last executing test programs: 5.094964203s ago: executing program 0 (id=1092): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') (async) setgroups(0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x5) (async) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r1) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) (async) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x404040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x4, 0x7fff}}, './cgroup\x00'}) 5.094251228s ago: executing program 0 (id=1093): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x8, 0x6}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r4) syz_usb_connect(0x5, 0x3f, &(0x7f0000000180)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r8, 0x0) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r10, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x44}}, 0x14) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x110, r10, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xb88f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xbb14}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc}}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x4d, 0x40003, 0x0, 0x0, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) 3.856473076s ago: executing program 2 (id=1117): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x8050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 2.220101888s ago: executing program 3 (id=1146): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000200)="e1a645dcf9ce5e438e2accb17ff062b061869938a5b5744025cf7764170e351863a7793ca2909ac4677d27e4cd16f1297f56d9d8ff0564375e2d486f0c5216ae23a18bc43202711b0917d85ff3a589ae73725353e3b6f226373448e234a26caa4414cca261c55edfa32bfc12689d47c0343b17a1f1f035cacb9264c5d29c6c49255be1", 0x83}, {&(0x7f0000000300)="125cbc17f75df87cef3316f9f0164f4818e8adccd72a809901a002165c478cf2ceb10a6e8949aaf9174ca512ff14474412e9dbf8f891055c94e40a4d6d92b7338f173962b8bdebb6573ec38ba258bf4be01de53a1db990009043c0e1c815128d33546752b465f18bffa1de09ba4b6a99a0659de520e11dc7304214379e277e18d46a7dfb71eae61b68487c8622e0682b9bd80aea7e3723983c0ecc1e959c45809bb44d1bc9af06ef957100ac77c5d76bb2f97c10208974b0", 0xb8}, {&(0x7f00000003c0)="bf942d9c653356ee511333b904670ec22fc5652f10b62e2fb156db4c7d617d75521e824212ceeeb4b404c3444cb40c4531398206fb8397c7986dd2d8b47000b1aa596dcc75481f05d4391b4c47544171d349a2bf1eac2b3a1d436f0c21b61941814269a0a46c9501ac409c4f37dcf569f8f6652d8b435885c3d035a3ce5d5d61da219ec45dc612035d2722863f5803623736373a781bbc020388ae575ced8023096a067418e84c88057692c38ff64f618a3dda734d7f62ed1212fb190bc3ce3a8bbad7d01bd347f046c074bf875a507eb4cc6709e77859fdb29f449ab1aea2b28663f42c619e135b5c6f281e3af0cef9be", 0xf1}, {&(0x7f0000000540)="fe4dc1f98d5177253c04c08087182b7a3bb8bc22432eb5d75df56e507319fcafe8c9c445c66293d4e18849b4070cbe338e534458fc62d5ccae2dc3030f8ac338b752f3bd2c191bd17a6517b3bf6edb13a1c0ea15ee7d3ae8c9ddef578a83587230aca74d4d44456d63f577e3fd977ba53039b542127c371495cf298c94d4261f92cba3c9498f743fbbe22109359b582a8c6be78481d539d2eb8e9299797c138ffa2792a46823fabff2897e5f44b06af04cd4d7d4f960802a4790047a141fb94f8d0095196030f72cc430f865bdd2c9cc42ff89d0775bbcf4305868e1399f021be204ae3fe9d8c5d1546b659deb47849a98feb2bcb5708a", 0xf7}, {&(0x7f0000000640)="722e54df223f0c7e844d78150029ae7eb0afc1d4ab582b53b414adf2420325dde2c93bd383c51ba156a243254b7c089f0aa6ef9a9814845346c0b7b048af3c2904d0d7e875e9ce665d2fd734856e09bcfae199abcf44d46ba00e87dc1f0b66eb65c32a844547c69b3cfb3578f2ebcf5dcfafebb81fbea6879af86080fd4ad571b7a7a863c78b5c5f696798eec8b47513457caa171739ed818058ce0cd3c1f3c8275342b8a254ae233380f154aeed43eb3f3cf2e64988d71a2d67de836f411433fa52a8e66f889d770ff417686da1e161d185bc7dc05ebb23014259fc7f2f09ba99f15c23ff550f9a844ca1acff8a518e", 0xf0}, {&(0x7f00000000c0)="d764", 0x2}, {&(0x7f0000000740)="080b670c5e052957ce9cd32381fcb55500b54563c8e7e872147c985a543a28590689c40bd88f1ffedf3bed9c48f9d88d40c626a90c4ec6f3176d8412a49e9862919c62b8e4d3d7581dbe7256a47f8dde50f95ffb4bfa5edfdb8b33cb14d688e2c2b99eff52c05ed7b6b97a64a3ce9296652d5ffe025b0f266ceddc56ff81ff83be8029ea504fe13dae42c9e76807876acc615af454ded21e25bfb3679655dea1b765ca6eba76e2391754066e4fce8be03fad71e9de4e260a7be7c11ecc4315983822fd2c3d78ca3242cac04b597a357e677aab23f0d2378b17f8ea248ca0c253ba21704e7c03710bed665ae39c53295fec4bd2ce3b", 0xf5}], 0x7) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x2) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000200)="e1a645dcf9ce5e438e2accb17ff062b061869938a5b5744025cf7764170e351863a7793ca2909ac4677d27e4cd16f1297f56d9d8ff0564375e2d486f0c5216ae23a18bc43202711b0917d85ff3a589ae73725353e3b6f226373448e234a26caa4414cca261c55edfa32bfc12689d47c0343b17a1f1f035cacb9264c5d29c6c49255be1", 0x83}, {&(0x7f0000000300)="125cbc17f75df87cef3316f9f0164f4818e8adccd72a809901a002165c478cf2ceb10a6e8949aaf9174ca512ff14474412e9dbf8f891055c94e40a4d6d92b7338f173962b8bdebb6573ec38ba258bf4be01de53a1db990009043c0e1c815128d33546752b465f18bffa1de09ba4b6a99a0659de520e11dc7304214379e277e18d46a7dfb71eae61b68487c8622e0682b9bd80aea7e3723983c0ecc1e959c45809bb44d1bc9af06ef957100ac77c5d76bb2f97c10208974b0", 0xb8}, {&(0x7f00000003c0)="bf942d9c653356ee511333b904670ec22fc5652f10b62e2fb156db4c7d617d75521e824212ceeeb4b404c3444cb40c4531398206fb8397c7986dd2d8b47000b1aa596dcc75481f05d4391b4c47544171d349a2bf1eac2b3a1d436f0c21b61941814269a0a46c9501ac409c4f37dcf569f8f6652d8b435885c3d035a3ce5d5d61da219ec45dc612035d2722863f5803623736373a781bbc020388ae575ced8023096a067418e84c88057692c38ff64f618a3dda734d7f62ed1212fb190bc3ce3a8bbad7d01bd347f046c074bf875a507eb4cc6709e77859fdb29f449ab1aea2b28663f42c619e135b5c6f281e3af0cef9be", 0xf1}, {&(0x7f0000000540)="fe4dc1f98d5177253c04c08087182b7a3bb8bc22432eb5d75df56e507319fcafe8c9c445c66293d4e18849b4070cbe338e534458fc62d5ccae2dc3030f8ac338b752f3bd2c191bd17a6517b3bf6edb13a1c0ea15ee7d3ae8c9ddef578a83587230aca74d4d44456d63f577e3fd977ba53039b542127c371495cf298c94d4261f92cba3c9498f743fbbe22109359b582a8c6be78481d539d2eb8e9299797c138ffa2792a46823fabff2897e5f44b06af04cd4d7d4f960802a4790047a141fb94f8d0095196030f72cc430f865bdd2c9cc42ff89d0775bbcf4305868e1399f021be204ae3fe9d8c5d1546b659deb47849a98feb2bcb5708a", 0xf7}, {&(0x7f0000000640)="722e54df223f0c7e844d78150029ae7eb0afc1d4ab582b53b414adf2420325dde2c93bd383c51ba156a243254b7c089f0aa6ef9a9814845346c0b7b048af3c2904d0d7e875e9ce665d2fd734856e09bcfae199abcf44d46ba00e87dc1f0b66eb65c32a844547c69b3cfb3578f2ebcf5dcfafebb81fbea6879af86080fd4ad571b7a7a863c78b5c5f696798eec8b47513457caa171739ed818058ce0cd3c1f3c8275342b8a254ae233380f154aeed43eb3f3cf2e64988d71a2d67de836f411433fa52a8e66f889d770ff417686da1e161d185bc7dc05ebb23014259fc7f2f09ba99f15c23ff550f9a844ca1acff8a518e", 0xf0}, {&(0x7f00000000c0)="d764", 0x2}, {&(0x7f0000000740)="080b670c5e052957ce9cd32381fcb55500b54563c8e7e872147c985a543a28590689c40bd88f1ffedf3bed9c48f9d88d40c626a90c4ec6f3176d8412a49e9862919c62b8e4d3d7581dbe7256a47f8dde50f95ffb4bfa5edfdb8b33cb14d688e2c2b99eff52c05ed7b6b97a64a3ce9296652d5ffe025b0f266ceddc56ff81ff83be8029ea504fe13dae42c9e76807876acc615af454ded21e25bfb3679655dea1b765ca6eba76e2391754066e4fce8be03fad71e9de4e260a7be7c11ecc4315983822fd2c3d78ca3242cac04b597a357e677aab23f0d2378b17f8ea248ca0c253ba21704e7c03710bed665ae39c53295fec4bd2ce3b", 0xf5}], 0x7) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) (async) 2.151101489s ago: executing program 3 (id=1147): r0 = syz_io_uring_setup(0x328, &(0x7f0000000240)={0x0, 0x6faa, 0x1000, 0x4, 0x2}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0)={r3, r4+10000000}, 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 2.030965723s ago: executing program 0 (id=1149): rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r0, &(0x7f00000025c0)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f360068090890e0878f0e1ac6e7f89b334d959b4a9a24315b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe290030000002414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b41519539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8e91516db587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x1000}}, 0x1006) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe133, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, 0x1200, 0x1}) (async) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r6, 0x8971, &(0x7f0000000380)={'dummy0\x00', @ifru_ivalue=0x8}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r7, 0x40045109, &(0x7f0000001280)) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}}, 0x64000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r8, 0x800, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0xc0c5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') exit(0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r9) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010025bd7000ffdbdf2503d9f050d7b4cf38fd4dd45b"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000018bbcd29c300dd8d0000000000000000020000000000000600000000060015000400000014001680100008800c00028008000100000000004f767bd98ab40836c3ff9b63a96feb33"], 0x38}}, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getresuid(0xffffffffffffffff, 0x0, 0x0) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r12) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r13, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004051}, 0x80) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x16, r13, 0x400, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) rt_sigtimedwait(&(0x7f0000000000)={[0x8000000000000000]}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x8) 2.03071693s ago: executing program 0 (id=1150): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.83046515s ago: executing program 0 (id=1151): r0 = socket(0x1, 0x5, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r1, r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}], 0x18, 0x8000}, 0x20000000) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000000)=""/43, &(0x7f0000000040)=0x2b) getsockopt$inet6_mreq(r3, 0x29, 0x1e, 0x0, &(0x7f00000004c0)) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x49ae57ea668c7447) 1.829977397s ago: executing program 0 (id=1152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006d3440c80000000085100000020000008500000005000000950000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) syz_open_dev$audion(&(0x7f0000000100), 0x8000, 0x800) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, 0x0, 0x18, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r4 = syz_usb_connect$printer(0x7, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000300000008b80402024000010203010902240001015480040904006602070102aa090501021000040837090582021000060f086dbe6a3fd7b56122933c11c1bd725c7615acfe43aec3006b6aaee1ffe93701273c78e2645d02467806912d73f56c34b54d61c101d89727cd389eaa07aabec9231dd70b9da415b9e5d4ff23a0a2fb70aad89cd192404235b6521596777891a462d694e93257e26ab06b9de0f45ad821eb8520e9b2c85b713a9a9fc0e5bd0e69363a4a96074e356b87"], &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x10, 0x8, 0x6, 0x4, 0x40, 0x40}, 0x28, &(0x7f0000000240)={0x5, 0xf, 0x28, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x8, 0x3, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x3, 0xf, 0x3, [0xc000, 0x3ff0, 0xfe4030, 0xff0030]}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000540)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="400f5c0000005c0679605ff7b5631dc6885a4ec64b5341eac3a6dcbeac499c5fafdf6603738132dd730ed0e2271bb21a022b392b3ca59187186b0942e4b69fa833421ae153dfe089058a6345ec848d491c9d"], &(0x7f00000004c0)={0x0, 0x3, 0x69, @string={0x69, 0x3, "28bbfc2011c9d1d142847eb1da186d35371a80b5741c03e3c26e89c27fcfd1e1b384837481b0fd860662f7634f4a8ba79f69428074fc80e6dd902195ec7190365c326dca24c8212a9759f265c34e8544d90005bf5a24459884edb80a96ac0c46086399757af37a"}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x0, 0x17, 0x91, "95a1bb40df892161e2aebb00077ec9d3a4185fd580cc4d54115cf490bbe4de573fed625d937018fa97493b8c6b52c08c98d39d600435de68a215ad49cf26f648c3dbfb7a4718de516739ad27ad3bedddf190c3fa95de07edf63045568dc29ff42bccd9e22bcd83cfb499268ca40ce04a6f953f1057b5897737dc0c4411fc7f6049e07c2669b2a51e5aa01526902469902f"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000008c0)={0x20, 0x0, 0x99, {0x97, "25450ee7d66ceea2fbf8187f9152c05391611c5b154c408ee2514225a2294868f3e632ea0dff1bd5fe35b5ee7307451dea0f5ce83a4597c28a7359cb1edb01d9bc4e186f43dcc05f81318aada28eb3c11d46b344dfaba908d4c429c702677b5581271ef306d526ebb3f82dd7258f49ac03cc2faa88eb6f143dab6fc010a456cacb2bc7f76abd2845c291913ebebecd51896b8801a773e0"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0xb}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x5}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x12, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x4008017}, 0xc804) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r8]) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4601) 1.781096046s ago: executing program 2 (id=1153): r0 = syz_io_uring_setup(0x5a4f, &(0x7f0000000380)={0x0, 0x58d5, 0x1, 0x3, 0x2cd}, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe) (async) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r0, r0, r0, r0, r2], 0x6) 1.780880345s ago: executing program 2 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d307830303030303030303030303038303de758e09ffd0b8e8e777453149a749d573c6fa8d0531c4739fc4e9531eb38971cb3eb517e4f43c5f202894cbc104581d2ca1e87e4a0bc5e2a744e522b6f9772366025b35d29604ad5e8aac1b37a40160f2b9859a2c08760d16e11f9297bff2a7b301200"/144]) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f0000000480)="a079624a04954e2d1523cd274d954f18010000002023e670955c0000265fa97c2cfb7ba5f67d4a0f06d00c089c3ea47034dda170966f859786f203c4f50b4d19d6ab0b49da45570000000000000080002397574e61cd9b5fc6337f97b077112e9d69d5f0d761e584bd5f7a22aa384640193d17bffcb043f72e876d30dc59ca0000000000000000000000a7be4eeb4158a109ea8f6ccc388a256784e8d98f250cf2584ad41391cf7274379db1a266b003f6983e8d8f2400c3743605176737921e9a93b5862bb9b632fe897cd7d88f485776f095d443b09c4f8c1c42356347296c3599bbd60dcdd48aedefdd8ecc4306edf9f45dfae6a04f22326f07fbf9174927ddca69058d71c138b4110008000058df473fb1b1ac647438491a21090e5383b5d921ac18f388c9fd3081f9300c265ad8781702d15c8ff578ce2b7bf0986df2116ee6ab5f1778ad90f4da464aacc019cdc145f225d7d431bf8a2be426e9f53567cc9ad93583786ae92e6777894d75ea11bd0453581951d5e0ee1230c53622282e6dfea37d3a44e89d268f221d1889e24a99111dd9c62d2f79a340f9e44e36f551eaf62ae7a1cf26ef993fba17bdefa644df23577c14f03efd992eaf51ba36966eba20660ff402c88826b71b184736e6886e0000000055f7efc2e923232555943d1ee0773ec73dfb6138160d7e09b1444f969735a4f13493abaa5d73a6736e59b1f3fe02862b9c1c1cf727227275a8a3e2bf628f4a1d6fdcd9ae6429d8119731cd780160df6bc609e4acdb781c50cb9f1ec6b93875acdcc7918762371b348cf10bb269e108c54653f7ae5e5f3c500b71", 0x24f, 0xfffffffffffffff8) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0x9, 0xfffffffffffffff2}, 0x0, &(0x7f00000000c0)="ae84c1683d3ea6d37f", &(0x7f0000000100)=""/133) 1.710891321s ago: executing program 2 (id=1155): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8864}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) r6 = fsmount(r0, 0x0, 0x82) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000000)=""/43, 0x2b) (async) getdents(r7, 0xfffffffffffffffd, 0x58) (async) prlimit64(0xffffffffffffffff, 0xb, &(0x7f0000000080)={0x7}, &(0x7f00000000c0)) 1.519294864s ago: executing program 2 (id=1156): r0 = gettid() (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xb) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0x8002af76, &(0x7f0000000180)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x28) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c57596", 0xf}, {&(0x7f00000003c0)="060000", 0x3}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{'acl'}]}) (async) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r7, 0x3) (async) accept4(r7, 0x0, 0x0, 0x0) 1.291055287s ago: executing program 3 (id=1157): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r1}, 0x10) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002880), 0x800000, &(0x7f0000000100)={[{}], [{@subj_role={'subj_role', 0x3d, '\\{@+-'}}]}) 1.290464759s ago: executing program 3 (id=1158): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x8}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x662d40, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000540)="89e7ee0c7cda", 0x6}, {&(0x7f0000000100)="448b7cff030000000000009d", 0xc}], 0x2) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7fff, 0x4) 1.190330589s ago: executing program 1 (id=1159): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002f80)={0xc, {"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", 0x1000}}, 0x1006) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac1414aa08000100", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="8b", 0x48, 0x40880, &(0x7f0000000200)={0x11, 0x9900, r6, 0x1, 0x4, 0x6, @local}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x400000) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES16=r8, @ANYBLOB="ffc300000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 170.680554ms ago: executing program 1 (id=1160): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x5c3480) r1 = getpid() r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x106f) mkdirat(r2, &(0x7f0000000280)='./file0/file0\x00', 0x21) r4 = syz_pidfd_open(r1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000020180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmmsg$inet6(r5, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x10000000000001) mkdir(&(0x7f0000002740)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280), &(0x7f00000030c0)=@v2={0x5, 0x1, 0x8, 0x1000}, 0x9, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000200)={0x4, 0x4, 0x7}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x1b, {0x4e22, 0x4e23}}]}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r10, 0x80047210, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xe, &(0x7f0000000140)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) 100.870228ms ago: executing program 1 (id=1161): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abb7000fddbdf250900020073797a30000000000800410073697600140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4400) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abb7000fddbdf250900020073797a30000000000800410073697600140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4400) (async) 50.865996ms ago: executing program 1 (id=1162): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_SECUREBITS(0x1c, 0x6) r1 = socket(0x2c, 0x800, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 50.368751ms ago: executing program 3 (id=1163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR='I>']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, 0x0, 0x8003}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x80) 50.171232ms ago: executing program 1 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10, 0x0}, 0x101) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\b\x00', @ANYRES16=r1, @ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) 894.368µs ago: executing program 1 (id=1165): openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800fffffffeffffff0048000000000000000000", @ANYRES32=r2, @ANYBLOB="af1f01000000000008002e0004000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20005000) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 585.857µs ago: executing program 3 (id=1166): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 0s ago: executing program 2 (id=1167): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000a000000004000000000000000000000000000000077fb000000"], 0x96) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) (async) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r10, &(0x7f0000000240)=""/112, 0x349b7f55) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES16=r10, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) close_range(r9, r0, 0x0) (async) close(r1) write$P9_RSTATu(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r5, @ANYRES8=r11, @ANYRES8=r6, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX], 0x233) kernel console output (not intermixed with test programs): scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.225573][ T40] audit: type=1400 audit(1759268297.492:371): avc: denied { read } for pid=6795 comm="syz.2.217" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.235101][ T40] audit: type=1400 audit(1759268297.492:372): avc: denied { open } for pid=6795 comm="syz.2.217" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.244272][ T40] audit: type=1400 audit(1759268297.502:373): avc: denied { ioctl } for pid=6795 comm="syz.2.217" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.268288][ T40] audit: type=1400 audit(1759268297.532:374): avc: denied { name_bind } for pid=6799 comm="syz.2.218" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 67.342192][ T40] audit: type=1400 audit(1759268297.612:375): avc: denied { mounton } for pid=6808 comm="syz.3.221" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 67.502686][ T40] audit: type=1400 audit(1759268297.772:376): avc: denied { append } for pid=6822 comm="syz.3.226" name="renderD128" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.567274][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 67.595090][ T40] audit: type=1400 audit(1759268297.862:377): avc: denied { write } for pid=6831 comm="syz.3.229" name="usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.602745][ T40] audit: type=1400 audit(1759268297.862:378): avc: denied { open } for pid=6831 comm="syz.3.229" path="/dev/usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.749289][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 67.889385][ T29] usb 5-1: device descriptor read/64, error -71 [ 68.142954][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 68.269530][ T29] usb 5-1: device descriptor read/64, error -71 [ 68.390721][ T29] usb usb5-port1: attempt power cycle [ 68.619676][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 69.370275][ T6832] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.498756][ T6891] netlink: 'syz.1.247': attribute type 4 has an invalid length. [ 69.505574][ T6892] netlink: 'syz.1.247': attribute type 4 has an invalid length. [ 69.546770][ T24] IPVS: starting estimator thread 0... [ 69.579817][ T6908] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 69.639380][ T6901] IPVS: using max 42 ests per chain, 100800 per kthread [ 69.734708][ T6938] tipc: Started in network mode [ 69.736526][ T6938] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 69.740536][ T6938] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 69.743696][ T6938] tipc: Enabled bearer , priority 10 [ 69.822458][ T6941] loop4: detected capacity change from 0 to 128 [ 69.899360][ T24] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 69.959412][ T838] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.080694][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 70.087467][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.091895][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.096258][ T24] usb 6-1: Product: syz [ 70.098094][ T24] usb 6-1: Manufacturer: syz [ 70.100489][ T24] usb 6-1: SerialNumber: syz [ 70.106578][ T24] usb 6-1: config 0 descriptor?? [ 70.129328][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 70.132792][ T838] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.136227][ T838] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.139597][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.142187][ T838] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 70.145057][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.151876][ T838] usb 7-1: config 0 descriptor?? [ 70.362060][ T838] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 70.364539][ T838] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 70.366715][ T838] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 70.368961][ T838] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 70.371787][ T838] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 70.387481][ T838] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 70.479076][ T838] usb 7-1: USB disconnect, device number 3 [ 70.525730][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 70.537504][ T6915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.540920][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 70.564877][ T5991] usb 6-1: USB disconnect, device number 3 [ 70.580071][ T6980] netlink: 196 bytes leftover after parsing attributes in process `syz.2.274'. [ 70.653188][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 70.870167][ T1339] tipc: Node number set to 1 [ 71.167410][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 71.174204][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 71.224496][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.227491][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.290197][ T7005] SELinux: policydb magic number 0x14 does not match expected magic number 0xf97cff8c [ 71.294363][ T7005] SELinux: failed to load policy [ 71.375604][ T7010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.284'. [ 71.409074][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 71.412548][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.287'. [ 71.638700][ T7059] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 71.704396][ T7065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.741785][ T7068] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 71.746950][ T7065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.301'. [ 71.852224][ T7080] /dev/sr0: Can't open blockdev [ 71.933463][ T7091] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 71.936694][ T7091] overlayfs: missing 'lowerdir' [ 72.149109][ T7122] macvlan0: entered promiscuous mode [ 72.196231][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 72.196242][ T40] audit: type=1400 audit(1759268302.462:416): avc: denied { map } for pid=7130 comm="syz.2.323" path="socket:[16135]" dev="sockfs" ino=16135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.207929][ T40] audit: type=1400 audit(1759268302.462:417): avc: denied { read } for pid=7130 comm="syz.2.323" path="socket:[16135]" dev="sockfs" ino=16135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.527584][ T40] audit: type=1400 audit(1759268302.792:418): avc: denied { create } for pid=7150 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 72.845661][ T40] audit: type=1400 audit(1759268303.112:419): avc: denied { mount } for pid=7155 comm="syz.0.330" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.903968][ T40] audit: type=1400 audit(1759268303.172:420): avc: denied { shutdown } for pid=7155 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.904649][ T7156] tmpfs: Unknown parameter 'm ol' [ 72.924458][ T40] audit: type=1400 audit(1759268303.192:421): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.949794][ T40] audit: type=1400 audit(1759268303.222:422): avc: denied { getopt } for pid=7158 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.957631][ T40] audit: type=1400 audit(1759268303.222:423): avc: denied { ioctl } for pid=7158 comm="syz.0.331" path="socket:[16623]" dev="sockfs" ino=16623 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.991387][ T7159] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 72.999581][ T7159] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.041858][ T40] audit: type=1400 audit(1759268303.312:424): avc: denied { map } for pid=7162 comm="syz.0.333" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.042855][ T7163] binder: 7162:7163 ioctl 40045407 0 returned -22 [ 73.090379][ T40] audit: type=1400 audit(1759268303.362:425): avc: denied { ioctl } for pid=7164 comm="syz.0.334" path="socket:[16631]" dev="sockfs" ino=16631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.220195][ T29] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 73.390901][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.396112][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.402944][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.405918][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.474752][ T7177] bond0: entered allmulticast mode [ 73.476506][ T7177] bond_slave_0: entered allmulticast mode [ 73.478648][ T7177] bond_slave_1: entered allmulticast mode [ 73.480589][ T7177] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 73.615094][ T29] usb 8-1: usb_control_msg returned -32 [ 73.616995][ T29] usbtmc 8-1:16.0: can't read capabilities [ 73.977876][ T838] usb 8-1: USB disconnect, device number 4 [ 74.371540][ T7232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7232 comm=syz.0.355 [ 74.584681][ T7241] program syz.2.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.557352][ T7286] netlink: 'syz.0.375': attribute type 39 has an invalid length. [ 75.564133][ T7276] kvm: kvm [7271]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 75.567810][ T7276] kvm: kvm [7271]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 75.629799][ T7276] kvm_intel: kvm [7271]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xed6600000000a5ab [ 75.646939][ T7276] kvm: kvm [7271]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xed6600000000aaab [ 75.651824][ T7276] kvm: kvm [7271]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xed6600000000ab02 [ 75.679007][ T7290] __nla_validate_parse: 3 callbacks suppressed [ 75.679026][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 75.722779][ T7292] dns_resolver: Unsupported server list version (0) [ 76.123047][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 76.220452][ T7329] XFS (nullb0): Invalid superblock magic number [ 76.247444][ T7329] nfs: Unknown parameter 'xfs' [ 76.519632][ T7349] kAFS: No cell specified [ 76.672179][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 76.675909][ T7357] netlink: 'syz.1.397': attribute type 30 has an invalid length. [ 76.680367][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 76.706950][ T7363] trusted_key: encrypted_key: master key parameter 'deault' is invalid [ 76.710572][ T7362] trusted_key: encrypted_key: master key parameter 'deault' is invalid [ 76.813627][ T7378] gfs2: gfs2 mount does not exist [ 76.911744][ T7384] netlink: 56 bytes leftover after parsing attributes in process `syz.1.405'. [ 76.917192][ T7384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.405'. [ 77.715055][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 77.715068][ T40] audit: type=1400 audit(1759268307.982:458): avc: denied { module_request } for pid=7432 comm="syz.1.408" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.766285][ T40] audit: type=1400 audit(1759268308.032:459): avc: denied { mounton } for pid=7437 comm="syz.2.410" path="/105/file0" dev="tmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 77.773884][ T40] audit: type=1400 audit(1759268308.032:460): avc: denied { ioctl } for pid=7436 comm="syz.3.409" path="socket:[16975]" dev="sockfs" ino=16975 ioctlcmd=0x89d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.783018][ T40] audit: type=1400 audit(1759268308.032:461): avc: denied { getopt } for pid=7436 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.124052][ T40] audit: type=1400 audit(1759268308.392:462): avc: denied { read } for pid=7470 comm="syz.3.419" name="ndctl0" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 78.199090][ T7476] Mount JFS Failure: -22 [ 78.219173][ T40] audit: type=1400 audit(1759268308.482:463): avc: denied { mount } for pid=7478 comm="syz.1.420" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 78.226109][ T40] audit: type=1400 audit(1759268308.492:464): avc: denied { unmount } for pid=7478 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 78.288218][ T7486] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 78.340784][ T40] audit: type=1400 audit(1759268308.612:465): avc: denied { setopt } for pid=7484 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.347524][ T40] audit: type=1400 audit(1759268308.612:466): avc: denied { ioctl } for pid=7484 comm="syz.3.423" path="socket:[17017]" dev="sockfs" ino=17017 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.363065][ T40] audit: type=1400 audit(1759268308.612:467): avc: denied { write } for pid=7484 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.615949][ T7500] netlink: 10 bytes leftover after parsing attributes in process `syz.3.425'. [ 78.622027][ T5308] Bluetooth: hci0: Malformed Event: 0x02 [ 78.623466][ T7500] binder: 7499:7500 ioctl 80404519 200000000040 returned -22 [ 78.754824][ T7508] ext2: Unknown parameter 'dard' [ 78.857592][ T7514] gtp0: entered promiscuous mode [ 78.905685][ T7517] batadv0: entered promiscuous mode [ 78.907858][ T7517] macvtap1: entered promiscuous mode [ 78.913028][ T7517] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 78.917961][ T7517] batadv0: left promiscuous mode [ 79.237991][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 79.338201][ T7546] vivid-000: ================= START STATUS ================= [ 79.341097][ T7546] vivid-000: Test Pattern: 75% Colorbar [ 79.342932][ T7546] vivid-000: Fill Percentage of Frame: 100 [ 79.344794][ T7546] vivid-000: Horizontal Movement: No Movement [ 79.346826][ T7546] vivid-000: Vertical Movement: No Movement [ 79.348914][ T7546] vivid-000: OSD Text Mode: All [ 79.351558][ T7546] vivid-000: Show Border: false [ 79.353114][ T7546] vivid-000: Show Square: true [ 79.355017][ T7546] vivid-000: Sensor Flipped Horizontally: false [ 79.357018][ T7546] vivid-000: Sensor Flipped Vertically: false [ 79.359321][ T7546] vivid-000: Insert SAV Code in Image: true [ 79.361214][ T7546] vivid-000: Insert EAV Code in Image: false [ 79.363202][ T7546] vivid-000: Insert Video Guard Band: false [ 79.365265][ T7546] vivid-000: Reduced Framerate: false [ 79.367154][ T7546] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 79.371084][ T7546] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 79.373538][ T7546] vivid-000: Enable Capture Cropping: true [ 79.375374][ T7546] vivid-000: Enable Capture Composing: true [ 79.377183][ T7546] vivid-000: Enable Capture Scaler: true [ 79.378895][ T7546] vivid-000: Timestamp Source: End of Frame [ 79.380863][ T7546] vivid-000: Colorspace: sRGB [ 79.382338][ T7546] vivid-000: Transfer Function: Default [ 79.382671][ T7550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7550 comm=syz.1.443 [ 79.384154][ T7546] vivid-000: Y'CbCr Encoding: Default [ 79.388927][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 79.390609][ T7546] vivid-000: HSV Encoding: Hue 0-179 [ 79.390628][ T7546] vivid-000: Quantization: Default [ 79.390641][ T7546] vivid-000: Apply Alpha To Red Only: false [ 79.390653][ T7546] vivid-000: Standard