last executing test programs: 2.122372953s ago: executing program 3 (id=612): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 2.121400207s ago: executing program 3 (id=614): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001900)="a1de", 0x2}], 0x1}}], 0x1, 0x40000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x7fff, 0x7, 0x2, 0x8000, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x2, 0x0, 0x0, @value=r1}, 0x50) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x8, r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11}, &(0x7f0000000080), &(0x7f0000000380)=r9}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x2, 0x5, 0x5}, 0x50) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000680), 0x400001, 0x0) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r14, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r14, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) r15 = syz_open_dev$audion(&(0x7f00000006c0), 0x80000001, 0x10000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x65be4b00, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)=r13}, 0x20) r18 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r18}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x21b1, 0x1, 0x7, 0x70004, 0x1, 0x6, '\x00', 0x0, r3, 0x3, 0x3, 0x4, 0xf}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x16, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffff9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffff01}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1c50a, r8, 0x2, &(0x7f0000000800)=[r11, r12, r13, 0xffffffffffffffff, r14, r15, r16, r17, r18, r19], &(0x7f0000000840)=[{0x0, 0x4, 0x5, 0x8}, {0x4, 0x5, 0xe, 0x1}], 0x10, 0xffffffae}, 0x94) 2.062086481s ago: executing program 3 (id=615): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80801) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sysfs$1(0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8880) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000979000/0x3000)=nil, 0x2000}) 1.960952298s ago: executing program 3 (id=618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100000000deff000000000000000105000300050000000900020073797a31"], 0x64}}, 0x4800) 1.900040478s ago: executing program 3 (id=620): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0x1, &(0x7f0000000400)="f2ebf0bb3aa2e901a8de1299ba63952445f46464c0e7d822e976bb3addc92a962a850d476edd4545cc0b2e8a1e8d8317315aa6891e1d692f19c2a4cd943a0a729004edaa821c250a3b75bd357c46696ac138ef8907c19b71c052cee524e8137bfc5b01d2a00beea4033add378b4faa4f4881df28e12b8cbf5db1bb79ab69acd92840fc2f8f12c8c4c7d9ff03ed8c41ffea30527a5b8aac5c494e3923db46f42cb6e87e3e2c90d130cd8ee03449ed93684203b8", &(0x7f00000000c0)=""/54}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e4ab00000000000079100800000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0x1, &(0x7f0000000400)="f2ebf0bb3aa2e901a8de1299ba63952445f46464c0e7d822e976bb3addc92a962a850d476edd4545cc0b2e8a1e8d8317315aa6891e1d692f19c2a4cd943a0a729004edaa821c250a3b75bd357c46696ac138ef8907c19b71c052cee524e8137bfc5b01d2a00beea4033add378b4faa4f4881df28e12b8cbf5db1bb79ab69acd92840fc2f8f12c8c4c7d9ff03ed8c41ffea30527a5b8aac5c494e3923db46f42cb6e87e3e2c90d130cd8ee03449ed93684203b8", &(0x7f00000000c0)=""/54}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e4ab00000000000079100800000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) 1.621982235s ago: executing program 3 (id=621): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@null, 0xf, 'team_slave_1\x00'}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xea5}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES8=r3, @ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r9, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40012004, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000390428bd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="0198000003130000050027000f000000ce92c7f391502cddbc05bbf81842dda0b9a574ca144e7a255ed848adb6763cce6062de0e4c69237e77c829fd50e12365c169179ce5df0a48a64d21439845c0f65fd48904b26c5c82d78328ae968d5c0e84ab7b07550d812e6ac87046aba9ecc4f736b361bafb81589a84d9ce2d0db6216c098e304cc3387f010316"], 0x28}}, 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00') socket$nl_xfrm(0x10, 0x3, 0x6) 1.302593482s ago: executing program 1 (id=628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100000000f5ff000000000000000105000300050000000900020073797a31"], 0x64}}, 0x4800) 1.232150614s ago: executing program 1 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r2}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) splice(r6, 0x0, r3, 0x0, 0x8000, 0x0) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0xfffffe3e) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0x2}}, './file0\x00'}) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'pim6reg\x00'}}, 0x1e) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{0x1, 0x0, 0x3, 0x1}, {0x78e, 0x3, 0x4, 0x6}, {0xf2d0, 0x6, 0x9, 0x8000}, {0x7fff, 0x56, 0x8, 0x1}, {0x0, 0x5, 0x1, 0x77a}, {0xf3f9, 0xe5}, {0x3ff, 0x2, 0x7, 0x4}]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000007100001040000908be712dd9279000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b0001006d6163736563000030000280050006001600000005000900050000000c000400004000000000000005000600b20000000500030000000000"], 0x60}}, 0x0) 391.289429ms ago: executing program 2 (id=637): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7f, 0x7, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x5, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='sched_kthread_stop_ret\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r11, @ANYBLOB="080006000a000200aaaaaaaaaa0c0000060005"], 0x30}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000200)="a0db0032b39d6fda27cbae1bd71ea8c1e8", 0x11, r12) 390.738454ms ago: executing program 1 (id=639): r0 = socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x2}, {0x1, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setreuid(0xee00, 0x0) r5 = getuid() setreuid(0xee00, r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 331.781096ms ago: executing program 2 (id=641): r0 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0x7e, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0) fallocate(r0, 0x3, 0x3, 0xffffffff) 331.444781ms ago: executing program 2 (id=642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x28, 