791 type 1 [ 60.382890][ T1221] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0002/input/input8 [ 60.389553][ T1221] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 60.392453][ T6339] tty tty22: ldisc open failed (-12), clearing slot 21 [ 60.426345][ T5971] Bluetooth: hci1: command tx timeout [ 60.426372][ T5983] Bluetooth: hci2: command tx timeout [ 60.494849][ T1199] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 60.497831][ T1199] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 60.504927][ T5983] Bluetooth: hci3: command tx timeout [ 60.526397][ T6346] block nbd1: Attempted send on invalid socket [ 60.529141][ T6346] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.533211][ T6346] block nbd1: Attempted send on invalid socket [ 60.536317][ T6346] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.540062][ T6346] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 60.544127][ T6346] block nbd1: Attempted send on invalid socket [ 60.547260][ T6346] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.550521][ T6346] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.554165][ T6346] block nbd1: Attempted send on invalid socket [ 60.556830][ T6346] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.560002][ T6346] block nbd1: Attempted send on invalid socket [ 60.562044][ T6346] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.565668][ T6346] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 60.569624][ T6288] netlink: zone id is out of range [ 60.569677][ T6346] block nbd1: Attempted send on invalid socket [ 60.571263][ T6288] netlink: zone id is out of range [ 60.571269][ T6288] netlink: zone id is out of range [ 60.571274][ T6288] netlink: zone id is out of range [ 60.571505][ T6288] netlink: del zone limit has 4 unknown bytes [ 60.573934][ T6346] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.589638][ T6346] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.590258][ T982] usb 8-1: USB disconnect, device number 2 [ 60.595755][ T6346] block nbd1: Attempted send on invalid socket [ 60.597766][ T6346] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.600772][ T6346] block nbd1: Attempted send on invalid socket [ 60.602690][ T6346] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.606063][ T6346] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 60.609341][ T6346] block nbd1: Attempted send on invalid socket [ 60.611586][ T6346] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.614482][ T6346] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.617716][ T6346] block nbd1: Attempted send on invalid socket [ 60.619707][ T6346] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.622718][ T6346] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 60.625797][ T6346] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.628692][ T6346] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 60.696834][ T6354] IPVS: Scheduler module ip_vs_ not found [ 60.865231][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 60.960000][ T6385] kvm: pic: level sensitive irq not supported [ 60.960439][ T6385] kvm: pic: non byte read [ 60.966215][ T6385] kvm: pic: level sensitive irq not supported [ 60.966579][ T6385] kvm: pic: non byte read [ 61.072843][ T6394] misc userio: Begin command sent, but we're already running [ 61.104693][ T1221] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.161250][ T6409] __nla_validate_parse: 1 callbacks suppressed [ 61.161261][ T6409] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.99'. [ 61.254728][ T1221] usb 6-1: Using ep0 maxpacket: 8 [ 61.258392][ T1221] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 61.261607][ T1221] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.267613][ T1221] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.271443][ T1221] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.275476][ T1221] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.279966][ T1221] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.283426][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.377119][ T6417] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 61.407474][ T6417] bond1: (slave bridge2): making interface the new active one [ 61.410982][ T6417] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 61.490650][ T1221] usb 6-1: GET_CAPABILITIES returned 0 [ 61.492601][ T1221] usbtmc 6-1:16.0: can't read capabilities [ 61.692897][ T840] usb 6-1: USB disconnect, device number 2 [ 62.212044][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 62.212060][ T40] audit: type=1400 audit(1757230211.371:277): avc: denied { recv } for pid=5382 comm="udevd" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 68.415462][ T40] audit: type=1400 audit(1757230217.581:278): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.147505][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.150280][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.375393][ T6453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.106'. [ 74.379665][ T6456] loop6: detected capacity change from 0 to 2560 [ 74.382017][ T40] audit: type=1400 audit(1757230223.541:279): avc: denied { create } for pid=6449 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 74.387059][ T6456] buffer_io_error: 117 callbacks suppressed [ 74.387069][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.392846][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.395806][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.397713][ T40] audit: type=1400 audit(1757230223.561:280): avc: denied { sys_admin } for pid=6449 comm="syz.2.106" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 74.398180][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.407397][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.411204][ T40] audit: type=1400 audit(1757230223.571:281): avc: denied { unmount } for pid=6449 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.414897][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.420168][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.432520][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.436609][ T6456] ldm_validate_partition_table(): Disk read failed. [ 74.439401][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.442765][ T6456] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.446419][ T6456] Dev loop6: unable to read RDB block 0 [ 74.448429][ T6456] loop6: unable to read partition table [ 74.449238][ T40] audit: type=1400 audit(1757230223.611:282): avc: denied { ioctl } for pid=6466 comm="syz.2.109" path="socket:[12636]" dev="sockfs" ino=12636 ioctlcmd=0x531d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.450410][ T6456] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 74.467377][ T6464] ldm_validate_partition_table(): Disk read failed. [ 74.470428][ T6464] Dev loop6: unable to read RDB block 0 [ 74.473472][ T6464] loop6: unable to read partition table [ 74.489346][ T40] audit: type=1400 audit(1757230223.661:283): avc: denied { getopt } for pid=6462 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.508101][ T40] audit: type=1400 audit(1757230223.661:284): avc: denied { create } for pid=6471 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.587551][ T6480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.591809][ T40] audit: type=1326 audit(1757230223.751:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.1.114" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf98ebe9 code=0x0 [ 74.602730][ T40] audit: type=1400 audit(1757230223.761:286): avc: denied { read write } for pid=6474 comm="syz.3.111" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.612708][ T40] audit: type=1400 audit(1757230223.761:287): avc: denied { open } for pid=6474 comm="syz.3.111" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.634646][ T40] audit: type=1400 audit(1757230223.761:288): avc: denied { ioctl } for pid=6474 comm="syz.3.111" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.701179][ T6492] evm: overlay not supported [ 74.818086][ T6501] ======================================================= [ 74.818086][ T6501] WARNING: The mand mount option has been deprecated and [ 74.818086][ T6501] and is ignored by this kernel. Remove the mand [ 74.818086][ T6501] option from the mount to silence this warning. [ 74.818086][ T6501] ======================================================= [ 74.834668][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.839055][ T6497] process 'syz.2.117' launched '/dev/fd/3' with NULL argv: empty string added [ 74.925592][ T6504] netlink: 'syz.0.121': attribute type 1 has an invalid length. [ 74.953760][ T6506] mmap: syz.0.122 (6506) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.994925][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 74.998326][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 75.000980][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.004664][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.007681][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.010728][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.015076][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.017900][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.224318][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 75.226211][ T34] usbtmc 8-1:16.0: can't read capabilities [ 75.427682][ T840] usb 8-1: USB disconnect, device number 3 [ 75.629025][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.125'. [ 75.663632][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 75.669315][ T6517] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 75.680984][ T6517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.706364][ T6517] vlan2: entered allmulticast mode [ 75.708192][ T6517] veth1: entered allmulticast mode [ 75.856502][ T6526] overlayfs: failed to clone lowerpath [ 76.444704][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.470152][ T6579] openvswitch: netlink: Flow key attribute not present in set flow. [ 76.556737][ T1170] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.560928][ T1170] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.566267][ T1170] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.570248][ T1170] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.594965][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 76.597976][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.600988][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.604051][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.607971][ T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.611929][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.614847][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.727557][ T6614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.144'. [ 76.730590][ T6614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.144'. [ 76.820073][ T54] usb 8-1: usb_control_msg returned -32 [ 76.821935][ T54] usbtmc 8-1:16.0: can't read capabilities [ 76.949009][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 77.171086][ T6623] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 77.171293][ T6556] trusted_key: encrypted_key: master key parameter '' is invalid [ 77.173211][ T6623] PKCS7: Only support pkcs7_signedData type [ 77.185992][ T6629] loop6: detected capacity change from 0 to 2560 [ 77.189652][ T6629] ldm_validate_partition_table(): Disk read failed. [ 77.191972][ T6629] Dev loop6: unable to read RDB block 0 [ 77.193961][ T6629] loop6: unable to read partition table [ 77.196681][ T6629] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 77.200021][ T54] usb 8-1: USB disconnect, device number 4 [ 77.220990][ T6629] ldm_validate_partition_table(): Disk read failed. [ 77.225284][ T6629] Dev loop6: unable to read RDB block 0 [ 77.227945][ T6629] loop6: unable to read partition table [ 77.412219][ T6648] pim6reg: entered allmulticast mode [ 77.422356][ T6648] loop3: detected capacity change from 0 to 7 [ 77.428535][ T6457] Dev loop3: unable to read RDB block 7 [ 77.430382][ T6457] loop3: unable to read partition table [ 77.433199][ T6457] loop3: partition table beyond EOD, truncated [ 77.437720][ T6648] Dev loop3: unable to read RDB block 7 [ 77.439623][ T6648] loop3: unable to read partition table [ 77.441607][ T6648] loop3: partition table beyond EOD, truncated [ 77.443606][ T6648] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 77.559966][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 77.563602][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 77.564348][ T6666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6666 comm=syz.1.161 [ 77.567821][ T6668] netlink: 'syz.1.161': attribute type 11 has an invalid length. [ 77.574129][ T6668] netlink: 'syz.1.161': attribute type 13 has an invalid length. [ 77.700324][ T6691] nbd_handle_cmd: 2 callbacks suppressed [ 77.700344][ T6691] block nbd3: Attempted send on invalid socket [ 77.706276][ T6691] blk_print_req_error: 2 callbacks suppressed [ 77.706290][ T6691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 77.712167][ T6691] XFS (nbd3): SB validate failed with error -5. [ 77.760994][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.169'. [ 77.779957][ T6714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.820840][ T6723] netlink: 356 bytes leftover after parsing attributes in process `syz.3.170'. [ 77.856977][ T6730] dvmrp2: entered allmulticast mode [ 77.890320][ T6734] tipc: Started in network mode [ 77.891982][ T6734] tipc: Node identity , cluster identity 4711 [ 77.893883][ T6734] tipc: Failed to obtain node identity [ 77.897622][ T6734] tipc: Enabling of bearer rejected, failed to enable media [ 77.923100][ T6734] syzkaller0: entered promiscuous mode [ 77.925674][ T6734] syzkaller0: entered allmulticast mode [ 77.926735][ T6732] trusted_key: syz.0.176 sent an empty control message without MSG_MORE. [ 77.940060][ T6741] ./bus: Can't lookup blockdev [ 77.942841][ T6741] ./bus: Can't lookup blockdev [ 78.792749][ T6783] sock: sock_timestamping_bind_phc: sock not bind to device [ 78.828153][ T6789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.949348][ T6790] bond0: entered allmulticast mode [ 79.018108][ T6810] loop6: detected capacity change from 0 to 2560 [ 79.020739][ T6810] ldm_validate_partition_table(): Disk read failed. [ 79.023023][ T6810] Dev loop6: unable to read RDB block 0 [ 79.025194][ T6810] loop6: unable to read partition table [ 79.027086][ T6810] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 79.033922][ T6810] ldm_validate_partition_table(): Disk read failed. [ 79.040311][ T6810] Dev loop6: unable to read RDB block 0 [ 79.042211][ T6810] loop6: unable to read partition table [ 79.046218][ T5382] ldm_validate_partition_table(): Disk read failed. [ 79.048352][ T5382] Dev loop6: unable to read RDB block 0 [ 79.050295][ T5382] loop6: unable to read partition table [ 79.174190][ T6824] tipc: MTU too low for tipc bearer [ 79.176071][ T6826] overlayfs: failed to clone upperpath [ 79.211080][ T6834] loop6: detected capacity change from 0 to 2560 [ 79.214024][ T6834] ldm_validate_partition_table(): Disk read failed. [ 79.217439][ T6834] Dev loop6: unable to read RDB block 0 [ 79.220029][ T6834] loop6: unable to read partition table [ 79.223323][ T6834] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 79.231163][ T6834] ldm_validate_partition_table(): Disk read failed. [ 79.234312][ T6834] Dev loop6: unable to read RDB block 0 [ 79.237370][ T6834] loop6: unable to read partition table [ 79.242929][ T5382] ldm_validate_partition_table(): Disk read failed. [ 79.247894][ T5382] Dev loop6: unable to read RDB block 0 [ 79.249946][ T6836] bridge: RTM_NEWNEIGH with invalid ether address [ 79.250339][ T5382] loop6: unable to read partition table [ 79.252812][ T6836] bridge: RTM_NEWNEIGH with invalid ether address [ 79.387960][ T6853] CIFS: Unable to determine destination address [ 79.391940][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 79.391949][ T40] audit: type=1400 audit(1757230228.551:354): avc: denied { mount } for pid=6852 comm="syz.0.214" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.394035][ T6853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6853 comm=syz.0.214 [ 79.401105][ T40] audit: type=1400 audit(1757230228.551:355): avc: denied { unmount } for pid=6852 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.469917][ T6868] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 79.472318][ T40] audit: type=1400 audit(1757230228.631:356): avc: denied { read } for pid=6865 comm="syz.0.217" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 79.472459][ T40] audit: type=1400 audit(1757230228.631:357): avc: denied { open } for pid=6865 comm="syz.0.217" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 79.475984][ T6866] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 79.519038][ T6871] loop6: detected capacity change from 0 to 2560 [ 79.521722][ T6871] buffer_io_error: 170 callbacks suppressed [ 79.521730][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.522109][ T6868] bond4: (slave bridge3): making interface the new active one [ 79.523815][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.526571][ T6868] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 79.528736][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.537829][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.540280][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.543528][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.546957][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.550236][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.553542][ T6871] ldm_validate_partition_table(): Disk read failed. [ 79.556453][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.559001][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.561776][ T6871] Dev loop6: unable to read RDB block 0 [ 79.565650][ T6871] loop6: unable to read partition table [ 79.568514][ T6871] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 79.573991][ T6871] ldm_validate_partition_table(): Disk read failed. [ 79.576626][ T6871] Dev loop6: unable to read RDB block 0 [ 79.578562][ T6871] loop6: unable to read partition table [ 79.606675][ T6876] __nla_validate_parse: 5 callbacks suppressed [ 79.606685][ T6876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.221'. [ 79.639820][ T6882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.223'. [ 79.676303][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.226'. [ 79.684171][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 79.733005][ T96] bond0 (unregistering): Released all slaves [ 79.771975][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.234'. [ 79.775148][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 79.780059][ T6911] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 79.784267][ T6911] bridge0: port 3(team0) entered blocking state [ 79.787324][ T6911] bridge0: port 3(team0) entered disabled state [ 79.789666][ T6911] team0: entered allmulticast mode [ 79.790956][ T6909] kvm: Disabled LAPIC found during irq injection [ 79.791347][ T6911] team_slave_0: entered allmulticast mode [ 79.791357][ T6911] team_slave_1: entered allmulticast mode [ 79.802375][ T6911] team0: entered promiscuous mode [ 79.804556][ T6911] team_slave_0: entered promiscuous mode [ 79.807213][ T6911] team_slave_1: entered promiscuous mode [ 79.810550][ T6911] bridge0: port 3(team0) entered blocking state [ 79.813031][ T6911] bridge0: port 3(team0) entered forwarding state [ 79.830888][ T6918] netlink: 3 bytes leftover after parsing attributes in process `syz.2.237'. [ 79.833767][ T6918] 0ªX¹¦À: renamed from caif0 [ 79.837500][ T6918] 0ªX¹¦À: entered allmulticast mode [ 79.839188][ T6918] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 79.841049][ T40] audit: type=1400 audit(1757230229.001:358): avc: denied { setopt } for pid=6919 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.841807][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 79.886699][ T40] audit: type=1400 audit(1757230229.051:359): avc: denied { bind } for pid=6925 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.078596][ T40] audit: type=1400 audit(1757230229.241:360): avc: denied { setopt } for pid=6959 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.086320][ T40] audit: type=1400 audit(1757230229.251:361): avc: denied { open } for pid=6947 comm="syz.1.247" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.093977][ T40] audit: type=1400 audit(1757230229.251:362): avc: denied { getopt } for pid=6959 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.100413][ T40] audit: type=1400 audit(1757230229.261:363): avc: denied { ioctl } for pid=6962 comm="syz.0.252" path="socket:[13978]" dev="sockfs" ino=13978 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 80.313401][ T6976] netlink: 738 bytes leftover after parsing attributes in process `syz.3.256'. [ 