Aspect Ratio: 4x3 [ 79.390666][ T7546] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 79.390682][ T7546] vivid-000: DV Timings: 640x480p59 inactive [ 79.390697][ T7546] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 79.390711][ T7546] vivid-000: Maximum EDID Blocks: 2 [ 79.412071][ T7546] vivid-000: Limited RGB Range (16-235): false [ 79.414148][ T7546] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 79.418778][ T7546] vivid-000: Power Present: 0x00000001 [ 79.420879][ T7546] tpg source WxH: 320x240 (Y'CbCr) [ 79.422537][ T7546] tpg field: 1 [ 79.423632][ T7546] tpg crop: (0,0)/320x240 [ 79.425014][ T7546] tpg compose: (0,0)/320x240 [ 79.426460][ T7546] tpg colorspace: 8 [ 79.427821][ T7546] tpg transfer function: 0/2 [ 79.430017][ T7546] tpg Y'CbCr encoding: 0/1 [ 79.431774][ T7546] tpg quantization: 0/2 [ 79.433220][ T7546] tpg RGB range: 0/2 [ 79.434533][ T7546] vivid-000: ================== END STATUS ================== [ 79.446452][ T7554] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 79.460231][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'. [ 79.474062][ T7554] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 79.586657][ T7563] Illegal XDP return value 1199087846 on prog (id 124) dev N/A, expect packet loss! [ 79.613660][ T7572] kernel profiling enabled (shift: 6) [ 79.639845][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 79.791953][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.795216][ T24] usb 8-1: config 0 has no interfaces? [ 79.802229][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.805587][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.808679][ T24] usb 8-1: Product: syz [ 79.818635][ T7617] /dev/sr0: Can't open blockdev [ 79.819962][ T24] usb 8-1: Manufacturer: syz [ 79.821866][ T24] usb 8-1: SerialNumber: syz [ 79.826681][ T7618] /dev/sr0: Can't open blockdev [ 79.829615][ T24] usb 8-1: config 0 descriptor?? [ 79.836713][ T7621] random: crng reseeded on system resumption [ 79.870590][ T7625] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 79.874047][ T7627] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 80.062164][ T7418] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 80.082822][ T24] usb 8-1: USB disconnect, device number 5 [ 80.823617][ T5308] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 80.825131][ T7653] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.831031][ T7653] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 80.836391][ T7653] overlayfs: missing 'lowerdir' [ 80.984754][ T7665] __nla_validate_parse: 3 callbacks suppressed [ 80.984764][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 80.990859][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 80.992498][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 81.027490][ T7668] sg_write: process 392 (syz.2.476) changed security contexts after opening file descriptor, this is not allowed. [ 81.072372][ T7649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7649 comm=syz.0.471 [ 81.081324][ T7649] netlink: 'syz.0.471': attribute type 5 has an invalid length. [ 81.087984][ T7671] debugfs: 'ttyS3' already exists in 'caif_serial' [ 81.193644][ T837] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 81.258238][ T7680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.478'. [ 81.321435][ T7687] netlink: 'syz.0.480': attribute type 21 has an invalid length. [ 81.325357][ T7687] netlink: 156 bytes leftover after parsing attributes in process `syz.0.480'. [ 81.339287][ T837] usb 6-1: Using ep0 maxpacket: 8 [ 81.343185][ T837] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 81.346530][ T837] usb 6-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.359446][ T837] usb 6-1: config 1 interface 0 has no altsetting 0 [ 81.364635][ T837] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.368236][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.372603][ T837] usb 6-1: Product: syz [ 81.373949][ T837] usb 6-1: Manufacturer: syz [ 81.386266][ T837] usb 6-1: SerialNumber: syz [ 81.394852][ T7663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.397249][ T7663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.399611][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.482'. [ 81.412817][ T7692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7692 comm=syz.0.481 [ 81.444634][ T7694] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7694 comm=syz.2.482 [ 81.454855][ T10] cfg80211: failed to load regulatory.db [ 81.538855][ T7699] /dev/nullb0: Can't open blockdev [ 81.609835][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.615006][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.623574][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.627609][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.645060][ T837] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 81.654923][ T837] usb 6-1: USB disconnect, device number 4 [ 81.929307][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 82.094384][ T24] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 82.098236][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.102740][ T1339] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 82.106350][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 82.112540][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.116514][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.120661][ T24] usb 8-1: Product: syz [ 82.123208][ T24] usb 8-1: Manufacturer: syz [ 82.125383][ T24] usb 8-1: SerialNumber: syz [ 82.138311][ T24] usb 8-1: config 0 descriptor?? [ 82.142712][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 82.145324][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 82.151029][ T24] usb 8-1: selecting invalid altsetting 0 [ 82.259873][ T1339] usb 6-1: Using ep0 maxpacket: 8 [ 82.265551][ T1339] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.270033][ T1339] usb 6-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.275218][ T1339] usb 6-1: config 1 interface 0 has no altsetting 0 [ 82.281350][ T1339] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.285717][ T1339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.289377][ T1339] usb 6-1: Product: ᠁ [ 82.291223][ T1339] usb 6-1: Manufacturer: ꂉ汤玩喣폯잧淖ᙿׅ芾縸쒟䝢昳샖ᐉ趂錫몣值矪帹ᓪ嬲砝쉊ൺ糆Ⴝჺ輧닐롇ꗠ⊱纸ꑙ뉸蹞⿳㳙繿꯮񑝗얳蕤첱听≚鲔縵⟣죛귇獒徧㩖긅䅭佂㥤쩚Ꮫ傤뽼渠푈恃報㮚 [ 82.301509][ T1339] usb 6-1: SerialNumber: syz [ 82.308029][ T7663] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 82.312046][ T7663] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 82.428284][ T24] usb 8-1: USB disconnect, device number 6 [ 82.522444][ T1339] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 82.530557][ T1339] usb 6-1: USB disconnect, device number 5 [ 82.617550][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 82.627771][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 82.640201][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 82.649059][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 82.869680][ T837] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 82.946086][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 82.946097][ T40] audit: type=1400 audit(1759268313.212:533): avc: denied { map } for pid=7736 comm="syz.2.493" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.958310][ T40] audit: type=1400 audit(1759268313.212:534): avc: denied { read write } for pid=7736 comm="syz.2.493" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.968104][ T40] audit: type=1400 audit(1759268313.212:535): avc: denied { execmem } for pid=7736 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.977355][ T40] audit: type=1400 audit(1759268313.222:536): avc: denied { create } for pid=7736 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.985051][ T40] audit: type=1400 audit(1759268313.222:537): avc: denied { write } for pid=7736 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.991524][ T40] audit: type=1400 audit(1759268313.222:538): avc: denied { create } for pid=7736 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.001011][ T40] audit: type=1400 audit(1759268313.222:539): avc: denied { connect } for pid=7736 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.007466][ T40] audit: type=1400 audit(1759268313.222:540): avc: denied { bind } for pid=7736 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.014144][ T837] usb 8-1: device descriptor read/64, error -71 [ 83.038192][ T40] audit: type=1400 audit(1759268313.302:541): avc: denied { create } for pid=7738 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.054743][ T40] audit: type=1400 audit(1759268313.302:542): avc: denied { ioctl } for pid=7738 comm="syz.2.494" path="socket:[21169]" dev="sockfs" ino=21169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.217359][ T7753] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.263447][ T7759] macsec1: entered promiscuous mode [ 83.266238][ T7759] bridge0: entered promiscuous mode [ 83.279928][ T837] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 83.335441][ T7771] sctp: [Deprecated]: syz.2.504 (pid 7771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.335441][ T7771] Use struct sctp_sack_info instead [ 83.409428][ T837] usb 8-1: device descriptor read/64, error -71 [ 83.479672][ T7793] program syz.0.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.493794][ T7795] kvm: kvm [7794]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x5 [ 83.526567][ T837] usb usb8-port1: attempt power cycle [ 83.552559][ T7803] netlink: 'syz.0.513': attribute type 39 has an invalid length. [ 83.601713][ T7806] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 83.604139][ T7806] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 83.634620][ T7814] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 83.669438][ T7818] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 83.869363][ T837] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 83.889840][ T837] usb 8-1: device descriptor read/8, error -71 [ 84.129440][ T837] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 84.150722][ T837] usb 8-1: device descriptor read/8, error -71 [ 84.259685][ T837] usb usb8-port1: unable to enumerate USB device [ 84.706962][ T7832] program syz.0.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.819586][ T7836] netlink: 'syz.2.522': attribute type 3 has an invalid length. [ 84.822172][ T7836] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 84.979017][ T7859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7859 comm=syz.1.531 [ 85.008972][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 85.014711][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 85.020987][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 85.028856][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 85.047970][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 85.056321][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 85.065666][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 85.078752][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 85.087138][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 85.100223][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 85.108825][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 85.160642][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan13 [ 85.167417][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan14 [ 85.187285][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan15 [ 85.216461][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan16 [ 85.223433][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 85.227847][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan18 [ 85.236930][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan19 [ 85.245093][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan20 [ 85.249763][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan21 [ 85.253820][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan22 [ 85.262544][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan23 [ 85.268114][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan24 [ 85.280937][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan25 [ 85.287153][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan26 [ 85.309910][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan27 [ 85.315400][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan28 [ 85.321613][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan29 [ 85.327715][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan30 [ 85.336503][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan31 [ 85.342319][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan32 [ 85.352197][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan33 [ 85.360436][ T7862] 8021q: adding VLAN 0 to HW filter on device ipvlan34 [ 85.397568][ T7891] x_tables: ip_tables: udp match: only valid for protocol 17 [ 85.831045][ T7920] vlan2: entered promiscuous mode [ 85.831142][ T7920] vlan2: entered allmulticast mode [ 85.831150][ T7920] hsr_slave_1: entered allmulticast mode [ 85.878549][ T7923] tap0: tun_chr_ioctl cmd 1074025675 [ 85.880988][ T7923] tap0: persist enabled [ 85.882444][ T7923] tap0: tun_chr_ioctl cmd 1074025675 [ 85.884123][ T7923] tap0: persist disabled [ 86.115201][ T7953] /dev/sr0: Can't open blockdev [ 86.121964][ T7953] qnx4: unable to read the superblock [ 86.126033][ T7955] qnx4: unable to read the superblock [ 86.126360][ T7953] /dev/sr0: Can't open blockdev [ 86.154973][ T7957] __nla_validate_parse: 141 callbacks suppressed [ 86.154985][ T7957] netlink: 1876 bytes leftover after parsing attributes in process `syz.0.560'. [ 86.196383][ T7959] netlink: 37 bytes leftover after parsing attributes in process `syz.2.561'. [ 86.199785][ T7959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.206313][ T7963] tmpfs: Bad value for 'mpol' [ 86.264745][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 86.268549][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 86.302592][ T7973] netlink: 48 bytes leftover after parsing attributes in process `syz.0.566'. [ 86.307186][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 86.434666][ T837] hid (null): unknown global tag 0xe [ 86.437179][ T837] hid (null): unknown global tag 0xd [ 86.441035][ T7986] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.570'. [ 86.446319][ T837] hid (null): global environment stack underflow [ 86.453389][ T7988] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 86.455455][ T837] hid-generic 0009:0002:0001.0003: unknown main item tag 0x1 [ 86.457314][ T7988] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 86.461801][ T837] hid-generic 0009:0002:0001.0003: unknown global tag 0xe [ 86.466659][ T837] hid-generic 0009:0002:0001.0003: item 0 0 1 14 parsing failed [ 86.472965][ T837] hid-generic 0009:0002:0001.0003: probe with driver hid-generic failed with error -22 [ 86.508640][ T7996] netlink: 'syz.0.574': attribute type 20 has an invalid length. [ 86.593036][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 86.610024][ T8009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.577'. [ 86.618210][ T7992] netlink: 'syz.2.572': attribute type 9 has an invalid length. [ 86.621614][ T7992] netlink: 'syz.2.572': attribute type 7 has an invalid length. [ 86.624725][ T7992] netlink: 'syz.2.572': attribute type 8 has an invalid length. [ 86.769297][ T8017] CUSE: info not properly terminated [ 86.851393][ T8027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 87.157943][ T24] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 87.160534][ T24] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 87.163060][ T24] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 87.165560][ T24] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 87.168214][ T24] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 87.171325][ T24] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 87.173681][ T24] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 87.176104][ T24] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 87.178824][ T24] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 87.202261][ T24] hid-generic 0005:00B6:0009.0004: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 87.380920][ T8069] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.396983][ T8069] kvm: pic: level sensitive irq not supported [ 87.398030][ T8069] kvm: pic: non byte read [ 87.403848][ T8069] kvm: pic: level sensitive irq not supported [ 87.404312][ T8069] kvm: pic: non byte read [ 87.596411][ T8025] orangefs_mount: mount request failed with -4 [ 87.825793][ T8078] dvmrp0: entered allmulticast mode [ 87.961872][ T8086] netlink: 'syz.3.601': attribute type 2 has an invalid length. [ 87.964518][ T8086] nbd: must specify a device to reconfigure [ 88.062563][ T40] kauditd_printk_skb: 179 callbacks suppressed [ 88.062577][ T40] audit: type=1400 audit(1759268318.332:722): avc: denied { getopt } for pid=8088 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.184004][ T8099] erspan1: entered promiscuous mode [ 88.250241][ T40] audit: type=1400 audit(1759268318.522:723): avc: denied { accept } for pid=8103 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.256747][ T40] audit: type=1400 audit(1759268318.522:724): avc: denied { name_connect } for pid=8103 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 88.342465][ T8113] program syz.2.