0x1, 0x2, "4f80ff6f426ebb117c0caba25f00000000000000000000000000f3ff00", 0x31303553}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x2e}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 271.191255ms ago: executing program 2 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd48cea75db9fbd68, 0x91) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="041c0558c9007800ab4e78062c0e89a52fa90f3df460b80176403541e21347e998285cae15d082c57620859369b585b49f4a24ad9f88b69452c80fdef3a1515b192010698ac14296b27882189d8f6a5a648d2e59941fe7f984201bdc0b42cfd9b1fef8daf15a6dcd736cff84dae8796aee44fd5e6c9077817d2f9f801e528e3ecd718a3205c968b6d90e0c0ef0983a7b14a9000c7e3bb1b5608a2c9a05a9407801aae115e65126c703377a038cdd22010217f9c3ee6704264dee844530c34b0673b2bf21172076446541d43bba59c3469f915aedd8ea7723aebd6c"], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x1802) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 270.759155ms ago: executing program 1 (id=644): creat(&(0x7f0000000140)='./file0\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x3e3, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c000280080014000080"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x22700, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0xb2, ""/178}) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0xa0, 0x45, 0x40, 0x8}, {0x2, 0x62, 0xf7, 0x80}, {0x5, 0xcf, 0x3, 0xd}]}) 269.989093ms ago: executing program 2 (id=645): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40055}, 0x24048041) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, 0x0, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) 202.386895ms ago: executing program 0 (id=646): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 202.144927ms ago: executing program 2 (id=647): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/25, &(0x7f0000000180)=0x19) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r4, 0xadab2836b5a4ab95, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x40046103, 0x0) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r6, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0xffff}], 0x1, 0x10041, 0x0) 150.332191ms ago: executing program 1 (id=648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0x9, 0x6, 0xfff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x1000000000000084, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x1c37, 0xd58, 0x0, 0xfffffffffffffffb], 0xdddd1000, 0x84a92}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000001c0)={r5}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000100)='clear_refs\x00') ioctl$FIBMAP(r6, 0x1, &(0x7f0000000600)=0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000040)={0x4, r8, 0x1}) r9 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0x1}, 0x48) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000000400)={0x2020}, 0x2020) r11 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r9, 0x0, 0x7fff, 'syz1\x00', 0x0}) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f0000000200)={"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"}) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = dup(r13) getsockopt$inet_sctp_SCTP_STATUS(r14, 0x84, 0xe, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 149.681204ms ago: executing program 0 (id=649): r0 = socket(0x11, 0x800000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) 71.004034ms ago: executing program 0 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100000000ffffeff900000000000105000300050000000900020073797a31"], 0x64}}, 0x4800) 68.219421ms ago: executing program 0 (id=651): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xe1, 0x0, 0x1, [@generic="9e1b73d1fa90f57f0c5dfbe64c0cbb59b43d4d13905a9670479f21c67da9eb32a7ac03bf90d9c3f733a58daf7f832f6db521e0f6ba90beb3973c2e335ecb2b37b1f82b2e06"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000140)) (async, rerun: 64) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0x0, 0x14}, 0x18) (rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r0, 0xfffffffffffffffd, 0x9, 0x2}) 3.838442ms ago: executing program 0 (id=652): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80042, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80042, 0x94) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000240)={0x8, 0x0, 0x1, 0xd1f, 0xfffffff4, 0x0, "165086aeb79a37169d92004b895f18ea", 0x4, 0x5, 0x9, 0x2, 0x8, 0x4d, 0x3}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x0, 0x6, 0x5, &(0x7f0000000140)={0x2, "c39c75c9b12c2238191850bde79523173296c82e3e7dfdcf10beb58a051d8559b2"}}) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@deltclass={0x80, 0x29, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0xfffd}, {0x2, 0xfff8}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x1}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x27, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6c, 0x9}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6}}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x7, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, 0x0, &(0x7f0000000040)) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x10, 0x0, &(0x7f0000000040)) 3.553792ms ago: executing program 0 (id=653): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000000000001a11b47f2b606f361b234def865de415290139fc6db5624f1df18031777216a8835f966a8359cdcb805860076a5fa635932e"], 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xa, 0xffff}}}, 0x24}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000dc0)={{@my=0x0}, {@any, 0x800000}, 0x400, "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"}, 0x418, 0x10000011}) 0s ago: executing program 1 (id=654): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r2}}}, 0x78) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) syslog(0x2, &(0x7f0000000000)=""/7, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=655): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x180400) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000180)={0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:54228' (ED25519) to the list of known hosts. [ 44.910707][ T40] audit: type=1400 audit(1756719002.905:62): avc: denied { name_bind } for pid=5883 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.925965][ T40] audit: type=1400 audit(1756719002.925:63): avc: denied { write } for pid=5884 