80.439628][ T6987] geneve2: entered promiscuous mode [ 80.696339][ T7001] tipc: Started in network mode [ 80.698014][ T7001] tipc: Node identity ac14140f, cluster identity 4711 [ 80.700515][ T7001] tipc: New replicast peer: 255.255.255.255 [ 80.702788][ T7001] tipc: Enabled bearer , priority 10 [ 80.756157][ T7005] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.265'. [ 80.853622][ T7012] MTD: Couldn't look up '/dev/nullb0': -15 [ 80.855813][ T7012] /dev/nullb0: Can't lookup blockdev [ 80.980022][ T7032] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.278'. [ 81.000125][ T10] IPVS: starting estimator thread 0... [ 81.085206][ T7038] IPVS: using max 43 ests per chain, 103200 per kthread [ 81.117758][ T5382] udevd[5382]: worker [6457] terminated by signal 33 (Unknown signal 33) [ 81.121733][ T5382] udevd[5382]: worker [6457] failed while handling '/devices/virtual/comedi/comedi3/comedi3_subd0' [ 81.217551][ T7070] ÿÿÿÿ: renamed from lo (while UP) [ 81.272741][ T7078] fuse: Bad value for 'group_id' [ 81.274362][ T7078] fuse: Bad value for 'group_id' [ 81.386462][ T61] cfg80211: failed to load regulatory.db [ 81.583031][ T7106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7106 comm=syz.1.304 [ 81.739832][ T7122] loop6: detected capacity change from 0 to 2560 [ 81.742769][ T6458] ldm_validate_partition_table(): Disk read failed. [ 81.747023][ T6458] Dev loop6: unable to read RDB block 0 [ 81.749067][ T6458] loop6: unable to read partition table [ 81.756256][ T7122] ldm_validate_partition_table(): Disk read failed. [ 81.758525][ T7122] Dev loop6: unable to read RDB block 0 [ 81.760517][ T7122] loop6: unable to read partition table [ 81.762451][ T7122] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 81.774489][ T7122] ldm_validate_partition_table(): Disk read failed. [ 81.777985][ T7122] Dev loop6: unable to read RDB block 0 [ 81.779987][ T7122] loop6: unable to read partition table [ 81.783328][ T5382] ldm_validate_partition_table(): Disk read failed. [ 81.793118][ T5382] Dev loop6: unable to read RDB block 0 [ 81.796074][ T5382] loop6: unable to read partition table [ 81.816732][ T10] tipc: Node number set to 2886997007 [ 82.007893][ T7155] loop6: detected capacity change from 0 to 2560 [ 82.011641][ T7131] ldm_validate_partition_table(): Disk read failed. [ 82.024016][ T7131] Dev loop6: unable to read RDB block 0 [ 82.026899][ T7131] loop6: unable to read partition table [ 82.039233][ T7155] ldm_validate_partition_table(): Disk read failed. [ 82.042738][ T7155] Dev loop6: unable to read RDB block 0 [ 82.052935][ T7155] loop6: unable to read partition table [ 82.055381][ T7155] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 82.066770][ T7155] ldm_validate_partition_table(): Disk read failed. [ 82.076018][ T7155] Dev loop6: unable to read RDB block 0 [ 82.078134][ T7155] loop6: unable to read partition table [ 82.162236][ T7176] 9pnet: Could not find request transport: v† [ 82.175477][ T7176] overlayfs: failed to clone upperpath [ 82.191525][ T5983] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 82.240022][ T7188] vlan3: entered allmulticast mode [ 82.241689][ T7188] bond0: entered allmulticast mode [ 82.243362][ T7188] bond_slave_0: entered allmulticast mode [ 82.247072][ T7188] bond_slave_1: entered allmulticast mode [ 82.453705][ T7217] cgroup: Name too long [ 82.527346][ T7230] netlink: 'syz.2.344': attribute type 11 has an invalid length. [ 82.584122][ T7240] tmpfs: Bad value for 'mpol' [ 82.595268][ T7242] netlink: 'syz.2.347': attribute type 6 has an invalid length. [ 82.733997][ T7252] netlink: 'syz.1.350': attribute type 10 has an invalid length. [ 82.745677][ T7252] batman_adv: batadv0: Adding interface: team0 [ 82.748442][ T7252] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.759681][ T1221] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 82.760909][ T7252] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 82.924707][ T1221] usb 8-1: Using ep0 maxpacket: 8 [ 82.928435][ T1221] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 82.931830][ T1221] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.935971][ T1221] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.939944][ T1221] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.944000][ T1221] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.949710][ T1221] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.953538][ T1221] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.161327][ T1221] usb 8-1: GET_CAPABILITIES returned 0 [ 83.163176][ T1221] usbtmc 8-1:16.0: can't read capabilities [ 83.307514][ T5983] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 83.310990][ T5983] Bluetooth: hci1: Injecting HCI hardware error event [ 83.316155][ T5983] Bluetooth: hci1: hardware error 0x00 [ 83.362445][ T1221] usb 8-1: USB disconnect, device number 5 [ 83.629387][ T7277] futex_wake_op: syz.2.358 tries to shift op by -1; fix this program [ 83.709582][ T7285] cgroup: Unknown subsys name 'cpuset' [ 83.873572][ T7291] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 84.178404][ T7315] block nbd1: shutting down sockets [ 84.197312][ T7319] netlink: 'syz.3.373': attribute type 62 has an invalid length. [ 84.328848][ T7330] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 84.332245][ T7330] VFS: Can't find a romfs filesystem on dev nullb0. [ 84.332245][ T7330] [ 84.349630][ T7322] netlink: 'syz.2.372': attribute type 62 has an invalid length. [ 84.535197][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.618913][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 84.618924][ T40] audit: type=1400 audit(1757230233.781:401): avc: denied { bind } for pid=7342 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.627492][ T40] audit: type=1400 audit(1757230233.781:402): avc: denied { name_bind } for pid=7342 comm="syz.0.379" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 84.634677][ T40] audit: type=1400 audit(1757230233.781:403): avc: denied { node_bind } for pid=7342 comm="syz.0.379" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 84.659748][ T7346] __nla_validate_parse: 21 callbacks suppressed [ 84.659757][ T7346] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.380'. [ 84.714782][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 84.718794][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 84.723224][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.728083][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.731414][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.734403][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.734990][ T7354] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.384' sets config #1 [ 84.738681][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.744010][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.766531][ T7356] netlink: 152 bytes leftover after parsing attributes in process `syz.0.385'. [ 84.766952][ T40] audit: type=1400 audit(1757230233.931:404): avc: denied { create } for pid=7355 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 84.778632][ T40] audit: type=1400 audit(1757230233.931:405): avc: denied { getopt } for pid=7355 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 84.824965][ T5971] Bluetooth: hci3: command tx timeout [ 84.949644][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 84.951379][ T34] usbtmc 8-1:16.0: can't read capabilities [ 84.953321][ T7373] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.390'. [ 85.005970][ T40] audit: type=1400 audit(1757230234.171:406): avc: denied { ioctl } for pid=7362 comm="syz.0.388" path="socket:[16697]" dev="sockfs" ino=16697 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.010978][ T7375] loop6: detected capacity change from 0 to 524287999 [ 85.067164][ T40] audit: type=1400 audit(1757230234.231:407): avc: denied { write } for pid=7385 comm="syz.1.394" path="socket:[16710]" dev="sockfs" ino=16710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.091817][ T40] audit: type=1400 audit(1757230234.251:408): avc: denied { bind } for pid=7392 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.151779][ T34] usb 8-1: USB disconnect, device number 6 [ 85.185373][ T7402] could not allocate digest TFM handle cryptd(blake2b-160) [ 85.214459][ T7415] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 85.241274][ T40] audit: type=1400 audit(1757230234.401:409): avc: denied { create } for pid=7416 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 85.245474][ T7417] overlayfs: failed to clone upperpath [ 85.247382][ T40] audit: type=1400 audit(1757230234.401:410): avc: denied { ioctl } for pid=7416 comm="syz.2.402" path="socket:[16079]" dev="sockfs" ino=16079 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 85.257903][ T7417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.402'. [ 85.311208][ T5971] Bluetooth: hci3: Malformed LE Event: 0x1d [ 85.395056][ T5983] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 85.567973][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.571575][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.668980][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.672229][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.747239][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.750556][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.858707][ T1145] netdevsim netdevsim2 ªªªªªª (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.862957][ T1145] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.995068][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.000165][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.003688][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.008229][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.011786][ T5971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.014548][ T1145] bridge_slave_1: left allmulticast mode [ 86.016532][ T1145] bridge_slave_1: left promiscuous mode [ 86.019783][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.029971][ T1145] bridge_slave_0: left allmulticast mode [ 86.031737][ T1145] bridge_slave_0: left promiscuous mode [ 86.033555][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.146905][ T1145] dvmrp2 (unregistering): left allmulticast mode [ 86.264808][ T5971] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 86.267542][ T5971] Bluetooth: hci3: Injecting HCI hardware error event [ 86.270581][ T5983] Bluetooth: hci3: hardware error 0x00 [ 86.293886][ T1145] bond1 (unregistering): (slave bridge2): Releasing active interface [ 86.392603][ T1145] bond4 (unregistering): (slave bridge3): Releasing active interface [ 86.491965][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.495086][ T1145] bond_slave_0: left allmulticast mode [ 86.498236][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.501129][ T1145] bond_slave_1: left allmulticast mode [ 86.503441][ T1145] bond0 (unregistering): Released all slaves [ 86.511390][ T1145] bond1 (unregistering): Released all slaves [ 86.560346][ T1145] bond2 (unregistering): Released all slaves [ 86.570901][ T1145] bond3 (unregistering): Released all slaves [ 86.577272][ T1145] bond4 (unregistering): Released all slaves [ 86.592677][ T7454] sp0: Synchronizing with TNC [ 86.595937][ T7463] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.420'. [ 86.652468][ T1145] tipc: Disabling bearer [ 86.657440][ T1145] tipc: Left network mode [ 86.782879][ T7451] chnl_net:caif_netlink_parms(): no params data found [ 86.859438][ T1145] hsr_slave_0: left promiscuous mode [ 86.861562][ T1145] hsr_slave_1: left promiscuous mode [ 86.863617][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.866695][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.869664][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.871989][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.890916][ T1145] veth1_macvtap: left promiscuous mode [ 86.892850][ T1145] veth0_macvtap: left promiscuous mode [ 86.894796][ T1145] veth1_vlan: left promiscuous mode [ 86.897106][ T1145] veth0_vlan: left promiscuous mode [ 86.916134][ T6328] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 86.923222][ T5971] Bluetooth: hci2: Malformed LE Event: 0x1b [ 87.000919][ T7503] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 87.064723][ T6328] usb 8-1: Using ep0 maxpacket: 8 [ 87.070012][ T6328] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 87.073309][ T6328] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.076838][ T6328] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.080694][ T6328] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.084757][ T6328] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.090199][ T6328] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.093082][ T6328] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.190547][ T7518] netlink: 5 bytes leftover after parsing attributes in process `syz.1.430'. [ 87.305589][ T6328] usb 8-1: GET_CAPABILITIES returned 0 [ 87.307960][ T6328] usbtmc 8-1:16.0: can't read capabilities [ 87.467607][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 87.507154][ T34] usb 8-1: USB disconnect, device number 7 [ 87.530062][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 87.958761][ T7527] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.433'. [ 87.973379][ T7451] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.976577][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.979693][ T7451] bridge_slave_0: entered allmulticast mode [ 87.983412][ T7451] bridge_slave_0: entered promiscuous mode [ 87.988897][ T7451] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.991847][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.995015][ T7451] bridge_slave_1: entered allmulticast mode [ 87.998916][ T7451] bridge_slave_1: entered promiscuous mode [ 88.025780][ T5971] Bluetooth: hci1: command tx timeout [ 88.038776][ T7539] tmpfs: Bad value for 'mpol' [ 88.060626][ T7451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.076539][ T7451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.136093][ T7451] team0: Port device team_slave_0 added [ 88.142811][ T7451] team0: Port device team_slave_1 added [ 88.178598][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.180905][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.188888][ T7451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.193151][ T7451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.196009][ T7451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.203934][ T7451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.213433][ T7562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7562 comm=syz.0.442 [ 88.273601][ T7562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7562 comm=syz.0.442 [ 88.278385][ T7451] hsr_slave_0: entered promiscuous mode [ 88.280697][ T7451] hsr_slave_1: entered promiscuous mode [ 88.282740][ T7451] debugfs: 'hsr0' already exists in 'hsr' [ 88.286923][ T7451] Cannot create hsr debugfs directory [ 88.330273][ T1145] IPVS: stop unused estimator thread 0... [ 88.343899][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 88.345355][ T5983] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 88.368463][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 88.371301][ T7581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=54 sclass=netlink_tcpdiag_socket pid=7581 comm=syz.0.450 [ 88.381420][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 88.405867][ T7586] IPVS: Error joining to the multicast group [ 88.440043][ T7588] loop3: detected capacity change from 0 to 7 [ 88.443771][ T7588] Dev loop3: unable to read RDB block 7 [ 88.447823][ T7588] loop3: unable to read partition table [ 88.450210][ T7588] loop3: partition table beyond EOD, truncated [ 88.454734][ T7588] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.458604][ T7451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.469643][ T7451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.495214][ T7451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.499540][ T7451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.543558][ T7451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.573061][ T7451] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.583826][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.586136][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.590807][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.593038][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.730270][ T7451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.775135][ T7628] Malformed UNC in devname [ 88.775135][ T7628] [ 88.777778][ T7628] CIFS: VFS: Malformed UNC in devname [ 88.868017][ T7451] veth0_vlan: entered promiscuous mode [ 88.872881][ T7451] veth1_vlan: entered promiscuous mode [ 88.889816][ T7451] veth0_macvtap: entered promiscuous mode [ 88.897036][ T7451] veth1_macvtap: entered promiscuous mode [ 88.907352][ T7451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.915089][ T7451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.922249][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.929999][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.933197][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.941945][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.006664][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.009671][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.023729][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.026636][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.094219][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7677 comm=syz.1.470 [ 89.098303][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7677 comm=syz.1.470 [ 89.102248][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7677 comm=syz.1.470 [ 89.106302][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7677 comm=syz.1.470 [ 89.110084][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7677 comm=syz.1.470 [ 89.113891][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7677 comm=syz.1.470 [ 89.229899][ T7695] netlink: 'syz.4.477': attribute type 11 has an invalid length. [ 89.232522][ T7695] netlink: 'syz.4.477': attribute type 4 has an invalid length. [ 89.430632][ T7701] qnx4: no qnx4 filesystem (no root dir). [ 89.434807][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.584781][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 89.589533][ T54] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 89.596048][ T54] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.599855][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.603275][ T54] usb 5-1: Product: syz [ 89.605253][ T54] usb 5-1: Manufacturer: syz [ 89.607287][ T54] usb 5-1: SerialNumber: syz [ 89.821586][ T54] cdc_ncm 5-1:1.0: bind() failure [ 89.826028][ T54] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 89.828131][ T54] cdc_ncm 5-1:1.1: bind() failure [ 89.832390][ T54] usb 5-1: USB disconnect, device number 3 [ 89.991052][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 89.991063][ T40] audit: type=1400 audit(1757230239.151:432): avc: denied { map } for pid=7706 comm="syz.3.480" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.028037][ T7712] input: syz1 as /devices/virtual/input/input13 [ 90.038783][ T7712] __nla_validate_parse: 42 callbacks suppressed [ 90.038793][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 90.047114][ T7131] udevd[7131]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 90.101761][ T7720] No source specified [ 90.114783][ T5983] Bluetooth: hci1: command tx timeout [ 90.158099][ T40] audit: type=1400 audit(1757230239.321:433): avc: denied { accept } for pid=7727 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.227836][ T7739] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.491'. [ 90.408363][ T7752] IPVS: Error connecting to the multicast addr [ 90.498154][ T40] audit: type=1400 audit(1757230239.661:434): avc: denied { connect } for pid=7753 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.508361][ T40] audit: type=1400 audit(1757230239.661:435): avc: denied { write } for pid=7753 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.633932][ T40] audit: type=1400 audit(1757230239.791:436): avc: denied { read } for pid=7764 comm="syz.0.501" laddr=fe80::b lport=60652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.701549][ T7772] netlink: 27 bytes leftover after parsing attributes in process `syz.0.504'. [ 90.705982][ T40] audit: type=1400 audit(1757230239.871:437): avc: denied { module_request } for pid=7771 comm="syz.0.504" kmod=7463705FFA scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 90.833552][ T7786] netlink: 44 bytes leftover after parsing attributes in process `syz.4.506'. [ 90.837545][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'. [ 90.885795][ T40] audit: type=1400 audit(1757230240.051:438): avc: denied { name_bind } for pid=7795 