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.346314][ T8116] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 88.360453][ T8116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.394947][ T8116] bond2: (slave veth3): Enslaving as an active interface with a down link [ 88.405516][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.409988][ T8116] bond2: (slave team0): making interface the new active one [ 88.414875][ T8116] team0: entered promiscuous mode [ 88.416536][ T8116] team_slave_0: entered promiscuous mode [ 88.418644][ T8116] team_slave_1: entered promiscuous mode [ 88.421468][ T8116] bond2: (slave team0): Enslaving as an active interface with an up link [ 88.508618][ T40] audit: type=1400 audit(1759268318.772:725): avc: denied { ioctl } for pid=8130 comm="syz.2.613" path="socket:[24781]" dev="sockfs" ino=24781 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.582101][ T8134] gfs2: not a GFS2 filesystem [ 88.645004][ T40] audit: type=1400 audit(1759268318.912:726): avc: denied { append } for pid=8140 comm="syz.3.616" name="ubi_ctrl" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.676519][ T40] audit: type=1400 audit(1759268318.942:727): avc: denied { name_bind } for pid=8144 comm="syz.2.617" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 88.698112][ T40] audit: type=1400 audit(1759268318.962:728): avc: denied { write } for pid=8151 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.725196][ T40] audit: type=1400 audit(1759268318.992:729): avc: denied { bind } for pid=8153 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.758321][ T8157] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 88.892758][ T8168] 9pnet_fd: Insufficient options for proto=fd [ 88.897090][ T40] audit: type=1400 audit(1759268319.162:730): avc: denied { ioctl } for pid=8167 comm="syz.3.624" path="socket:[23255]" dev="sockfs" ino=23255 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.923446][ T40] audit: type=1400 audit(1759268319.192:731): avc: denied { bind } for pid=8171 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.969398][ T63] Bluetooth: hci0: command 0x0406 tx timeout [ 89.057613][ T8177] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 89.059093][ T8184] pim6reg1: entered promiscuous mode [ 89.064994][ T8184] pim6reg1: entered allmulticast mode [ 89.558186][ T8202] fuse: Bad value for 'fd' [ 89.639507][ T6011] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 89.789522][ T6011] usb 6-1: Using ep0 maxpacket: 8 [ 89.794170][ T6011] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.798993][ T6011] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.804259][ T6011] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.807743][ T6011] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 89.812124][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.819545][ T6011] usb 6-1: config 0 descriptor?? [ 90.228759][ T6011] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 90.278810][ T8224] 9pnet_virtio: no channels available for device syz [ 90.281879][ T8224] 9pnet_virtio: no channels available for device syz [ 90.285373][ T8224] 9pnet_virtio: no channels available for device syz [ 90.288498][ T8224] 9pnet_virtio: no channels available for device syz [ 90.290942][ T8224] 9pnet_virtio: no channels available for device syz [ 90.293287][ T8224] 9pnet_virtio: no channels available for device syz [ 90.295592][ T8224] 9pnet_virtio: no channels available for device syz [ 90.297963][ T8224] 9pnet_virtio: no channels available for device syz [ 90.300720][ T8224] 9pnet_virtio: no channels available for device syz [ 90.303254][ T8224] 9pnet_virtio: no channels available for device syz [ 90.305749][ T8224] 9pnet_virtio: no channels available for device syz [ 90.308178][ T8224] 9pnet_virtio: no channels available for device syz [ 90.310693][ T8224] 9pnet_virtio: no channels available for device syz [ 90.313391][ T8224] 9pnet_virtio: no channels available for device syz [ 90.315774][ T8224] 9pnet_virtio: no channels available for device syz [ 90.318258][ T8224] 9pnet_virtio: no channels available for device syz [ 90.321020][ T8224] 9pnet_virtio: no channels available for device syz [ 90.323604][ T8224] 9pnet_virtio: no channels available for device syz [ 90.326135][ T8224] 9pnet_virtio: no channels available for device syz [ 90.328449][ T8224] 9pnet_virtio: no channels available for device syz [ 90.330823][ T8224] 9pnet_virtio: no channels available for device syz [ 90.333140][ T8224] 9pnet_virtio: no channels available for device syz [ 90.335885][ T8224] 9pnet_virtio: no channels available for device syz [ 90.338628][ T8224] 9pnet_virtio: no channels available for device syz [ 90.341646][ T8224] 9pnet_virtio: no channels available for device syz [ 90.344348][ T8224] 9pnet_virtio: no channels available for device syz [ 90.346791][ T8224] 9pnet_virtio: no channels available for device syz [ 90.349530][ T8224] 9pnet_virtio: no channels available for device syz [ 90.428929][ T6011] usb 6-1: USB disconnect, device number 6 [ 90.749454][ T5991] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 90.854425][ T8240] overlayfs: workdir and upperdir must be separate subtrees [ 90.881455][ T8240] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 90.893130][ T8240] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 90.901212][ T5991] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.905499][ T5991] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 90.910311][ T5991] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 90.914911][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.920961][ T5991] usb 7-1: config 0 descriptor?? [ 90.925860][ T5991] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 90.928520][ T5991] dvb-usb: bulk message failed: -22 (3/0) [ 90.934764][ T5991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 90.939440][ T5991] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 90.942408][ T5991] usb 7-1: media controller created [ 90.945749][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.955581][ T5991] dvb-usb: bulk message failed: -22 (6/0) [ 90.958352][ T5991] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 90.965571][ T5991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input12 [ 90.971348][ T5991] dvb-usb: schedule remote query interval to 150 msecs. [ 90.973824][ T5991] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.125049][ T8235] dibusb: i2c wr: len=61 is too big! [ 91.125049][ T8235] [ 91.130825][ T29] usb 7-1: USB disconnect, device number 4 [ 91.151297][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 91.495658][ T8283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.763905][ T8299] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 91.879783][ T6121] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 92.009037][ T8326] __nla_validate_parse: 10 callbacks suppressed [ 92.009050][ T8326] netlink: 48 bytes leftover after parsing attributes in process `syz.0.673'. [ 92.010373][ T8319] kvm: kvm [8317]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 92.011336][ T6121] usb 8-1: device descriptor read/64, error -71 [ 92.016531][ T8319] kvm: kvm [8317]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 92.152851][ T8338] validate_nla: 2 callbacks suppressed [ 92.152867][ T8338] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 92.194606][ T8338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.259403][ T6121] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 92.273263][ T8346] raw_sendmsg: syz.0.678 forgot to set AF_INET. Fix it! [ 92.389582][ T6121] usb 8-1: device descriptor read/64, error -71 [ 92.501897][ T6121] usb usb8-port1: attempt power cycle [ 92.771619][ T8364] FAULT_INJECTION: forcing a failure. [ 92.771619][ T8364] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.775841][ T8364] CPU: 3 UID: 0 PID: 8364 Comm: syz.2.684 Not tainted syzkaller #0 PREEMPT(full) [ 92.775856][ T8364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.775863][ T8364] Call Trace: [ 92.775868][ T8364] [ 92.775873][ T8364] dump_stack_lvl+0x16c/0x1f0 [ 92.775919][ T8364] should_fail_ex+0x512/0x640 [ 92.775946][ T8364] _copy_from_user+0x2e/0xd0 [ 92.775963][ T8364] copy_msghdr_from_user+0x98/0x160 [ 92.775981][ T8364] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.776004][ T8364] ___sys_sendmsg+0xfe/0x1d0 [ 92.776020][ T8364] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.776053][ T8364] __sys_sendmsg+0x16d/0x220 [ 92.776069][ T8364] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.776094][ T8364] do_syscall_64+0xcd/0x4e0 [ 92.776112][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.776124][ T8364] RIP: 0033:0x7f017798eec9 [ 92.776133][ T8364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.776143][ T8364] RSP: 002b:00007f0178835038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.776154][ T8364] RAX: ffffffffffffffda RBX: 00007f0177be5fa0 RCX: 00007f017798eec9 [ 92.776160][ T8364] RDX: 000000002400c010 RSI: 0000200000001340 RDI: 0000000000000003 [ 92.776166][ T8364] RBP: 00007f0178835090 R08: 0000000000000000 R09: 0000000000000000 [ 92.776197][ T8364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.776207][ T8364] R13: 00007f0177be6038 R14: 00007f0177be5fa0 R15: 00007ffc6deecea8 [ 92.776230][ T8364] [ 92.872592][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'. [ 92.879538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.882364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.885617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.899393][ T6121] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 92.900391][ T8372] netlink: 10 bytes leftover after parsing attributes in process `syz.2.687'. [ 92.919824][ T6121] usb 8-1: device descriptor read/8, error -71 [ 92.921615][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 92.968058][ T8383] SELinux: policydb string length 14080 does not match expected length 8 [ 92.971664][ T8383] SELinux: failed to load policy [ 93.126986][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 93.126997][ T40] audit: type=1400 audit(1759268323.392:784): avc: denied { write } for pid=8400 comm="syz.2.696" path="socket:[26118]" dev="sockfs" ino=26118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.137229][ T40] audit: type=1400 audit(1759268323.392:785): avc: denied { ioctl } for pid=8394 comm="syz.1.694" path="/168/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 93.145749][ T40] audit: type=1400 audit(1759268323.402:786): avc: denied { map } for pid=8394 comm="syz.1.694" path="socket:[25198]" dev="sockfs" ino=25198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.155973][ T40] audit: type=1400 audit(1759268323.402:787): avc: denied { read accept } for pid=8394 comm="syz.1.694" path="socket:[25198]" dev="sockfs" ino=25198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.170115][ T6121] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 93.199929][ T6121] usb 8-1: device descriptor read/8, error -71 [ 93.233277][ T8408] ptrace attach of "/syz-executor exec"[5945] was attempted by ""[8408] [ 93.310995][ T6121] usb usb8-port1: unable to enumerate USB device [ 93.331834][ T8416] input: syz0 as /devices/virtual/input/input13 [ 93.374768][ T8420] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 93.478204][ T40] audit: type=1400 audit(1759268323.742:788): avc: denied { mount } for pid=8435 comm="syz.2.707" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 93.487596][ T40] audit: type=1400 audit(1759268323.752:789): avc: denied { mounton } for pid=8435 comm="syz.2.707" path="/184/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 93.499386][ T40] audit: type=1400 audit(1759268323.762:790): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 93.659398][ T54] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 93.800841][ T54] usb 6-1: device descriptor read/64, error -71 [ 94.049361][ T54] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 94.199381][ T54] usb 6-1: device descriptor read/64, error -71 [ 94.320010][ T54] usb usb6-port1: attempt power cycle [ 94.572712][ T40] audit: type=1400 audit(1759268324.842:791): avc: denied { append } for pid=8454 comm="syz.0.711" name="fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.581653][ T40] audit: type=1400 audit(1759268324.842:792): avc: denied { map } for pid=8454 comm="syz.0.711" path="/dev/fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.589114][ T40] audit: type=1400 audit(1759268324.842:793): avc: denied { write execute } for pid=8454 comm="syz.0.711" path="/dev/fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.679397][ T54] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 94.710203][ T54] usb 6-1: device descriptor read/8, error -71 [ 94.855107][ T29] libceph: connect (1)[c::]:6789 error -13 [ 94.858020][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 94.949334][ T54] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 94.970031][ T54] usb 6-1: device descriptor read/8, error -71 [ 95.049353][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 95.090251][ T54] usb usb6-port1: unable to enumerate USB device [ 95.120900][ T29] libceph: connect (1)[c::]:6789 error -13 [ 95.122840][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 95.220856][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.225205][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.230749][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.234751][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.241516][ T8467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.246658][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.448994][ T6121] usb 8-1: USB disconnect, device number 15 [ 95.584960][ T8483] input: syz0 as /devices/virtual/input/input15 [ 95.629516][ T29] libceph: connect (1)[c::]:6789 error -13 [ 95.631713][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 95.673882][ T8475] ceph: No mds server is up or the cluster is laggy [ 95.760741][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.763224][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.765396][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.767575][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.770705][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.773162][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.775553][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.777829][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.781822][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.784050][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.786222][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.788450][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.791096][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.793338][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.795660][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.797773][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.800697][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.802777][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.805129][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.807337][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.809968][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.812052][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.814181][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.816328][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.818629][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.821398][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.823548][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.825883][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.828188][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.830790][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.832903][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.835297][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 95.837442][ T8490] fuse: Unknown parameter '0x0000000000000003' [ 96.177859][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 96.220846][ T8512] FAULT_INJECTION: forcing a failure. [ 96.220846][ T8512] name failslab, interval 1, probability 0, space 0, times 1 [ 96.224849][ T8512] CPU: 2 UID: 0 PID: 8512 Comm: syz.3.728 Not tainted syzkaller #0 PREEMPT(full) [ 96.224863][ T8512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.224870][ T8512] Call Trace: [ 96.224874][ T8512] [ 96.224878][ T8512] dump_stack_lvl+0x16c/0x1f0 [ 96.224912][ T8512] should_fail_ex+0x512/0x640 [ 96.224929][ T8512] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 96.224944][ T8512] should_failslab+0xc2/0x120 [ 96.224958][ T8512] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 96.224970][ T8512] ? __request_module+0x2cb/0x690 [ 96.224985][ T8512] kstrdup+0x53/0x100 [ 96.224997][ T8512] __request_module+0x2cb/0x690 [ 96.225009][ T8512] ? __pfx___request_module+0x10/0x10 [ 96.225027][ T8512] ? __pfx_rtnl_newlink+0x10/0x10 [ 96.225049][ T8512] ? __pfx_rtnl_newlink+0x10/0x10 [ 96.225065][ T8512] rtnl_newlink+0x1466/0x2000 [ 96.225086][ T8512] ? __pfx_rtnl_newlink+0x10/0x10 [ 96.225101][ T8512] ? find_held_lock+0x2b/0x80 [ 96.225115][ T8512] ? avc_has_perm_noaudit+0x117/0x3b0 [ 96.225130][ T8512] ? avc_has_perm_noaudit+0x149/0x3b0 [ 96.225157][ T8512] ? find_held_lock+0x2b/0x80 [ 96.225169][ T8512] ? __pfx_rtnl_newlink+0x10/0x10 [ 96.225184][ T8512] ? __pfx_rtnl_newlink+0x10/0x10 [ 96.225200][ T8512] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 96.225217][ T8512] ? __pfx_rtnl_newlink+0x10/0x10 [ 96.225233][ T8512] rtnetlink_rcv_msg+0x95b/0xe90 [ 96.225251][ T8512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.225272][ T8512] ? ref_tracker_free+0x37c/0x830 [ 96.225284][ T8512] netlink_rcv_skb+0x158/0x420 [ 96.225294][ T8512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.225312][ T8512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.225327][ T8512] ? netlink_deliver_tap+0x1ae/0xd30 [ 96.225348][ T8512] netlink_unicast+0x5a7/0x870 [ 96.225367][ T8512] ? __pfx_netlink_unicast+0x10/0x10 [ 96.225385][ T8512] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 96.225408][ T8512] netlink_sendmsg+0x8d1/0xdd0 [ 96.225420][ T8512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.225444][ T8512] ____sys_sendmsg+0xa95/0xc70 [ 96.225459][ T8512] ? copy_msghdr_from_user+0x10a/0x160 [ 96.225476][ T8512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.225496][ T8512] ___sys_sendmsg+0x134/0x1d0 [ 96.225514][ T8512] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.225551][ T8512] __sys_sendmsg+0x16d/0x220 [ 96.225572][ T8512] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.225599][ T8512] do_syscall_64+0xcd/0x4e0 [ 96.225618][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.225631][ T8512] RIP: 0033:0x7fda3078eec9 [ 96.225641][ T8512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.225652][ T8512] RSP: 002b:00007fda315c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.225662][ T8512] RAX: ffffffffffffffda RBX: 00007fda309e5fa0 RCX: 00007fda3078eec9 [ 96.225669][ T8512] RDX: 000000002400c010 RSI: 0000200000001340 RDI: 0000000000000003 [ 96.225676][ T8512] RBP: 00007fda315c2090 R08: 0000000000000000 R09: 0000000000000000 [ 96.225682][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.225688][ T8512] R13: 00007fda309e6038 R14: 00007fda309e5fa0 R15: 00007fff4e7517f8 [ 96.225703][ T8512] [ 96.399118][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.730'. [ 96.459379][ T5991] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 96.589299][ T5991] usb 7-1: device descriptor read/64, error -71 [ 96.823454][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 96.829362][ T5991] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 96.959442][ T5991] usb 7-1: device descriptor read/64, error -71 [ 97.001394][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.005280][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.014218][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.019759][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.024309][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.031306][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.035219][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.038409][ T24] usb 6-1: Product: syz [ 97.040465][ T24] usb 6-1: Manufacturer: syz [ 97.045570][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 97.047263][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 97.051723][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 97.053629][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 97.069586][ T5991] usb usb7-port1: attempt power cycle [ 97.106102][ T8539] FAULT_INJECTION: forcing a failure. [ 97.106102][ T8539] name failslab, interval 1, probability 0, space 0, times 0 [ 97.110770][ T8539] CPU: 2 UID: 0 PID: 8539 Comm: syz.3.737 Not tainted syzkaller #0 PREEMPT(full) [ 97.110785][ T8539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.110792][ T8539] Call Trace: [ 97.110796][ T8539] [ 97.110801][ T8539] dump_stack_lvl+0x16c/0x1f0 [ 97.110821][ T8539] should_fail_ex+0x512/0x640 [ 97.110837][ T8539] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 97.110876][ T8539] should_failslab+0xc2/0x120 [ 97.110889][ T8539] __kmalloc_cache_noprof+0x6a/0x3e0 [ 97.110905][ T8539] ? rcu_is_watching+0x12/0xc0 [ 97.110919][ T8539] ? call_usermodehelper_setup+0xaf/0x360 [ 97.110933][ T8539] ? __pfx_free_modprobe_argv+0x10/0x10 [ 97.110946][ T8539] call_usermodehelper_setup+0xaf/0x360 [ 97.110961][ T8539] __request_module+0x3bd/0x690 [ 97.110972][ T8539] ? __pfx___request_module+0x10/0x10 [ 97.110989][ T8539] ? find_held_lock+0x2b/0x80 [ 97.111002][ T8539] ? rtnl_link_ops_get+0x17b/0x2c0 [ 97.111023][ T8539] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.111038][ T8539] rtnl_newlink+0x1466/0x2000 [ 97.111059][ T8539] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.111074][ T8539] ? find_held_lock+0x2b/0x80 [ 97.111087][ T8539] ? avc_has_perm_noaudit+0x117/0x3b0 [ 97.111102][ T8539] ? avc_has_perm_noaudit+0x149/0x3b0 [ 97.111127][ T8539] ? find_held_lock+0x2b/0x80 [ 97.111139][ T8539] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.111154][ T8539] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.111169][ T8539] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 97.111186][ T8539] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.111203][ T8539] rtnetlink_rcv_msg+0x95b/0xe90 [ 97.111220][ T8539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.111241][ T8539] ? ref_tracker_free+0x37c/0x830 [ 97.111253][ T8539] netlink_rcv_skb+0x158/0x420 [ 97.111263][ T8539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.111281][ T8539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.111296][ T8539] ? netlink_deliver_tap+0x1ae/0xd30 [ 97.111314][ T8539] netlink_unicast+0x5a7/0x870 [ 97.111333][ T8539] ? __pfx_netlink_unicast+0x10/0x10 [ 97.111349][ T8539] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 97.111370][ T8539] netlink_sendmsg+0x8d1/0xdd0 [ 97.111382][ T8539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.111404][ T8539] ____sys_sendmsg+0xa95/0xc70 [ 97.111416][ T8539] ? copy_msghdr_from_user+0x10a/0x160 [ 97.111432][ T8539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.111450][ T8539] ___sys_sendmsg+0x134/0x1d0 [ 97.111475][ T8539] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.111508][ T8539] __sys_sendmsg+0x16d/0x220 [ 97.111524][ T8539] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.111545][ T8539] ? fput+0x9b/0xd0 [ 97.111562][ T8539] do_syscall_64+0xcd/0x4e0 [ 97.111579][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.111590][ T8539] RIP: 0033:0x7fda3078eec9 [ 97.111599][ T8539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.111610][ T8539] RSP: 002b:00007fda315c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.111620][ T8539] RAX: ffffffffffffffda RBX: 00007fda309e5fa0 RCX: 00007fda3078eec9 [ 97.111627][ T8539] RDX: 000000002400c010 RSI: 0000200000001340 RDI: 0000000000000003 [ 97.111633][ T8539] RBP: 00007fda315c2090 R08: 0000000000000000 R09: 0000000000000000 [ 97.111639][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.111645][ T8539] R13: 00007fda309e6038 R14: 00007fda309e5fa0 R15: 00007fff4e7517f8 [ 97.111659][ T8539] [ 97.246202][ T8523] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 97.258120][ T8523] pim6reg1: entered allmulticast mode [ 97.264586][ T6121] usb 6-1: USB disconnect, device number 11 [ 97.401319][ T8546] vivid-001: disconnect [ 97.403984][ T8545] vivid-001: reconnect [ 97.441244][ T8548] veth1_to_batadv: entered promiscuous mode [ 97.444014][ T8548] macvtap1: entered allmulticast mode [ 97.446394][ T8548] veth1_to_batadv: entered allmulticast mode [ 97.499354][ T5991] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 97.521024][ T5991] usb 7-1: device descriptor read/8, error -71 [ 97.549965][ T5308] Bluetooth: hci0: unexpected event for opcode 0x2417 [ 97.651917][ T8565] FAULT_INJECTION: forcing a failure. [ 97.651917][ T8565] name failslab, interval 1, probability 0, space 0, times 0 [ 97.656484][ T8565] CPU: 2 UID: 0 PID: 8565 Comm: syz.3.746 Not tainted syzkaller #0 PREEMPT(full) [ 97.656500][ T8565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.656507][ T8565] Call Trace: [ 97.656512][ T8565] [ 97.656519][ T8565] dump_stack_lvl+0x16c/0x1f0 [ 97.656544][ T8565] should_fail_ex+0x512/0x640 [ 97.656567][ T8565] should_failslab+0xc2/0x120 [ 97.656580][ T8565] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 97.656593][ T8565] ? __alloc_skb+0x2b2/0x380 [ 97.656610][ T8565] __alloc_skb+0x2b2/0x380 [ 97.656625][ T8565] ? __pfx___alloc_skb+0x10/0x10 [ 97.656639][ T8565] ? do_raw_spin_lock+0x12c/0x2b0 [ 97.656656][ T8565] br_info_notify+0x10f/0x2e0 [ 97.656671][ T8565] ? br_fdb_delete_bulk+0x2c2/0xd00 [ 97.656687][ T8565] br_device_event+0x30e/0xa00 [ 97.656699][ T8565] ? __pfx_br_device_event+0x10/0x10 [ 97.656711][ T8565] ? lockdep_rtnl_is_held+0x26/0x40 [ 97.656727][ T8565] notifier_call_chain+0xbc/0x410 [ 97.656743][ T8565] ? __pfx_br_device_event+0x10/0x10 [ 97.656758][ T8565] call_netdevice_notifiers_info+0xbe/0x140 [ 97.656772][ T8565] netif_state_change+0x165/0x3b0 [ 97.656783][ T8565] ? __pfx_netif_state_change+0x10/0x10 [ 97.656799][ T8565] ? netif_change_flags+0x10d/0x160 [ 97.656817][ T8565] do_setlink.constprop.0+0x3570/0x4380 [ 97.656839][ T8565] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 97.656860][ T8565] ? __lock_acquire+0xb97/0x1ce0 [ 97.656881][ T8565] ? br_switchdev_set_port_flag+0x134/0x380 [ 97.656896][ T8565] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 97.656908][ T8565] ? __pfx___mutex_trylock_common+0x10/0x10 [ 97.656932][ T8565] ? br_port_flags_change+0x6b/0x1d0 [ 97.656944][ T8565] ? br_setport+0x1180/0x17d0 [ 97.656958][ T8565] ? __pfx_br_setport+0x10/0x10 [ 97.656974][ T8565] ? __local_bh_enable_ip+0xa4/0x120 [ 97.656988][ T8565] ? br_port_slave_changelink+0xd9/0x190 [ 97.657002][ T8565] ? __local_bh_enable_ip+0xa4/0x120 [ 97.657016][ T8565] ? __pfx_br_port_slave_changelink+0x10/0x10 [ 97.657038][ T8565] rtnl_newlink+0x1446/0x2000 [ 97.657065][ T8565] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.657086][ T8565] ? find_held_lock+0x2b/0x80 [ 97.657101][ T8565] ? avc_has_perm_noaudit+0x117/0x3b0 [ 97.657115][ T8565] ? avc_has_perm_noaudit+0x149/0x3b0 [ 97.657140][ T8565] ? find_held_lock+0x2b/0x80 [ 97.657152][ T8565] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.657168][ T8565] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.657182][ T8565] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 97.657199][ T8565] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.657216][ T8565] rtnetlink_rcv_msg+0x95b/0xe90 [ 97.657234][ T8565] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.657255][ T8565] ? ref_tracker_free+0x37c/0x830 [ 97.657267][ T8565] netlink_rcv_skb+0x158/0x420 [ 97.657277][ T8565] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.657295][ T8565] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.657310][ T8565] ? netlink_deliver_tap+0x1ae/0xd30 [ 97.657328][ T8565] netlink_unicast+0x5a7/0x870 [ 97.657347][ T8565] ? __pfx_netlink_unicast+0x10/0x10 [ 97.657364][ T8565] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 97.657385][ T8565] netlink_sendmsg+0x8d1/0xdd0 [ 97.657397][ T8565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.657419][ T8565] ____sys_sendmsg+0xa95/0xc70 [ 97.657432][ T8565] ? copy_msghdr_from_user+0x10a/0x160 [ 97.657448][ T8565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.657466][ T8565] ___sys_sendmsg+0x134/0x1d0 [ 97.657483][ T8565] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.657517][ T8565] __sys_sendmsg+0x16d/0x220 [ 97.657533][ T8565] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.657558][ T8565] ? fput+0x9b/0xd0 [ 97.657575][ T8565] do_syscall_64+0xcd/0x4e0 [ 97.657592][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.657603][ T8565] RIP: 0033:0x7fda3078eec9 [ 97.657613][ T8565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.657623][ T8565] RSP: 002b:00007fda315c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.657634][ T8565] RAX: ffffffffffffffda RBX: 00007fda309e5fa0 RCX: 00007fda3078eec9 [ 97.657641][ T8565] RDX: 000000002400c010 RSI: 0000200000001340 RDI: 0000000000000003 [ 97.657647][ T8565] RBP: 00007fda315c2090 R08: 0000000000000000 R09: 0000000000000000 [ 97.657653][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.657659][ T8565] R13: 00007fda309e6038 R14: 00007fda309e5fa0 R15: 00007fff4e7517f8 [ 97.657673][ T8565] [ 97.759392][ T5991] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 97.793134][ T8568] program syz.3.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.820027][ T5991] usb 7-1: device descriptor read/8, error -71 [ 97.855774][ T8570] netlink: 'syz.3.748': attribute type 19 has an invalid length. [ 97.858774][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 97.870198][ T8570] netlink: 'syz.3.748': attribute type 19 has an invalid length. [ 97.870217][ T7428] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.873398][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 97.877200][ T7428] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.886388][ T7428] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.889377][ T7428] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.930288][ T5991] usb usb7-port1: unable to enumerate USB device [ 97.987275][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 97.989508][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 97.996497][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 98.030580][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 98.166292][ T8591] syz_tun: entered allmulticast mode [ 98.180453][ T8590] pimreg: entered allmulticast mode [ 98.185438][ T8589] syz_tun: left allmulticast mode [ 98.211727][ T8594] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 98.228269][ T8594] dummy0: entered promiscuous mode [ 98.232374][ T8594] team0: Port device dummy0 added [ 98.251794][ T8598] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.254926][ T8598] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 98.258286][ T8598] overlayfs: missing 'lowerdir' [ 98.365685][ T8607] netlink: 36 bytes leftover after parsing attributes in process `syz.1.762'. [ 98.367473][ T8608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.762'. [ 98.571244][ T8612] FAULT_INJECTION: forcing a failure. [ 98.571244][ T8612] name failslab, interval 1, probability 0, space 0, times 0 [ 98.576377][ T8612] CPU: 3 UID: 0 PID: 8612 Comm: syz.1.764 Not tainted syzkaller #0 PREEMPT(full) [ 98.576406][ T8612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.576418][ T8612] Call Trace: [ 98.576425][ T8612] [ 98.576433][ T8612] dump_stack_lvl+0x16c/0x1f0 [ 98.576464][ T8612] should_fail_ex+0x512/0x640 [ 98.576494][ T8612] should_failslab+0xc2/0x120 [ 98.576515][ T8612] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 98.576535][ T8612] ? skb_clone+0x190/0x3f0 [ 98.576565][ T8612] skb_clone+0x190/0x3f0 [ 98.576592][ T8612] netlink_deliver_tap+0xabd/0xd30 [ 98.576624][ T8612] netlink_unicast+0x71f/0x870 [ 98.576655][ T8612] ? __pfx_netlink_unicast+0x10/0x10 [ 98.576680][ T8612] ? __pfx_rtnl_newlink+0x10/0x10 [ 98.576717][ T8612] netlink_ack+0x696/0xb80 [ 98.576742][ T8612] netlink_rcv_skb+0x332/0x420 [ 98.576758][ T8612] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.576786][ T8612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.576813][ T8612] ? netlink_deliver_tap+0x1ae/0xd30 [ 98.576851][ T8612] netlink_unicast+0x5a7/0x870 [ 98.576882][ T8612] ? __pfx_netlink_unicast+0x10/0x10 [ 98.576909][ T8612] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 98.576944][ T8612] netlink_sendmsg+0x8d1/0xdd0 [ 98.576965][ T8612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.577003][ T8612] ____sys_sendmsg+0xa95/0xc70 [ 98.577024][ T8612] ? copy_msghdr_from_user+0x10a/0x160 [ 98.577050][ T8612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.577083][ T8612] ___sys_sendmsg+0x134/0x1d0 [ 98.577110][ T8612] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.577171][ T8612] __sys_sendmsg+0x16d/0x220 [ 98.577197][ T8612] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.577234][ T8612] ? fput+0x9b/0xd0 [ 98.577263][ T8612] do_syscall_64+0xcd/0x4e0 [ 98.577293][ T8612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.577311][ T8612] RIP: 0033:0x7f88cdd8eec9 [ 98.577326][ T8612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.577343][ T8612] RSP: 002b:00007f88cebc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.577365][ T8612] RAX: ffffffffffffffda RBX: 00007f88cdfe5fa0 RCX: 00007f88cdd8eec9 [ 98.577395][ T8612] RDX: 000000002400c010 RSI: 0000200000001340 RDI: 0000000000000003 [ 98.577406][ T8612] RBP: 00007f88cebc8090 R08: 0000000000000000 R09: 0000000000000000 [ 98.577417][ T8612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.577427][ T8612] R13: 00007f88cdfe6038 R14: 00007f88cdfe5fa0 R15: 00007ffca070c7a8 [ 98.577453][ T8612] [ 98.880093][ T6011] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 98.946348][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 98.946368][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 98.946380][ T40] audit: type=1400 audit(1759268329.212:806): avc: denied { nlmsg_read } for pid=8623 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.995211][ T8629] netlink: 'syz.1.769': attribute type 11 has an invalid length. [ 99.272692][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 99.431877][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.436408][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 