comm="syz.4.509" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 90.892217][ T40] audit: type=1400 audit(1757230240.051:439): avc: denied { map } for pid=7796 comm="syz.0.510" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.900118][ T40] audit: type=1400 audit(1757230240.051:440): avc: denied { call } for pid=7796 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.932452][ T7800] capability: warning: `syz.4.511' uses 32-bit capabilities (legacy support in use) [ 91.132725][ T40] audit: type=1400 audit(1757230240.291:441): avc: denied { ioctl } for pid=7807 comm="syz.4.514" path="socket:[19662]" dev="sockfs" ino=19662 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 91.142634][ T7808] overlayfs: missing 'lowerdir' [ 91.361879][ T7798] syz.0.510 (7798): drop_caches: 2 [ 91.388538][ T7828] fuse: Bad value for 'fd' [ 91.390482][ T7829] fuse: Bad value for 'fd' [ 91.393447][ T7828] overlayfs: failed to resolve './bus/file0': -2 [ 91.704912][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 91.716900][ T7846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7846 comm=syz.1.525 [ 91.721108][ T7846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.770598][ T7855] Bluetooth: MGMT ver 1.23 [ 91.865128][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 91.868806][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.873457][ T34] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 91.877526][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.883005][ T34] usb 9-1: config 0 descriptor?? [ 92.004680][ T6011] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 92.059616][ T7861] tap0: tun_chr_ioctl cmd 1074025675 [ 92.061332][ T7861] tap0: persist disabled [ 92.101473][ T34] usbhid 9-1:0.0: can't add hid device: -71 [ 92.103459][ T34] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 92.112430][ T34] usb 9-1: USB disconnect, device number 2 [ 92.144666][ T6011] usb 8-1: device descriptor read/64, error -71 [ 92.184719][ T5983] Bluetooth: hci1: command tx timeout [ 92.347325][ T7867] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 92.349778][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'. [ 92.385008][ T6011] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 92.516213][ T6011] usb 8-1: device descriptor read/64, error -71 [ 92.634857][ T6011] usb usb8-port1: attempt power cycle [ 92.769051][ T7886] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.537'. [ 92.974662][ T6011] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 92.995153][ T6011] usb 8-1: device descriptor read/8, error -71 [ 93.234700][ T6011] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 93.255269][ T6011] usb 8-1: device descriptor read/8, error -71 [ 93.364935][ T6011] usb usb8-port1: unable to enumerate USB device [ 93.514165][ T7899] overlayfs: overlapping lowerdir path [ 94.264813][ T5983] Bluetooth: hci1: command tx timeout [ 94.732518][ T7916] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.546'. [ 94.761332][ T7918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1054 sclass=netlink_route_socket pid=7918 comm=syz.1.547 [ 94.813809][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.817088][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.880959][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.887361][ T7927] netlink: 84 bytes leftover after parsing attributes in process `syz.3.548'. [ 94.888412][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.900754][ T7918] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 94.903696][ T7918] overlayfs: missing 'lowerdir' [ 94.941033][ T7935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.552'. [ 94.961026][ T7920] geneve2: left promiscuous mode [ 94.977947][ T4794] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.980800][ T4794] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.983547][ T4794] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.986734][ T4794] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.055853][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 95.055865][ T40] audit: type=1400 audit(1757230244.221:460): avc: denied { read } for pid=7937 comm="syz.1.553" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.064954][ T40] audit: type=1400 audit(1757230244.221:461): avc: denied { open } for pid=7937 comm="syz.1.553" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.072035][ T40] audit: type=1400 audit(1757230244.221:462): avc: denied { create } for pid=7937 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 95.124669][ T6011] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 95.217058][ T7950] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.556'. [ 95.266943][ T40] audit: type=1400 audit(1757230244.431:463): avc: denied { bind } for pid=7953 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.273078][ T40] audit: type=1400 audit(1757230244.431:464): avc: denied { connect } for pid=7953 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.282665][ T6011] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 95.288387][ T6011] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.291750][ T6011] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.297197][ T6011] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 95.302679][ T6011] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 95.305861][ T6011] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 95.308412][ T6011] usb 8-1: Manufacturer: syz [ 95.312073][ T6011] usb 8-1: config 0 descriptor?? [ 95.615952][ T7961] netlink: 72 bytes leftover after parsing attributes in process `syz.4.560'. [ 95.620796][ T40] audit: type=1400 audit(1757230244.781:465): avc: denied { ioctl } for pid=7960 comm="syz.4.560" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.721371][ T6011] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 95.732541][ T6011] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 95.856913][ T40] audit: type=1400 audit(1757230245.021:466): avc: denied { execute } for pid=7969 comm="syz.1.563" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 95.971156][ T7976] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.566'. [ 95.977637][ T6011] usb 8-1: USB disconnect, device number 12 [ 96.004037][ T40] audit: type=1400 audit(1757230245.161:467): avc: denied { execute } for pid=7977 comm="syz.1.567" path="/proc/sysvipc/msg" dev="proc" ino=4026532181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 96.158894][ T7983] 9pnet_fd: Insufficient options for proto=fd [ 96.304678][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 96.474733][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 96.477831][ T34] usb 6-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 64 [ 96.480765][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 [ 96.484554][ T34] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 96.487326][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.489716][ T34] usb 6-1: Product: syz [ 96.491062][ T34] usb 6-1: Manufacturer: syz [ 96.492527][ T34] usb 6-1: SerialNumber: syz [ 96.496761][ T7981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.521038][ T40] audit: type=1400 audit(1757230245.681:468): avc: denied { create } for pid=7994 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 96.526737][ T40] audit: type=1400 audit(1757230245.691:469): avc: denied { ioctl } for pid=7994 comm="syz.3.572" path="socket:[24898]" dev="sockfs" ino=24898 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 96.641265][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 96.646736][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.649908][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 96.649979][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 96.720466][ T8009] trusted_key: encrypted_key: insufficient parameters specified [ 96.822386][ T8020] kvm: pic: non byte write [ 96.824264][ T8020] kvm: pic: non byte write [ 96.826784][ T8020] kvm: pic: single mode not supported [ 96.826793][ T8020] kvm: pic: level sensitive irq not supported [ 96.830250][ T8020] kvm: pic: non byte write [ 96.834112][ T8020] kvm: pic: non byte write [ 96.840738][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.582'. [ 96.906841][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.910580][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.917162][ T34] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 14 proto 1 vid 0x04B8 pid 0x0202 [ 96.922223][ T34] usb 6-1: USB disconnect, device number 3 [ 96.926126][ T34] usblp0: removed [ 97.014810][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.063594][ T8030] netlink: 'syz.4.583': attribute type 4 has an invalid length. [ 97.164729][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 97.167828][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 97.172531][ T29] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 97.175451][ T29] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 97.178074][ T29] usb 5-1: Product: syz [ 97.179405][ T29] usb 5-1: Manufacturer: syz [ 97.180875][ T29] usb 5-1: SerialNumber: syz [ 97.183909][ T29] usb 5-1: config 0 descriptor?? [ 97.186160][ T8016] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.344758][ T1221] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 97.408280][ T34] usb 5-1: USB disconnect, device number 4 [ 97.456675][ T8036] sp0: Synchronizing with TNC [ 97.461156][ T8035] [U] è [ 97.496287][ T1221] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 97.499395][ T1221] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.503802][ T1221] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.508867][ T1221] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.513429][ T1221] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 97.518978][ T1221] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 97.522052][ T1221] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.526664][ T1221] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.532225][ T1221] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.536943][ T1221] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 97.542618][ T1221] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 97.545956][ T1221] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.550147][ T1221] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.554942][ T1221] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.557653][ T8038] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.586'. [ 97.559183][ T1221] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 97.561710][ T1221] usb 9-1: string descriptor 0 read error: -22 [ 97.568922][ T1221] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.572621][ T1221] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.582624][ T1221] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 97.782171][ T8065] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.596'. [ 97.783673][ T6018] usb 9-1: USB disconnect, device number 3 [ 97.800045][ T8067] Failed to get privilege flags for destination (handle=0x2:0x0) [ 97.869386][ T8078] overlayfs: missing 'lowerdir' [ 97.871576][ T8078] netlink: 'syz.1.602': attribute type 39 has an invalid length. [ 98.133007][ T8092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.138278][ T8094] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 98.310742][ T8099] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.607'. [ 98.376452][ T99] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.380297][ T99] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.383233][ T99] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.386861][ T99] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.506629][ T8122] tap0: tun_chr_ioctl cmd 1074025675 [ 98.509028][ T8122] tap0: persist enabled [ 98.511030][ T8122] tap0: tun_chr_ioctl cmd 1074025675 [ 98.513071][ T8122] tap0: persist disabled [ 98.692419][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.730689][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.820174][ T8142] binder: 8141:8142 ioctl c0306201 200000000640 returned -22 [ 98.988834][ T8159] netlink: 'syz.0.627': attribute type 5 has an invalid length. [ 98.995695][ T34] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 99.124716][ T6440] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 99.127493][ T34] usb 8-1: device descriptor read/64, error -71 [ 99.280131][ T6440] usb 9-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 99.290863][ T6440] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.295135][ T6440] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.298551][ T6440] usb 9-1: Product: syz [ 99.300402][ T6440] usb 9-1: Manufacturer: syz [ 99.302412][ T6440] usb 9-1: SerialNumber: syz [ 99.302913][ T8182] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 99.309853][ T8184] netlink: 'syz.1.636': attribute type 30 has an invalid length. [ 99.314684][ T8182] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 99.331441][ T1199] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.336332][ T1199] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.339343][ T1199] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.342603][ T1199] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.366905][ T8188] IPVS: Error connecting to the multicast addr [ 99.374827][ T34] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 99.514806][ T34] usb 8-1: device descriptor read/64, error -71 [ 99.573696][ T8155] hsr_slave_1 (unregistering): left promiscuous mode [ 99.623583][ T8207] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 99.638736][ T34] usb usb8-port1: attempt power cycle [ 99.723048][ T6440] usb 9-1: selecting invalid altsetting 1 [ 99.725268][ T6440] cdc_ncm 9-1:1.0: bind() failure [ 99.728996][ T6440] cdc_ncm 9-1:1.1: skipping garbage [ 99.730657][ T6440] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 99.732804][ T6440] cdc_ncm 9-1:1.1: bind() failure [ 99.737429][ T6440] usb 9-1: USB disconnect, device number 4 [ 99.805566][ T8220] trusted_key: encrypted_key: insufficient parameters specified [ 99.837898][ T8222] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.007769][ T34] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 100.035613][ T34] usb 8-1: device descriptor read/8, error -71 [ 100.051061][ T8235] openvswitch: netlink: Message has 5 unknown bytes. [ 100.088485][ T8238] sp0: Synchronizing with TNC [ 100.093662][ T8238] sp0: Found TNC [ 100.253891][ T8249] FAULT_INJECTION: forcing a failure. [ 100.253891][ T8249] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.256081][ T8247] __nla_validate_parse: 15 callbacks suppressed [ 100.256095][ T8247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.649'. [ 100.259299][ T8249] CPU: 2 UID: 0 PID: 8249 Comm: syz.4.650 Not tainted syzkaller #0 PREEMPT(full) [ 100.259313][ T8249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.259319][ T8249] Call Trace: [ 100.259322][ T8249] [ 100.259326][ T8249] dump_stack_lvl+0x16c/0x1f0 [ 100.259359][ T8249] should_fail_ex+0x512/0x640 [ 100.259380][ T8249] _copy_from_user+0x2e/0xd0 [ 100.259395][ T8249] sctp_setsockopt+0x2045/0xb870 [ 100.259411][ T8249] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 100.259431][ T8249] ? __pfx_sctp_setsockopt+0x10/0x10 [ 100.259451][ T8249] ? find_held_lock+0x2b/0x80 [ 100.259474][ T8249] ? selinux_socket_setsockopt+0x6a/0x80 [ 100.259495][ T8249] ? sock_common_setsockopt+0x2e/0xf0 [ 100.259516][ T8249] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 100.259541][ T8249] do_sock_setsockopt+0xf3/0x1d0 [ 100.259565][ T8249] __sys_setsockopt+0x1a0/0x230 [ 100.259579][ T8249] __x64_sys_setsockopt+0xbd/0x160 [ 100.259591][ T8249] ? do_syscall_64+0x91/0x4c0 [ 100.259609][ T8249] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.259622][ T8249] do_syscall_64+0xcd/0x4c0 [ 100.259636][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.259647][ T8249] RIP: 0033:0x7f092618ebe9 [ 100.259656][ T8249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.259666][ T8249] RSP: 002b:00007f09270e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.259676][ T8249] RAX: ffffffffffffffda RBX: 00007f09263c5fa0 RCX: 00007f092618ebe9 [ 100.259682][ T8249] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000003 [ 100.259688][ T8249] RBP: 00007f09270e6090 R08: 0000000000000010 R09: 0000000000000000 [ 100.259694][ T8249] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 100.259700][ T8249] R13: 00007f09263c6038 R14: 00007f09263c5fa0 R15: 00007ffeef8a8678 [ 100.259713][ T8249] [ 100.311851][ T8254] CIFS mount error: No usable UNC path provided in device string! [ 100.311851][ T8254] [ 100.312247][ T34] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 100.320700][ T8254] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 100.345313][ T34] usb 8-1: device descriptor read/8, error -71 [ 100.347589][ T8247] netlink: 52 bytes leftover after parsing attributes in process `syz.1.649'. [ 100.384217][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 100.384227][ T40] audit: type=1400 audit(1757230249.541:505): avc: denied { setattr } for pid=8261 comm="syz.1.655" name="SCO" dev="sockfs" ino=26301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.394716][ T8263] usb usb9: usbfs: process 8263 (syz.1.655) did not claim interface 26 before use [ 100.455640][ T34] usb usb8-port1: unable to enumerate USB device [ 100.456454][ T8282] netlink: 'syz.1.661': attribute type 9 has an invalid length. [ 100.518258][ T8294] netlink: 'syz.0.665': attribute type 2 has an invalid length. [ 100.521661][ T8294] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 100.567120][ T8295] netlink: 'syz.4.666': attribute type 1 has an invalid length. [ 100.570502][ T8298] smc: net device bond0 applied user defined pnetid SYZ0 [ 100.575153][ T8290] kvm: pic: non byte write [ 100.611890][ T40] audit: type=1400 audit(1757230249.771:506): avc: denied { getopt } for pid=8299 comm="syz.0.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.648959][ T8304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.653636][ T8304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.658213][ T8304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.663360][ T8306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.679613][ T40] audit: type=1400 audit(1757230249.841:507): avc: denied { watch_mount } for pid=8310 comm="syz.0.672" path="/128" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.752962][ T40] audit: type=1400 audit(1757230249.911:508): avc: denied { read write } for pid=8323 comm="syz.1.677" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.760562][ T40] audit: type=1400 audit(1757230249.911:509): avc: denied { open } for pid=8323 comm="syz.1.677" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.770735][ T40] audit: type=1400 audit(1757230249.911:510): avc: denied { append } for pid=8323 comm="syz.1.677" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.777993][ T40] audit: type=1400 audit(1757230249.911:511): avc: denied { map } for pid=8323 comm="syz.1.677" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.785198][ T40] audit: type=1400 audit(1757230249.911:512): avc: denied { execute } for pid=8323 comm="syz.1.677" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.798786][ T40] audit: type=1326 audit(1757230249.961:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.0.676" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f805118ebe9 code=0x0 [ 100.917045][ T40] audit: type=1400 audit(1757230250.081:514): avc: denied { ioctl } for pid=8326 comm="syz.1.678" path="socket:[26405]" dev="sockfs" ino=26405 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.268893][ T8342] overlayfs: failed to resolve './bus': -2 [ 101.574772][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 101.724688][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 101.728055][ T29] usb 6-1: config 2 interface 0 has no altsetting 0 [ 101.731616][ T29] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 101.734416][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.737664][ T29] usb 6-1: Product: syz [ 101.739028][ T29] usb 6-1: Manufacturer: syz [ 101.740501][ T29] usb 6-1: SerialNumber: syz [ 101.770235][ T8375] binder: BINDER_SET_CONTEXT_MGR already set [ 101.772281][ T8375] binder: 8374:8375 ioctl 4018620d 200000000040 returned -16 [ 101.944655][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 101.960450][ T29] usb 6-1: USB disconnect, device number 4 [ 102.094655][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 102.097735][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.100750][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.103768][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.107288][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.111348][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.114252][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.119771][ T8390] netlink: 72 bytes leftover after