99.440949][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 99.444859][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.450633][ T24] usb 6-1: config 0 descriptor?? [ 99.458321][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 99.461678][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 99.468868][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 99.473832][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 99.477159][ T24] usb 6-1: media controller created [ 99.480817][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.488888][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 99.492848][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 99.498317][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input16 [ 99.505458][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 99.508630][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 99.658390][ T8631] tipc: Started in network mode [ 99.660644][ T8631] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 99.664583][ T8631] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 99.668696][ T8631] tipc: Enabled bearer , priority 10 [ 99.670450][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 99.672657][ T24] dvb-usb: error while querying for an remote control event. [ 99.679871][ T7418] team0: left promiscuous mode [ 99.682153][ T7418] team_slave_0: left promiscuous mode [ 99.685262][ T7418] team_slave_1: left promiscuous mode [ 99.687987][ T7418] dummy0: left promiscuous mode [ 99.693194][ T6011] usb 6-1: USB disconnect, device number 12 [ 99.703711][ T6011] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 99.874803][ T8650] 9pnet_fd: Insufficient options for proto=fd [ 99.932578][ T40] audit: type=1400 audit(1759268330.202:807): avc: denied { map } for pid=8663 comm="syz.3.781" path="/186/file0" dev="tmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 99.974432][ T8659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8659 comm=syz.2.780 [ 100.017423][ T8669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8669 comm=syz.0.783 [ 100.023603][ T8669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8669 comm=syz.0.783 [ 100.080862][ T8671] bond2: (slave team0): Releasing active interface [ 100.088023][ T40] audit: type=1400 audit(1759268330.352:808): avc: denied { read } for pid=8668 comm="syz.0.783" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 100.095065][ T40] audit: type=1400 audit(1759268330.352:809): avc: denied { open } for pid=8668 comm="syz.0.783" path="/197/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 100.110289][ T8674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.118492][ T8674] block device autoloading is deprecated and will be removed. [ 100.124562][ T8671] team0: Port device dummy0 removed [ 100.125542][ T40] audit: type=1400 audit(1759268330.392:810): avc: denied { ioctl } for pid=8668 comm="syz.0.783" path="/197/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 100.125740][ T8669] md: md2 stopped. [ 100.128078][ T8671] bridge_slave_0: left allmulticast mode [ 100.137459][ T8671] bridge_slave_0: left promiscuous mode [ 100.140440][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.147707][ T8671] bridge_slave_1: left allmulticast mode [ 100.150134][ T8671] bridge_slave_1: left promiscuous mode [ 100.152374][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.160943][ T8671] bond0: (slave bond_slave_0): Releasing backup interface [ 100.167886][ T8671] bond0: (slave bond_slave_1): Releasing backup interface [ 100.187829][ T8671] team0: Port device team_slave_0 removed [ 100.195625][ T8671] team0: Port device team_slave_1 removed [ 100.198146][ T8671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.206015][ T8671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.210400][ T8671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.212674][ T8671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.217857][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 100.222643][ T8671] bond2: (slave veth3): Releasing active interface [ 100.237364][ T8675] team0: Mode changed to "random" [ 100.242519][ T8671] tipc: Enabled bearer , priority 0 [ 100.246884][ T8676] vlan0: entered promiscuous mode [ 100.257712][ T8676] team0: Port device vlan0 added [ 100.362597][ T8676] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 100.379280][ T8676] hsr_slave_0: left promiscuous mode [ 100.381906][ T8676] hsr_slave_1: left promiscuous mode [ 100.486145][ T40] audit: type=1400 audit(1759268330.752:811): avc: denied { map } for pid=8689 comm="syz.2.790" path="socket:[26557]" dev="sockfs" ino=26557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.505206][ T40] audit: type=1400 audit(1759268330.752:812): avc: denied { read } for pid=8689 comm="syz.2.790" path="socket:[26557]" dev="sockfs" ino=26557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.518492][ T40] audit: type=1400 audit(1759268330.752:813): avc: denied { getopt } for pid=8689 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.527312][ T40] audit: type=1400 audit(1759268330.782:814): avc: denied { connect } for pid=8694 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.534953][ T40] audit: type=1400 audit(1759268330.802:815): avc: denied { ioctl } for pid=8697 comm="syz.1.793" path="pid:[4026532865]" dev="nsfs" ino=4026532865 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 100.660243][ T838] tipc: Node number set to 1 [ 100.725051][ T8716] netlink: 'syz.2.800': attribute type 3 has an invalid length. [ 100.729349][ T5308] Bluetooth: hci1: Unable to find connection for big 0x00 [ 100.971903][ T24] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 101.125218][ T8716] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 101.133914][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 101.137027][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 101.139688][ T24] usb 7-1: can't read configurations, error -71 [ 101.414872][ T8730] syzkaller0: entered promiscuous mode [ 101.417275][ T8730] syzkaller0: entered allmulticast mode [ 101.466285][ T8728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.765493][ T838] IPVS: starting estimator thread 0... [ 101.800605][ T8738] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 101.873318][ T8741] IPVS: using max 23 ests per chain, 55200 per kthread [ 101.893759][ T8750] SELinux: failed to load policy [ 101.926023][ T8752] siw: device registration error -23 [ 101.935058][ T8753] siw: device registration error -23 [ 102.181991][ T5308] Bluetooth: hci3: link tx timeout [ 102.184834][ T5308] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.193215][ T63] Bluetooth: hci3: link tx timeout [ 102.195692][ T63] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.576729][ T8776] netlink: 'syz.3.820': attribute type 10 has an invalid length. [ 102.584058][ T8776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.647913][ T8780] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 102.701898][ T63] Bluetooth: hci3: link tx timeout [ 102.704886][ T63] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.758684][ T8795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22544 sclass=netlink_route_socket pid=8795 comm=syz.1.828 [ 102.824548][ T8802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8802 comm=syz.3.831 [ 102.840320][ T8806] syzkaller1: entered promiscuous mode [ 102.842239][ T8806] syzkaller1: entered allmulticast mode [ 102.846630][ T8806] fuse: Bad value for 'rootmode' [ 102.929152][ T7404] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 102.936134][ T8809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.032476][ T8828] __nla_validate_parse: 8 callbacks suppressed [ 103.032492][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 103.401378][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 103.404349][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 103.587820][ T8884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.855'. [ 103.759324][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 103.869313][ T1339] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 103.921335][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.924577][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.928140][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.934322][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 103.938050][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.941340][ T29] usb 6-1: Product: syz [ 103.943049][ T29] usb 6-1: Manufacturer: syz [ 103.945031][ T29] usb 6-1: SerialNumber: syz [ 103.986350][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056357800: rx timeout, send abort [ 103.991196][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888056357800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.000423][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 104.000471][ T40] audit: type=1400 audit(1759268334.272:846): avc: denied { read } for pid=5340 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.010294][ T40] audit: type=1400 audit(1759268334.272:847): avc: denied { search } for pid=5340 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.019078][ T40] audit: type=1400 audit(1759268334.272:848): avc: denied { search } for pid=5340 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.019411][ T1339] usb 8-1: device descriptor read/64, error -71 [ 104.025950][ T40] audit: type=1400 audit(1759268334.272:849): avc: denied { add_name } for pid=5340 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.034785][ T40] audit: type=1400 audit(1759268334.272:850): avc: denied { create } for pid=5340 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.041755][ T40] audit: type=1400 audit(1759268334.272:851): avc: denied { append open } for pid=5340 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.048643][ T40] audit: type=1400 audit(1759268334.272:852): avc: denied { getattr } for pid=5340 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.055541][ T40] audit: type=1400 audit(1759268334.282:853): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 104.153515][ T29] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 104.259315][ T1339] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 104.259441][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 104.284663][ T40] audit: type=1400 audit(1759268334.552:854): avc: denied { write } for pid=8908 comm="syz.0.862" name="usbmon5" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 104.288009][ T8910] bond0: left allmulticast mode [ 104.294759][ T8910] bond_slave_0: left allmulticast mode [ 104.296804][ T8910] bond_slave_1: left allmulticast mode [ 104.298982][ T8910] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 104.312622][ T8910] vlan1: left allmulticast mode [ 104.314534][ T8910] veth0_vlan: left allmulticast mode [ 104.321653][ T8910] xfrm1: left allmulticast mode [ 104.389519][ T1339] usb 8-1: device descriptor read/64, error -71 [ 104.460748][ T8918] ceph: No mds server is up or the cluster is laggy [ 104.460793][ T8920] ceph: No mds server is up or the cluster is laggy [ 104.504017][ T1339] usb usb8-port1: attempt power cycle [ 104.549543][ T837] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 104.551093][ T40] audit: type=1400 audit(1759268334.822:855): avc: denied { read } for pid=8927 comm="syz.0.866" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 104.620791][ T6121] usb 6-1: USB disconnect, device number 13 [ 104.628152][ T6121] usblp0: removed [ 104.664849][ T8937] overlayfs: conflicting lowerdir path [ 104.684344][ T8943] netlink: 'syz.0.870': attribute type 4 has an invalid length. [ 104.701402][ T8945] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.701448][ T8946] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.704179][ T8945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.708828][ T8945] IPv6: NLM_F_CREATE should be set when creating new route [ 104.711387][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.711731][ T8945] IPv6: NLM_F_CREATE should be set when creating new route [ 104.717004][ T837] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.719721][ T8946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.723602][ T8946] ufs: You didn't specify the type of your ufs filesystem [ 104.723602][ T8946] [ 104.723602][ T8946] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 104.723602][ T8946] [ 104.723602][ T8946] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 104.724719][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.872'. [ 104.724733][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.872'. [ 104.724995][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.872'. [ 104.725005][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.872'. [ 104.727003][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.729353][ T837] usb 7-1: config 0 descriptor?? [ 104.738758][ T8946] ufs: ufstype=old is supported read-only [ 104.761247][ T8945] ufs: You didn't specify the type of your ufs filesystem [ 104.761247][ T8945] [ 104.761247][ T8945] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 104.761247][ T8945] [ 104.761247][ T8945] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 104.772490][ T8945] ufs: ufstype=old is supported read-only [ 104.859301][ T1339] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 104.881605][ T1339] usb 8-1: device descriptor read/8, error -71 [ 104.924576][ T8954] syz.1.875 (8954) used greatest stack depth: 19752 bytes left [ 104.949047][ T837] usbhid 7-1:0.0: can't add hid device: -71 [ 104.951136][ T837] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 104.959550][ T837] usb 7-1: USB disconnect, device number 11 [ 104.971110][ T8963] sctp: [Deprecated]: syz.1.878 (pid 8963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.971110][ T8963] Use struct sctp_sack_info instead [ 104.994933][ T8965] vxfs: WRONG superblock magic 00000000 at 1 [ 104.998432][ T8965] vxfs: WRONG superblock magic 00000000 at 8 [ 105.000751][ T8965] vxfs: can't find superblock. [ 105.062254][ T8969] 9pnet: Found fid 0 not clunked [ 105.119364][ T1339] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 105.124006][ T8969] i2c i2c-1: Invalid block write size 34 [ 105.140284][ T1339] usb 8-1: device descriptor read/8, error -71 [ 105.141720][ T8969] block device autoloading is deprecated and will be removed. [ 105.207619][ T8975] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.883'. [ 105.249650][ T1339] usb usb8-port1: unable to enumerate USB device [ 105.389607][ T838] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 105.549399][ T838] usb 7-1: Using ep0 maxpacket: 32 [ 105.552789][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.556235][ T838] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 105.559078][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.566622][ T838] usb 7-1: config 0 descriptor?? [ 105.569966][ T838] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 105.577705][ T838] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 105.776738][ T1025] usb 7-1: USB disconnect, device number 12 [ 105.783059][ T1025] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 106.183684][ T8989] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 106.184130][ T8986] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.200228][ T8985] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 106.205506][ T8986] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 106.210057][ T8985] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 106.215580][ T8985] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 106.218885][ T8985] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 106.222505][ T8985] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 106.272733][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 106.391412][ T8999] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 106.558237][ T9015] veth1_to_batadv: entered promiscuous mode [ 106.842605][ T9023] random: crng reseeded on system resumption [ 106.868571][ T9023] Restarting kernel threads ... [ 106.872427][ T9023] Done restarting kernel threads. [ 106.872768][ T9025] fuse: Bad value for 'fd' [ 106.895478][ T9054] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 106.907410][ T9054] bond4: entered promiscuous mode [ 106.909429][ T9054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 106.917709][ T9054] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.923845][ T9054] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 106.929309][ T9054] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 107.482230][ T9067] veth1_to_batadv: entered promiscuous mode [ 107.521185][ T9065] bridge0: entered promiscuous mode [ 107.524249][ T9065] macsec1: entered promiscuous mode [ 108.156367][ T6121] hid_parser_main: 4092 callbacks suppressed [ 108.156380][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.160964][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.163245][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.165545][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.167836][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.170316][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.172625][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.174897][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.177222][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.179606][ T6121] hid-generic DDCB:0001:9C63.0006: unknown main item tag 0x0 [ 108.183758][ T6121] hid-generic DDCB:0001:9C63.0006: hidraw1: HID v0.05 Device [syz1] on syz0 [ 108.213801][ T9082] fido_id[9082]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.277447][ T9089] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 108.398571][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033114c00: rx timeout, send abort [ 108.401564][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033114c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.503139][ T9094] 9pnet_fd: Insufficient options for proto=fd [ 108.511261][ T1339] IPVS: starting estimator thread 0... [ 108.511926][ T9099] netlink: 'syz.3.917': attribute type 7 has an invalid length. [ 108.515432][ T9099] __nla_validate_parse: 3 callbacks suppressed [ 108.515440][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 108.532424][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.535720][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.558365][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.919'. [ 108.563543][ T5991] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 108.591246][ T9110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.920'. [ 108.599368][ T9101] IPVS: using max 43 ests per chain, 103200 per kthread [ 108.711842][ T5991] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.716117][ T5991] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 108.721477][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 108.726281][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 178, setting to 64 [ 108.731393][ T5991] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.737524][ T5991] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 108.741164][ T5991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.744535][ T5991] usb 6-1: Product: syz [ 108.746316][ T5991] usb 6-1: Manufacturer: syz [ 108.748345][ T5991] usb 6-1: SerialNumber: syz [ 108.754611][ T5991] usb 6-1: config 0 descriptor?? [ 108.757644][ T9086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.763733][ T5991] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17 [ 108.769569][ T9125] 9pnet_virtio: no channels available for device syz [ 108.774232][ C0] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 108.812555][ C3] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 108.889979][ T838] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 108.927642][ T9131] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.026128][ T9136] netlink: 112 bytes leftover after parsing attributes in process `syz.1.913'. [ 109.029500][ T9136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9136 comm=syz.1.913 [ 109.050042][ T838] usb 7-1: Using ep0 maxpacket: 16 [ 109.055727][ T838] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 109.058602][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.065643][ T838] usb 7-1: config 0 descriptor?? [ 109.069520][ T5991] usb 6-1: USB disconnect, device number 14 [ 109.075809][ T838] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 109.269932][ T838] usb 7-1: Detected FT232A [ 109.272869][ T838] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 109.589319][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 109.589332][ T40] audit: type=1400 audit(1759268339.852:882): avc: denied { nlmsg_write } for pid=9166 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 109.668342][ T9171] syz_tun: entered allmulticast mode [ 109.674430][ T9170] syz_tun: left allmulticast mode [ 109.745686][ T838] usb 7-1: USB disconnect, device number 13 [ 109.753805][ T838] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 109.758862][ T838] ftdi_sio 7-1:0.0: device disconnected [ 109.851043][ T9189] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 110.005052][ T9142] Can't find ip_set type bitmap:ip [ 110.032830][ T9201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.934'. [ 110.063105][ T9196] comedi comedi3: comedi_config --init_data is deprecated [ 110.089415][ T9196] lo speed is unknown, defaulting to 1000 [ 110.091318][ T9196] lo speed is unknown, defaulting to 1000 [ 110.093843][ T9196] lo speed is unknown, defaulting to 1000 [ 110.102565][ T9196] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 110.125040][ T9196] lo speed is unknown, defaulting to 1000 [ 110.128189][ T9196] lo speed is unknown, defaulting to 1000 [ 110.131126][ T9196] lo speed is unknown, defaulting to 1000 [ 110.134057][ T9196] lo speed is unknown, defaulting to 1000 [ 110.179530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.217844][ T9212] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:21 [ 110.220192][ T9213] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 110.360580][ T9218] lo speed is unknown, defaulting to 1000 [ 110.400298][ T9218] netlink: 5 bytes leftover after parsing attributes in process `syz.3.937'. [ 110.505413][ T9225] tipc: Can't bind to reserved service type 2 [ 110.505449][ T40] audit: type=1400 audit(1759268340.772:883): avc: denied { bind } for pid=9224 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.515198][ T40] audit: type=1400 audit(1759268340.772:884): avc: denied { listen } for pid=9224 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.521323][ T40] audit: type=1400 audit(1759268340.772:885): avc: denied { accept } for pid=9224 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.785834][ T40] audit: type=1400 audit(1759268341.052:886): avc: denied { write } for pid=9239 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.841200][ T9244] netlink: 37 bytes leftover after parsing attributes in process `syz.3.946'. [ 110.844381][ T9244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.847298][ T9244] IPv6: NLM_F_CREATE should be set when creating new route [ 110.850499][ T9244] IPv6: NLM_F_CREATE should be set when creating new route [ 110.875418][ T9249] netlink: 76 bytes leftover after parsing attributes in process `syz.1.948'. [ 110.908984][ T9254] netlink: 'syz.1.949': attribute type 12 has an invalid length. [ 111.002139][ T9265] netlink: 'syz.1.952': attribute type 64 has an invalid length. [ 111.004399][ T9265] netlink: 'syz.1.952': attribute type 4 has an invalid length. [ 111.006727][ T9265] netlink: 152 bytes leftover after parsing attributes in process `syz.1.952'. [ 111.929839][ T63] Bluetooth: hci0: command tx timeout [ 112.017498][ T9279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9279 comm=syz.3.956 [ 112.815725][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.815983][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 112.887270][ T9282] netlink: 'syz.3.958': attribute type 21 has an invalid length. [ 112.889968][ T9282] netlink: 156 bytes leftover after parsing attributes in process `syz.3.958'. [ 113.040939][ T40] audit: type=1400 audit(1759268343.312:887): avc: denied { append } for pid=9294 comm="syz.2.961" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.042127][ T9296] program syz.2.961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.399419][ T6121] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 113.550948][ T6121] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 113.553535][ T6121] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 113.556091][ T6121] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 113.558854][ T6121] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 113.563118][ T6121] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 113.566293][ T6121] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.569451][ T6121] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 113.576220][ T6121] usb 7-1: string descriptor 0 read error: -22 [ 113.578319][ T6121] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 113.581344][ T6121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.585136][ T6121] usb 7-1: config 0 descriptor?? [ 113.588624][ T6121] hub 7-1:0.0: bad descriptor, ignoring hub [ 113.590830][ T6121] hub 7-1:0.0: probe with driver hub failed with error -5 [ 113.595670][ T6121] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input19 [ 113.798759][ T5991] usb 7-1: USB disconnect, device number 14 [ 113.848742][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 114.068985][ T9324] lo speed is unknown, defaulting to 1000 [ 114.085883][ T9326] overlayfs: overlapping lowerdir path [ 114.133054][ T9324] lo speed is unknown, defaulting to 1000 [ 114.156898][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 114.167039][ T9338] affs: No valid root block on device nullb0 [ 114.167904][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.969'. [ 114.237188][ T9336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.972'. [ 114.267440][ T9347] netlink: 'syz.3.975': attribute type 2 has an invalid length. [ 114.269999][ T9347] netlink: 'syz.3.975': attribute type 2 has an invalid length. [ 114.272407][ T9347] netlink: 'syz.3.975': attribute type 2 has an invalid length. [ 114.373077][ T40] audit: type=1400 audit(1759268344.642:888): avc: denied { bind } for pid=9359 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.381201][ T9360] netlink: 104 bytes leftover after parsing attributes in process `syz.1.979'. [ 114.390581][ T9362] cgroup: No subsys list or none specified [ 114.420871][ T9369] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.424233][ T9369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=9369 comm=syz.3.982 [ 114.462658][ T9371] /dev/sr0: Can't open blockdev [ 114.587691][ T9384] lo speed is unknown, defaulting to 1000 [ 114.599895][ T40] audit: type=1400 audit(1759268344.872:889): avc: denied { append } for pid=9366 comm="syz.1.981" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 114.730710][ T9391] binder: 9390:9391 ioctl c018620c 200000000040 returned -22 [ 114.763584][ T5308] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 114.860723][ T40] audit: type=1400 audit(1759268345.132:890): avc: denied { ioctl } for pid=9407 comm="syz.1.994" path="/dev/fb0" dev="devtmpfs" ino=636 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.017977][ T9413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.995'. [ 115.078941][ T40] audit: type=1400 audit(1759268345.342:891): avc: denied { write } for pid=9419 comm="syz.0.996" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.246110][ T40] audit: type=1400 audit(1759268345.512:892): avc: denied { create } for pid=9430 comm="syz.0.1000" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.252978][ T40] audit: type=1400 audit(1759268345.512:893): avc: denied { write } for pid=9430 comm="syz.0.1000" name="file0" dev="tmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.260230][ T40] audit: type=1400 audit(1759268345.512:894): avc: denied { open } for pid=9430 comm="syz.0.1000" path="/238/file0" dev="tmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.267554][ T40] audit: type=1400 audit(1759268345.512:895): avc: denied { ioctl } for pid=9430 comm="syz.0.1000" path="/238/file0" dev="tmpfs" ino=1295 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.289363][ T5896] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 115.340454][ T40] audit: type=1400 audit(1759268345.612:896): avc: denied { read } for pid=9430 comm="syz.0.1000" name="loop-control" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.347949][ T40] audit: type=1400 audit(1759268345.612:897): avc: denied { open } for pid=9430 comm="syz.0.1000" path="/dev/loop-control" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.362487][ T40] audit: type=1400 audit(1759268345.632:898): avc: denied { unlink } for pid=5956 comm="syz-executor" name="file0" dev="tmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.382834][ T9434] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 115.655292][ T9443] tmpfs: Cannot enable quota on remount [ 115.809083][ T9451] ip6erspan0: entered promiscuous mode [ 115.813168][ T9451] comedi comedi3: comedi_config --init_data is deprecated [ 115.934429][ T9466] netlink: 'syz.0.1014': attribute type 39 has an invalid length. [ 115.942904][ T9467] use of bytesused == 0 is deprecated and will be removed in the future, [ 115.945733][ T9467] use the actual size instead. [ 116.840146][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 117.179371][ T34] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 117.339313][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 117.342542][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.346174][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.351152][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 117.355876][ T34] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 117.358807][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.363859][ T34] usb 8-1: config 0 descriptor?? [ 117.567253][ T9517] kvm: kvm [9516]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 117.570860][ T9517] kvm: kvm [9516]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 117.694471][ T9528] binder: 9527:9528 ioctl c0306201 200000000080 returned -22 [ 117.721437][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 117.775847][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 117.813108][ T34] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 117.816003][ T34] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 117.845540][ T9553] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1039'. [ 117.972892][ T6121] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 117.990708][ T6121] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 117.994796][ T34] usb 8-1: USB disconnect, device number 20 [ 117.998801][ T6121] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 118.004946][ T6121] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 118.067665][ T9573] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 118.304045][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 118.348887][ T9603] binder: Binderfs stats mode cannot be changed during a remount [ 118.355190][ T9603] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 118.563859][ T9611] fuse: Bad value for 'group_id' [ 118.565878][ T9611] fuse: Bad value for 'group_id' [ 119.288521][ T9661] netlink: 'syz.2.1071': attribute type 21 has an invalid length. [ 119.336571][ T9658] netlink: 'syz.0.1067': attribute type 3 has an invalid length. [ 119.387048][ T9668] kvm: kvm [9666]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000007a) = 0x1005800000000 [ 119.557503][ T9683] tmpfs: Unknown parameter '' [ 119.593509][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 119.625001][ T9687] autofs4:pid:9687:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 119.742541][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 119.746691][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 119.746706][ T40] audit: type=1326 audit(1759268350.012:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 119.758473][ T40] audit: type=1326 audit(1759268350.012:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 119.768256][ T40] audit: type=1326 audit(1759268350.012:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 119.775559][ T40] audit: type=1326 audit(1759268350.012:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 119.782674][ T40] audit: type=1326 audit(1759268350.012:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 119.789638][ T40] audit: type=1326 audit(1759268350.012:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 119.796529][ T40] audit: type=1326 audit(1759268350.012:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 119.803761][ T40] audit: type=1326 audit(1759268350.012:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 119.811119][ T40] audit: type=1326 audit(1759268350.012:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 119.818349][ T40] audit: type=1326 audit(1759268350.012:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.3.