parsing attributes in process `syz.3.699'. [ 102.126608][ T8390] No source specified [ 102.128153][ T8390] kAFS: unable to lookup cell '/,c¾ûL' [ 102.321171][ T8367] netlink: 'syz.4.691': attribute type 3 has an invalid length. [ 102.323713][ T8367] netlink: 132 bytes leftover after parsing attributes in process `syz.4.691'. [ 102.328669][ T34] usb 9-1: GET_CAPABILITIES returned 0 [ 102.330482][ T34] usbtmc 9-1:16.0: can't read capabilities [ 102.424791][ T5971] Bluetooth: hci2: command 0x0406 tx timeout [ 102.485975][ T8406] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 102.490456][ T8406] Error validating options; rc = [-22] [ 102.513972][ T8413] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 102.529841][ T6328] usb 9-1: USB disconnect, device number 5 [ 102.577741][ T8426] input: syz1 as /devices/virtual/input/input14 [ 102.638227][ T8428] binder: BINDER_SET_CONTEXT_MGR already set [ 102.640343][ T8428] binder: 8427:8428 ioctl 4018620d 200000000280 returned -16 [ 102.661872][ T8431] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 102.786634][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 103.463000][ T8448] team0: No ports can be present during mode change [ 103.466536][ T8449] vlan0: entered promiscuous mode [ 103.473415][ T8449] team0: Port device vlan0 added [ 103.475993][ T8450] tipc: Started in network mode [ 103.477580][ T8450] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 103.479780][ T8450] tipc: Enabled bearer , priority 0 [ 103.985801][ T982] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 104.003520][ T8486] hfs: can't find a HFS filesystem on dev sr0 [ 104.134766][ T982] usb 8-1: Using ep0 maxpacket: 8 [ 104.138495][ T982] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 104.141815][ T982] usb 8-1: config 179 has no interface number 0 [ 104.143790][ T982] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 104.147367][ T982] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 104.150789][ T982] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 95, changing to 10 [ 104.154482][ T982] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 25968, setting to 1024 [ 104.154501][ T982] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.154515][ T982] usb 8-1: config 179 interface 65 has no altsetting 0 [ 104.154538][ T982] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 104.154549][ T982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.173384][ T8479] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.178199][ T982] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input15 [ 104.194830][ T5983] Bluetooth: hci2: unexpected event for opcode 0x9978 [ 104.197861][ T5983] Bluetooth: hci2: unexpected event for opcode 0x9978 [ 104.225741][ T5367] input input15: unable to receive magic message: -110 [ 104.232621][ T5367] input input15: unable to receive magic message: -32 [ 104.238788][ T5367] input input15: unable to receive magic message: -32 [ 104.243138][ T5367] input input15: unable to receive magic message: -32 [ 104.368986][ T8462] ceph: No mds server is up or the cluster is laggy [ 104.373165][ T8457] ceph: No mds server is up or the cluster is laggy [ 104.398372][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.401376][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.418312][ T8479] input input15: unable to receive magic message: -32 [ 104.434866][ T8511] raw_sendmsg: syz.1.738 forgot to set AF_INET. Fix it! [ 104.438284][ T8511] tmpfs: Bad value for 'mpol' [ 104.473419][ T8515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.740'. [ 104.516344][ T982] usb 8-1: USB disconnect, device number 17 [ 104.518300][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 104.605728][ T6440] tipc: Node number set to 11578026 [ 104.637840][ T8527] binder: 8526:8527 ioctl 5404 0 returned -22 [ 104.640033][ T8527] binder: 8526:8527 ioctl 5429 200000003680 returned -22 [ 104.642455][ T8527] binder: 8526:8527 ioctl 540f 2000000037c0 returned -22 [ 104.686700][ T8539] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 104.699363][ T8539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.722498][ T8539] veth5: entered promiscuous mode [ 104.726681][ T8539] bond3: (slave veth5): Enslaving as an active interface with a down link [ 104.738979][ T8539] vlan2: entered allmulticast mode [ 104.741000][ T8539] bond3: entered allmulticast mode [ 104.744179][ T8539] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 104.924369][ T8550] overlay: filesystem on ./file0 not supported as upperdir [ 105.057937][ T8569] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 105.100510][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 105.137591][ T8581] XFS (nullb0): Invalid superblock magic number [ 105.181548][ T8593] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 105.206120][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 105.222200][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.763'. [ 105.268713][ T8608] netlink: 'syz.3.765': attribute type 6 has an invalid length. [ 105.271157][ T8608] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.765'. [ 105.294674][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 105.342815][ T8606] tmpfs: Unknown parameter 'mpatic:0#' [ 105.406928][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 105.406940][ T40] audit: type=1400 audit(1757230254.571:526): avc: denied { setopt } for pid=8618 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.416413][ T40] audit: type=1400 audit(1757230254.581:527): avc: denied { read } for pid=8618 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.445852][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 105.448704][ T29] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 105.451643][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.456471][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.459473][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.463409][ T29] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 105.467099][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.470705][ T29] usb 6-1: config 0 descriptor?? [ 105.474672][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17 [ 105.479171][ T5367] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 105.483570][ T5367] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 105.487909][ T5367] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 105.491906][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 105.492118][ T5367] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 105.498200][ T40] audit: type=1400 audit(1757230254.671:528): avc: denied { write } for pid=8634 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.499207][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 105.600414][ T8658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.777'. [ 105.705945][ T10] usb 6-1: USB disconnect, device number 5 [ 106.135849][ T40] audit: type=1400 audit(1757230255.301:529): avc: denied { read } for pid=8666 comm="syz.0.779" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.144160][ T8668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.144424][ T40] audit: type=1400 audit(1757230255.301:530): avc: denied { open } for pid=8666 comm="syz.0.779" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.150087][ T8668] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 106.157485][ T40] audit: type=1400 audit(1757230255.311:531): avc: denied { connect } for pid=8666 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.309338][ T8671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63256 sclass=netlink_route_socket pid=8671 comm=syz.1.780 [ 106.313648][ T40] audit: type=1400 audit(1757230255.471:532): avc: denied { connect } for pid=8669 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.494487][ T40] audit: type=1400 audit(1757230255.651:533): avc: denied { remount } for pid=8672 comm="syz.3.781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 106.530086][ T8675] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 106.532561][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 106.771396][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 107.059685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.062787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.066077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.069124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.071665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.075617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.078377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.081786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.085260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.088657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.178322][ T8694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.787'. [ 107.261365][ T8697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.787'. [ 107.505006][ T40] audit: type=1400 audit(1757230256.661:534): avc: denied { getopt } for pid=8698 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.532658][ T40] audit: type=1400 audit(1757230256.691:535): avc: denied { ioctl } for pid=8700 comm="syz.1.790" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.562196][ T8701] ================================================================== [ 107.562206][ T8701] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 107.562249][ T8701] Write of size 8 at addr ffffc90005479000 by task syz.1.790/8701 [ 107.562258][ T8701] [ 107.562264][ T8701] CPU: 3 UID: 0 PID: 8701 Comm: syz.1.790 Not tainted syzkaller #0 PREEMPT(full) [ 107.562277][ T8701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.562284][ T8701] Call Trace: [ 107.562287][ T8701] [ 107.562291][ T8701] dump_stack_lvl+0x116/0x1f0 [ 107.562310][ T8701] print_report+0xcd/0x630 [ 107.562322][ T8701] ? __virt_addr_valid+0x81/0x610 [ 107.562339][ T8701] ? sys_imageblit+0x1a6f/0x1e60 [ 107.562354][ T8701] kasan_report+0xe0/0x110 [ 107.562366][ T8701] ? sys_imageblit+0x1a6f/0x1e60 [ 107.562383][ T8701] sys_imageblit+0x1a6f/0x1e60 [ 107.562424][ T8701] ? __pfx_sys_imageblit+0x10/0x10 [ 107.562441][ T8701] ? lock_acquire+0x179/0x350 [ 107.562458][ T8701] ? __page_table_check_ptes_set+0x1ae/0x420 [ 107.562470][ T8701] ? find_held_lock+0x2b/0x80 [ 107.562483][ T8701] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 107.562494][ T8701] ? pfn_valid+0x26a/0x4d0 [ 107.562508][ T8701] ? vmap_small_pages_range_noflush+0xc47/0xdb0 [ 107.562522][ T8701] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 107.562536][ T8701] bit_putcs+0x90f/0xde0 [ 107.562552][ T8701] ? __pfx_bit_putcs+0x10/0x10 [ 107.562563][ T8701] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 107.562578][ T8701] ? fb_get_color_depth+0x120/0x250 [ 107.562589][ T8701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.562602][ T8701] ? __pfx_bit_putcs+0x10/0x10 [ 107.562614][ T8701] fbcon_putcs+0x384/0x4a0 [ 107.562626][ T8701] do_update_region+0x2e6/0x3f0 [ 107.562641][ T8701] invert_screen+0x1e4/0x590 [ 107.562653][ T8701] ? __pfx_invert_screen+0x10/0x10 [ 107.562664][ T8701] ? __pfx_complement_pos+0x10/0x10 [ 107.562675][ T8701] ? vc_do_resize+0x24d/0x10e0 [ 107.562685][ T8701] ? __vmalloc_node_noprof+0xad/0xf0 [ 107.562700][ T8701] clear_selection+0x59/0x70 [ 107.562710][ T8701] vc_do_resize+0xd9b/0x10e0 [ 107.562723][ T8701] ? __pfx_vc_do_resize+0x10/0x10 [ 107.562736][ T8701] fbcon_set_disp+0x7ad/0xe50 [ 107.562747][ T8701] set_con2fb_map+0x703/0x1080 [ 107.562759][ T8701] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 107.562771][ T8701] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 107.562784][ T8701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.562801][ T8701] do_fb_ioctl+0x328/0x7e0 [ 107.562814][ T8701] ? __pfx_do_fb_ioctl+0x10/0x10 [ 107.562832][ T8701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.562851][ T8701] ? selinux_file_ioctl+0x180/0x270 [ 107.562869][ T8701] fb_ioctl+0xe5/0x150 [ 107.562882][ T8701] ? __pfx_fb_ioctl+0x10/0x10 [ 107.562896][ T8701] __x64_sys_ioctl+0x18b/0x210 [ 107.562913][ T8701] do_syscall_64+0xcd/0x4c0 [ 107.562933][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.562943][ T8701] RIP: 0033:0x7fc4cf98ebe9 [ 107.562952][ T8701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.562965][ T8701] RSP: 002b:00007fc4d0722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.562975][ T8701] RAX: ffffffffffffffda RBX: 00007fc4cfbc5fa0 RCX: 00007fc4cf98ebe9 [ 107.562982][ T8701] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 107.562988][ T8701] RBP: 00007fc4cfa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 107.562994][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.563000][ T8701] R13: 00007fc4cfbc6038 R14: 00007fc4cfbc5fa0 R15: 00007ffd4d0d21d8 [ 107.563009][ T8701] [ 107.563012][ T8701] [ 107.563015][ T8701] The buggy address belongs to a vmalloc virtual mapping [ 107.563023][ T8701] Memory state around the buggy address: [ 107.563029][ T8701] ffffc90005478f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.563036][ T8701] ffffc90005478f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.563043][ T8701] >ffffc90005479000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.563048][ T8701] ^ [ 107.563053][ T8701] ffffc90005479080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.563060][ T8701] ffffc90005479100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 107.563065][ T8701] ================================================================== [ 107.563071][ T8701] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.563079][ T8701] CPU: 3 UID: 0 PID: 8701 Comm: syz.1.790 Not tainted syzkaller #0 PREEMPT(full) [ 107.563091][ T8701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.563098][ T8701] Call Trace: [ 107.563101][ T8701] [ 107.563105][ T8701] dump_stack_lvl+0x3d/0x1f0 [ 107.563117][ T8701] vpanic+0x6e8/0x7a0 [ 107.563134][ T8701] ? __pfx_vpanic+0x10/0x10 [ 107.563149][ T8701] ? __pfx_vprintk_emit+0x10/0x10 [ 107.563163][ T8701] ? sys_imageblit+0x1a6f/0x1e60 [ 107.563178][ T8701] panic+0xca/0xd0 [ 107.563192][ T8701] ? __pfx_panic+0x10/0x10 [ 107.563210][ T8701] check_panic_on_warn+0xab/0xb0 [ 107.563220][ T8701] end_report+0x107/0x170 [ 107.563230][ T8701] kasan_report+0xee/0x110 [ 107.563242][ T8701] ? sys_imageblit+0x1a6f/0x1e60 [ 107.563257][ T8701] sys_imageblit+0x1a6f/0x1e60 [ 107.563273][ T8701] ? __pfx_sys_imageblit+0x10/0x10 [ 107.563289][ T8701] ? lock_acquire+0x179/0x350 [ 107.563303][ T8701] ? __page_table_check_ptes_set+0x1ae/0x420 [ 107.563314][ T8701] ? find_held_lock+0x2b/0x80 [ 107.563326][ T8701] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 107.563336][ T8701] ? pfn_valid+0x26a/0x4d0 [ 107.563349][ T8701] ? vmap_small_pages_range_noflush+0xc47/0xdb0 [ 107.563362][ T8701] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 107.563375][ T8701] bit_putcs+0x90f/0xde0 [ 107.563389][ T8701] ? __pfx_bit_putcs+0x10/0x10 [ 107.563401][ T8701] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 107.563415][ T8701] ? fb_get_color_depth+0x120/0x250 [ 107.563427][ T8701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.563439][ T8701] ? __pfx_bit_putcs+0x10/0x10 [ 107.563450][ T8701] fbcon_putcs+0x384/0x4a0 [ 107.563461][ T8701] do_update_region+0x2e6/0x3f0 [ 107.563477][ T8701] invert_screen+0x1e4/0x590 [ 107.563488][ T8701] ? __pfx_invert_screen+0x10/0x10 [ 107.563499][ T8701] ? __pfx_complement_pos+0x10/0x10 [ 107.563511][ T8701] ? vc_do_resize+0x24d/0x10e0 [ 107.563522][ T8701] ? __vmalloc_node_noprof+0xad/0xf0 [ 107.563536][ T8701] clear_selection+0x59/0x70 [ 107.563546][ T8701] vc_do_resize+0xd9b/0x10e0 [ 107.563559][ T8701] ? __pfx_vc_do_resize+0x10/0x10 [ 107.563572][ T8701] fbcon_set_disp+0x7ad/0xe50 [ 107.563584][ T8701] set_con2fb_map+0x703/0x1080 [ 107.563596][ T8701] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 107.563609][ T8701] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 107.563622][ T8701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.563633][ T8701] do_fb_ioctl+0x328/0x7e0 [ 107.563647][ T8701] ? __pfx_do_fb_ioctl+0x10/0x10 [ 107.563663][ T8701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.563679][ T8701] ? selinux_file_ioctl+0x180/0x270 [ 107.563694][ T8701] fb_ioctl+0xe5/0x150 [ 107.563707][ T8701] ? __pfx_fb_ioctl+0x10/0x10 [ 107.563721][ T8701] __x64_sys_ioctl+0x18b/0x210 [ 107.563736][ T8701] do_syscall_64+0xcd/0x4c0 [ 107.563749][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.563760][ T8701] RIP: 0033:0x7fc4cf98ebe9 [ 107.563767][ T8701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.563777][ T8701] RSP: 002b:00007fc4d0722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.563792][ T8701] RAX: ffffffffffffffda RBX: 00007fc4cfbc5fa0 RCX: 00007fc4cf98ebe9 [ 107.563799][ T8701] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 107.563806][ T8701] RBP: 00007fc4cfa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 107.563812][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.563820][ T8701] R13: 00007fc4cfbc6038 R14: 00007fc4cfbc5fa0 R15: 00007ffd4d0d21d8 [ 107.563830][ T8701] [ 107.564371][ T8701] Kernel Offset: disabled VM DIAGNOSIS: 07:30:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88802dbc0000 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3b598596c0 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000006000 CR3=000000004bd56000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4d0d26e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4d0d26e6 00007ffd4d0d26ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4cfa12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4cfa12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4cfa12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4cfa12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4cfa12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4cfa12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47c38cb3b75f12d1 c4ed4f32ea3c03d0 0d2a104a29480ed7 109b3e5dddb39149 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0468574e60c93baa 1f200420192806e1 7945a77890530004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2579721a64d4ff66 1fb1ca4fd6548873 e3bab59b4bc466e2 c96a403e47c38cb3 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000010002 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801deba440 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8051ef56c0 CR3=0000000050e3d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000032 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe68998e56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe68998e56 00007ffe68998e5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58b974a8 00007f3b58b974a0 00007f3b58b97498 00007f3b58b97470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b596fd100 00007f3b58b97460 00007f3b58b90004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58b974b8 00007f3b58b974b0 00007f3b58b974a8 00007f3b58b974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801debc880 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31d23ffc CR3=0000000024563000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff27900b4b 00007fff27900b4b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff27901050 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff27901050 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6974205a484f4e20 5d3054202020205b 5d3432313936302e 37303120205b3e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6374205042454420 5730542020202051 5734323133363024 3730312020513400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f667562656d6172 663a725f7463656a 626f3a755f6d6574 7379733d74786574 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373696d72657020 656c69665f726863 3d7373616c637420 745f656369766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 665f7268633d7373 616c637420745f65 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63697665645f6675 62656d6172663a72 5f7463656a626f3a 755f6d6574737973 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d747865746e6f63 7420745f6d646173 79733a725f6d6461 7379733a746f6f72 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d747865746e6f63 7320303136347830 3d646d636c74636f 69203034363d6f6e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646975 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90003d86f30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b115060 R15=ffffffff85646910 RIP=ffffffff8564699f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fc4d07226c0 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc4d0721f98 CR3=000000002a1d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe68998cd0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe68998e56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe68998e56 00007ffe68998e5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b58a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000