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3078eec9 code=0x7ffc0000 [ 120.028287][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803bbdfc00: rx timeout, send abort [ 120.531026][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803bbdfc00: abort rx timeout. Force session deactivation [ 120.560292][ T5308] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 120.563536][ T5308] CPU: 1 UID: 0 PID: 5308 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 120.563553][ T5308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.563563][ T5308] Workqueue: hci2 hci_rx_work [ 120.563607][ T5308] Call Trace: [ 120.563612][ T5308] [ 120.563617][ T5308] dump_stack_lvl+0x16c/0x1f0 [ 120.563637][ T5308] sysfs_warn_dup+0x7f/0xa0 [ 120.563659][ T5308] sysfs_create_dir_ns+0x24b/0x2b0 [ 120.563675][ T5308] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 120.563690][ T5308] ? find_held_lock+0x2b/0x80 [ 120.563708][ T5308] ? do_raw_spin_unlock+0x172/0x230 [ 120.563723][ T5308] kobject_add_internal+0x2c4/0x9b0 [ 120.563738][ T5308] kobject_add+0x16e/0x240 [ 120.563749][ T5308] ? __pfx_kobject_add+0x10/0x10 [ 120.563763][ T5308] ? do_raw_spin_unlock+0x172/0x230 [ 120.563776][ T5308] ? kobject_put+0xab/0x5a0 [ 120.563791][ T5308] device_add+0x288/0x1aa0 [ 120.563813][ T5308] ? __pfx_dev_set_name+0x10/0x10 [ 120.563829][ T5308] ? __pfx_device_add+0x10/0x10 [ 120.563841][ T5308] ? mgmt_send_event_skb+0x2fb/0x460 [ 120.563860][ T5308] hci_conn_add_sysfs+0x17e/0x230 [ 120.563877][ T5308] le_conn_complete_evt+0x1260/0x2150 [ 120.563904][ T5308] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 120.563938][ T5308] ? hci_event_packet+0x459/0x11c0 [ 120.563958][ T5308] hci_le_conn_complete_evt+0x23c/0x370 [ 120.563977][ T5308] hci_le_meta_evt+0x357/0x5e0 [ 120.563993][ T5308] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 120.564010][ T5308] hci_event_packet+0x682/0x11c0 [ 120.564026][ T5308] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 120.564043][ T5308] ? __pfx_hci_event_packet+0x10/0x10 [ 120.564060][ T5308] ? kcov_remote_start+0x3c9/0x6d0 [ 120.564074][ T5308] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.564094][ T5308] hci_rx_work+0x2c5/0x16b0 [ 120.564110][ T5308] ? rcu_is_watching+0x12/0xc0 [ 120.564126][ T5308] process_one_work+0x9cc/0x1b70 [ 120.564145][ T5308] ? __pfx_process_one_work+0x10/0x10 [ 120.564161][ T5308] ? assign_work+0x1a0/0x250 [ 120.564172][ T5308] worker_thread+0x6c8/0xf10 [ 120.564191][ T5308] ? __pfx_worker_thread+0x10/0x10 [ 120.564202][ T5308] kthread+0x3c2/0x780 [ 120.564213][ T5308] ? __pfx_kthread+0x10/0x10 [ 120.564225][ T5308] ? rcu_is_watching+0x12/0xc0 [ 120.564238][ T5308] ? __pfx_kthread+0x10/0x10 [ 120.564249][ T5308] ret_from_fork+0x56a/0x730 [ 120.564261][ T5308] ? __pfx_kthread+0x10/0x10 [ 120.564272][ T5308] ret_from_fork_asm+0x1a/0x30 [ 120.564294][ T5308] [ 120.564309][ T5308] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.603338][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 120.605508][ T5308] Bluetooth: hci2: failed to register connection device [ 120.658162][ T5308] Bluetooth: hci2: link tx timeout [ 120.661606][ T5308] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 120.665273][ T5308] Bluetooth: hci2: link tx timeout [ 120.666939][ T5308] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.781632][ T9734] input: syz1 as /devices/virtual/input/input22 [ 120.796783][ T9734] evm: overlay not supported [ 120.835466][ T9736] netlink: 'syz.2.1097': attribute type 1 has an invalid length. [ 120.848778][ T9736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.853886][ T9736] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1097'. [ 121.020800][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 121.023755][ T9748] netlink: 'syz.2.1102': attribute type 20 has an invalid length. [ 121.030920][ T7418] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.030989][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 121.033882][ T7418] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.036853][ T9748] netlink: 'syz.2.1102': attribute type 20 has an invalid length. [ 121.041155][ T7418] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.045823][ T7418] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.445153][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1106'. [ 121.631939][ T9773] overlayfs: conflicting lowerdir path [ 121.653072][ T9775] mkiss: ax0: crc mode is auto. [ 121.718125][ T9785] binder: BINDER_SET_CONTEXT_MGR already set [ 121.722005][ T9785] binder: 9784:9785 ioctl 4018620d 200000000100 returned -16 [ 121.724516][ T9785] binder: BINDER_SET_CONTEXT_MGR already set [ 121.726433][ T9785] binder: 9784:9785 ioctl 4018620d 200000000100 returned -16 [ 121.728834][ T9785] binder: BINDER_SET_CONTEXT_MGR already set [ 121.730818][ T9785] binder: 9784:9785 ioctl 4018620d 200000000100 returned -16 [ 121.733237][ T9785] binder: BINDER_SET_CONTEXT_MGR already set [ 121.735277][ T9785] binder: 9784:9785 ioctl 4018620d 200000000100 returned -16 [ 121.737803][ T9785] binder: BINDER_SET_CONTEXT_MGR already set [ 121.741284][ T9785] binder: 9784:9785 ioctl 4018620d 200000000100 returned -16 [ 121.743734][ T9785] binder: BINDER_SET_CONTEXT_MGR already set [ 121.745684][ T9785] binder: 9784:9785 ioctl 4018620d 200000000100 returned -16 [ 121.806537][ T9792] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1116'. [ 122.098439][ T9807] lo speed is unknown, defaulting to 1000 [ 122.256773][ T9809] lo speed is unknown, defaulting to 1000 [ 122.729400][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 123.299118][ T9865] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.302202][ T9865] overlayfs: failed to set xattr on upper [ 123.304347][ T9865] overlayfs: ...falling back to redirect_dir=nofollow. [ 123.306778][ T9865] overlayfs: ...falling back to metacopy=off. [ 123.308799][ T9865] overlayfs: ...falling back to index=off. [ 123.310978][ T9865] overlayfs: ...falling back to uuid=null. [ 123.350440][ T9875] netlink: 'syz.3.1139': attribute type 11 has an invalid length. [ 123.601181][ T9905] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1148'. [ 123.642921][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 123.849491][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 123.849584][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 124.377306][ T9949] afs: Unknown parameter 'subj_role' [ 124.431595][ T9951] syzkaller0: entered promiscuous mode [ 124.433441][ T9951] syzkaller0: entered allmulticast mode [ 124.438438][ T9951] veth1_vlan: left promiscuous mode [ 124.551850][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=9953 comm=syz.1.1159 [ 124.819350][ T5308] Bluetooth: hci2: command 0x0406 tx timeout [ 125.674918][ T9972] netlink: 'syz.1.1165': attribute type 10 has an invalid length. [ 125.685606][ T9972] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 125.700047][ T1146] ------------[ cut here ]------------ [ 125.702412][ T1146] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 125.706149][ T1146] WARNING: CPU: 0 PID: 1146 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 125.709902][ T1146] Modules linked in: [ 125.711508][ T1146] CPU: 0 UID: 0 PID: 1146 Comm: kworker/u32:7 Not tainted syzkaller #0 PREEMPT(full) [ 125.717051][ T1146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.721159][ T1146] Workqueue: bond0 bond_mii_monitor [ 125.722823][ T1146] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 125.724760][ T1146] Code: 05 ff ff ff e8 94 a8 88 f8 c6 05 e2 4f 15 07 01 90 ba 48 00 00 00 48 c7 c6 80 75 9f 8c 48 c7 c7 20 75 9f 8c e8 84 38 47 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 36 5f 90 e8 de 15 ef f8 e9 [ 125.730992][ T1146] RSP: 0018:ffffc900063d79f0 EFLAGS: 00010286 [ 125.732888][ T9981] trusted_key: encrypted_key: insufficient parameters specified [ 125.735312][ T1146] RAX: 0000000000000000 RBX: ffff8880479f8000 RCX: ffffffff81796e88 [ 125.738235][ T1146] RDX: ffff8880295d2440 RSI: ffffffff81796e95 RDI: 0000000000000001 [ 125.741239][ T1146] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 125.743857][ T1146] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000c7af48 [ 125.746336][ T1146] R13: ffff8880479f8cc1 R14: ffffffff8cc26e60 R15: ffffffff896b5e70 [ 125.748843][ T1146] FS: 0000000000000000(0000) GS:ffff8880d6e81000(0000) knlGS:0000000000000000 [ 125.751910][ T63] Bluetooth: hci2: unexpected event 0x3d length: 9 < 14 [ 125.753042][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 125.753051][ T40] audit: type=1400 audit(1759268356.022:950): avc: denied { mounton } for pid=9979 comm="syz.1.1168" path="/312/file0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 125.754219][ T1146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.766817][ T1146] CR2: 00007fda315a0f98 CR3: 000000005099d000 CR4: 0000000000352ef0 [ 125.769724][ T1146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.772171][ T1146] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.774561][ T1146] Call Trace: [ 125.775637][ T1146] [ 125.776597][ T1146] ethtool_op_get_link+0x1d/0x70 [ 125.778149][ T1146] bond_check_dev_link+0x3f9/0x710 [ 125.780031][ T1146] ? __pfx_bond_check_dev_link+0x10/0x10 [ 125.781760][ T1146] bond_mii_monitor+0x3c0/0x2dc0 [ 125.783530][ T1146] ? __pfx_bond_mii_monitor+0x10/0x10 [ 125.786125][ T1146] ? rcu_is_watching+0x12/0xc0 [ 125.788542][ T1146] process_one_work+0x9cc/0x1b70 [ 125.790727][ T1146] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 125.792780][ T1146] ? __pfx_process_one_work+0x10/0x10 [ 125.794531][ T1146] ? assign_work+0x1a0/0x250 [ 125.796063][ T1146] worker_thread+0x6c8/0xf10 [ 125.797595][ T1146] ? __pfx_worker_thread+0x10/0x10 [ 125.799410][ T1146] kthread+0x3c2/0x780 [ 125.800740][ T1146] ? __pfx_kthread+0x10/0x10 [ 125.802225][ T1146] ? rcu_is_watching+0x12/0xc0 [ 125.803784][ T1146] ? __pfx_kthread+0x10/0x10 [ 125.805275][ T1146] ret_from_fork+0x56a/0x730 [ 125.806761][ T1146] ? __pfx_kthread+0x10/0x10 [ 125.808292][ T1146] ret_from_fork_asm+0x1a/0x30 [ 125.809933][ T1146] [ 125.810944][ T1146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.813247][ T1146] CPU: 0 UID: 0 PID: 1146 Comm: kworker/u32:7 Not tainted syzkaller #0 PREEMPT(full) [ 125.816246][ T1146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.819656][ T1146] Workqueue: bond0 bond_mii_monitor [ 125.821332][ T1146] Call Trace: [ 125.822408][ T1146] [ 125.823375][ T1146] dump_stack_lvl+0x3d/0x1f0 [ 125.824902][ T1146] vpanic+0x6e8/0x7a0 [ 125.826196][ T1146] ? __pfx_vpanic+0x10/0x10 [ 125.827662][ T1146] ? __linkwatch_sync_dev+0x1ed/0x230 [ 125.829375][ T1146] panic+0xca/0xd0 [ 125.830580][ T1146] ? __pfx_panic+0x10/0x10 [ 125.832023][ T1146] ? check_panic_on_warn+0x1f/0xb0 [ 125.833655][ T1146] check_panic_on_warn+0xab/0xb0 [ 125.835247][ T1146] __warn+0xf6/0x3c0 [ 125.836515][ T1146] ? preempt_schedule_notrace+0x62/0xe0 [ 125.838314][ T1146] ? __linkwatch_sync_dev+0x1ed/0x230 [ 125.840051][ T1146] report_bug+0x3c3/0x580 [ 125.841493][ T1146] ? __linkwatch_sync_dev+0x1ed/0x230 [ 125.843205][ T1146] handle_bug+0x184/0x210 [ 125.844621][ T1146] exc_invalid_op+0x17/0x50 [ 125.846068][ T1146] asm_exc_invalid_op+0x1a/0x20 [ 125.847659][ T1146] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 125.849575][ T1146] Code: 05 ff ff ff e8 94 a8 88 f8 c6 05 e2 4f 15 07 01 90 ba 48 00 00 00 48 c7 c6 80 75 9f 8c 48 c7 c7 20 75 9f 8c e8 84 38 47 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 36 5f 90 e8 de 15 ef f8 e9 [ 125.855641][ T1146] RSP: 0018:ffffc900063d79f0 EFLAGS: 00010286 [ 125.857616][ T1146] RAX: 0000000000000000 RBX: ffff8880479f8000 RCX: ffffffff81796e88 [ 125.860119][ T1146] RDX: ffff8880295d2440 RSI: ffffffff81796e95 RDI: 0000000000000001 [ 125.862641][ T1146] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 125.865163][ T1146] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000c7af48 [ 125.867694][ T1146] R13: ffff8880479f8cc1 R14: ffffffff8cc26e60 R15: ffffffff896b5e70 [ 125.870182][ T1146] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 125.871902][ T1146] ? __warn_printk+0x198/0x350 [ 125.873418][ T1146] ? __warn_printk+0x1a5/0x350 [ 125.874909][ T1146] ethtool_op_get_link+0x1d/0x70 [ 125.876475][ T1146] bond_check_dev_link+0x3f9/0x710 [ 125.878120][ T1146] ? __pfx_bond_check_dev_link+0x10/0x10 [ 125.879825][ T1146] bond_mii_monitor+0x3c0/0x2dc0 [ 125.881348][ T1146] ? __pfx_bond_mii_monitor+0x10/0x10 [ 125.882997][ T1146] ? rcu_is_watching+0x12/0xc0 [ 125.884491][ T1146] process_one_work+0x9cc/0x1b70 [ 125.886023][ T1146] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 125.887947][ T1146] ? __pfx_process_one_work+0x10/0x10 [ 125.889641][ T1146] ? assign_work+0x1a0/0x250 [ 125.891142][ T1146] worker_thread+0x6c8/0xf10 [ 125.892629][ T1146] ? __pfx_worker_thread+0x10/0x10 [ 125.894221][ T1146] kthread+0x3c2/0x780 [ 125.895535][ T1146] ? __pfx_kthread+0x10/0x10 [ 125.897155][ T1146] ? rcu_is_watching+0x12/0xc0 [ 125.898883][ T1146] ? __pfx_kthread+0x10/0x10 [ 125.900510][ T1146] ret_from_fork+0x56a/0x730 [ 125.902134][ T1146] ? __pfx_kthread+0x10/0x10 [ 125.903628][ T1146] ret_from_fork_asm+0x1a/0x30 [ 125.905180][ T1146] [ 125.907023][ T1146] Kernel Offset: disabled [ 125.908426][ T1146] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:39:15 Registers: info registers vcpu 0 CPU#0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851ea265 RDI=ffffffff9ab43e20 RBP=ffffffff9ab43de0 RSP=ffffc900063d7360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000005b R14=ffffffff9ab43de0 R15=ffffffff851ea200 RIP=ffffffff851ea28f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e81000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fda315a0f98 CR3=000000005099d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefee0 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca070cb30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca070ccb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca070ccb6 00007ffca070ccbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88cde12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88cde12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88cde12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88cde12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88cde1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88cde1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffea00014032c0 RCX=ffffffff822d11c7 RDX=ffff88802be3c880 RSI=ffffffff822cf29e RDI=ffffea00014032c0 RBP=0000000000000000 RSP=ffffc900033af560 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81badd21 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556b326500 ffffffff 00c00000 GS =0000 ffff8880d6f81000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88ceb156c0 CR3=000000005099d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ead2730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557eae2142 000055557eae1fc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557eadc8df 000055557eadbd70 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8580100000040601 43c80030656c6966 2f2e01ffffffffff ffffffef0800033c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef08148003003072 732f7665642f01ff ffffffffffffffed 0813800370100040 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b00313a2a410000e 9003800208198003 1980040e80030e80 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc00020007000800 18e00300100018d0 030fffffffffffff 0418c00302100018 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180040008000210 00021000080171f4 03f8100018800401 0000040806060168 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 014080828010001a 8004010000040806 060168cc0008001a e0030010001ad003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffffffff04 1ac0030210001ab0 03021000159003f9 0208098003098004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1580031580041aa0 032008001a90030c c088848404880008 0302b8c804840004 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304040000030004 1a80030180040008 0002100002100008 0171f403f8100018 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000055 RBX=ffff888029c12f30 RCX=0000000000000000 RDX=0000000000000055 RSI=0000000000000001 RDI=ffff888029c13020 RBP=0000000000000000 RSP=ffffc900006485d0 R8 =0000000000080000 R9 =0000000000000001 R10=00000000000000f0 R11=0000000000000001 R12=ffff888029c13020 R13=ffff888029c12440 R14=0000000000000000 R15=ffff88806a825b18 RIP=ffffffff8196a713 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f01788146c0 ffffffff 00c00000 GS =0000 ffff8880d7081000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0178813f98 CR3=0000000024f3c000 CR4=00352ef0 DR0=ffffffffffffffff DR1=0000000000000000 DR2=0000000004000007 DR3=fffffdfffffffffe DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6deed230 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6deed3b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6deed3b6 00007ffc6deed3bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0177a12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0177a12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0177a12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0177a12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0177a1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0177a1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffffffff20be174 RBX=ffffea0000fc7280 RCX=ffffffff820d5bd2 RDX=dffffc0000000000 RSI=00000000000137dd RDI=000000000003f1ca RBP=ffffea0000fc7280 RSP=ffffc90025d7e9f0 R8 =0000000000000005 R9 =00000000000000f4 R10=00000000000000ff R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=000000000003f1ca R15=00000000000137dd RIP=ffffffff81bad790 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7181000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000026000 CR3=0000000012669000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4e751d06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4e751d06 00007fff4e751d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda30812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda30812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda30812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda30812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda3081305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda3081313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda309b74a8 00007fda309b74a0 00007fda309b7498 00007fda309b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda3151d100 00007fda309b7460 00007fda309b7478 00007fda309b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda309b74b8 00007fda309b74b0 00007fda309b74a8 00007fda309b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000