comm="sh" path="pipe:[5797]" dev="pipefs" ino=5797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.938209][ T40] audit: type=1400 audit(1756719002.935:64): avc: denied { execute } for pid=5884 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.946125][ T40] audit: type=1400 audit(1756719002.935:65): avc: denied { execute_no_trans } for pid=5884 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.238896][ T40] audit: type=1400 audit(1756719005.235:66): avc: denied { mounton } for pid=5884 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.242248][ T5884] cgroup: Unknown subsys name 'net' [ 47.388210][ T5884] cgroup: Unknown subsys name 'cpuset' [ 47.392771][ T5884] cgroup: Unknown subsys name 'rlimit' [ 47.625206][ T5934] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.293896][ T5884] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.961686][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.961701][ T40] audit: type=1400 audit(1756719009.955:80): avc: denied { execmem } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.201194][ T40] audit: type=1400 audit(1756719010.195:81): avc: denied { create } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.211310][ T40] audit: type=1400 audit(1756719010.205:82): avc: denied { read write } for pid=5968 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.220234][ T40] audit: type=1400 audit(1756719010.205:83): avc: denied { open } for pid=5968 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.231717][ T40] audit: type=1400 audit(1756719010.215:84): avc: denied { ioctl } for pid=5968 comm="syz-executor" path="socket:[5815]" dev="sockfs" ino=5815 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.258875][ T5974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.262587][ T5974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.271989][ T5978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.275253][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.277371][ T5979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.277544][ T5979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.280004][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.283066][ T5979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.285432][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.288979][ T5979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.291010][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.293590][ T5979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.298147][ T5983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.299932][ T5979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.300728][ T40] audit: type=1400 audit(1756719010.285:85): avc: denied { read } for pid=5968 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.305281][ T5979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.307817][ T5983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.311149][ T40] audit: type=1400 audit(1756719010.295:86): avc: denied { open } for pid=5968 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.311430][ T5983] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.314080][ T5979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.314784][ T40] audit: type=1400 audit(1756719010.295:87): avc: denied { mounton } for pid=5968 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.324967][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.326700][ T5983] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.566905][ T40] audit: type=1400 audit(1756719010.565:88): avc: denied { module_request } for pid=5969 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.605060][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 52.642408][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 52.894029][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.897791][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.901021][ T5969] bridge_slave_0: entered allmulticast mode [ 52.905042][ T5969] bridge_slave_0: entered promiscuous mode [ 52.909803][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 52.916851][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.919115][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.921346][ T5968] bridge_slave_0: entered allmulticast mode [ 52.924038][ T5968] bridge_slave_0: entered promiscuous mode [ 52.942136][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.945318][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.947979][ T5969] bridge_slave_1: entered allmulticast mode [ 52.950530][ T5969] bridge_slave_1: entered promiscuous mode [ 52.969991][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.972739][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.976446][ T5968] bridge_slave_1: entered allmulticast mode [ 52.980317][ T5968] bridge_slave_1: entered promiscuous mode [ 53.056945][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.068767][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.072956][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.103419][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.148430][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 53.174339][ T5968] team0: Port device team_slave_0 added [ 53.178021][ T5969] team0: Port device team_slave_0 added [ 53.206778][ T5968] team0: Port device team_slave_1 added [ 53.210987][ T5969] team0: Port device team_slave_1 added [ 53.253401][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.256432][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.258716][ T5980] bridge_slave_0: entered allmulticast mode [ 53.261271][ T5980] bridge_slave_0: entered promiscuous mode [ 53.341543][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.343930][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.346503][ T5980] bridge_slave_1: entered allmulticast mode [ 53.349109][ T5980] bridge_slave_1: entered promiscuous mode [ 53.394975][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.397173][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.405449][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.431996][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.435688][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.438654][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.449405][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.454501][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.457384][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.465350][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.494193][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.497471][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.499573][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.508333][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.570804][ T5980] team0: Port device team_slave_0 added [ 53.574366][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.576703][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.578955][ T5975] bridge_slave_0: entered allmulticast mode [ 53.581517][ T5975] bridge_slave_0: entered promiscuous mode [ 53.613580][ T5980] team0: Port device team_slave_1 added [ 53.654261][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.656551][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.658743][ T5975] bridge_slave_1: entered allmulticast mode [ 53.661328][ T5975] bridge_slave_1: entered promiscuous mode [ 53.666174][ T5969] hsr_slave_0: entered promiscuous mode [ 53.668417][ T5969] hsr_slave_1: entered promiscuous mode [ 53.724542][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.727680][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.739991][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.797552][ T5968] hsr_slave_0: entered promiscuous mode [ 53.800654][ T5968] hsr_slave_1: entered promiscuous mode [ 53.803525][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 53.806465][ T5968] Cannot create hsr debugfs directory [ 53.809204][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.811518][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.822441][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.835841][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.841559][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.908345][ T5975] team0: Port device team_slave_0 added [ 53.996534][ T5975] team0: Port device team_slave_1 added [ 54.027314][ T5980] hsr_slave_0: entered promiscuous mode [ 54.030025][ T5980] hsr_slave_1: entered promiscuous mode [ 54.032487][ T5980] debugfs: 'hsr0' already exists in 'hsr' [ 54.034548][ T5980] Cannot create hsr debugfs directory [ 54.092763][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.095105][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.104957][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.110458][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.113372][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.123909][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.305496][ T5975] hsr_slave_0: entered promiscuous mode [ 54.308314][ T5975] hsr_slave_1: entered promiscuous mode [ 54.310410][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 54.312227][ T5975] Cannot create hsr debugfs directory [ 54.365587][ T5977] Bluetooth: hci3: command tx timeout [ 54.365874][ T5983] Bluetooth: hci2: command tx timeout [ 54.375072][ T5983] Bluetooth: hci0: command tx timeout [ 54.375090][ T5977] Bluetooth: hci1: command tx timeout [ 54.496334][ T5969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.510102][ T5969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.531930][ T5969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.541020][ T5969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.583222][ T5968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.588664][ T5968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.598429][ T5968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.604348][ T5968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.681875][ T5975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.690063][ T5975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.697453][ T5975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.704232][ T5975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.783602][ T5980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.792038][ T5980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.804640][ T5980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.811719][ T5980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.827017][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.849421][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.882758][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.893883][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.912061][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.915378][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.927843][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.930943][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.936261][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.939341][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.953500][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.959197][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.962225][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.004375][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.029408][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.031949][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.038283][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.057308][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.059647][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.072078][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.097915][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.100139][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.113966][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.116299][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.121455][ T40] audit: type=1400 audit(1756719013.125:89): avc: denied { sys_module } for pid=5968 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.257553][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.261899][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.303787][ T5969] veth0_vlan: entered promiscuous mode [ 55.323343][ T5968] veth0_vlan: entered promiscuous mode [ 55.332963][ T5969] veth1_vlan: entered promiscuous mode [ 55.339468][ T5968] veth1_vlan: entered promiscuous mode [ 55.349381][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.355828][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.378838][ T5969] veth0_macvtap: entered promiscuous mode [ 55.384730][ T5968] veth0_macvtap: entered promiscuous mode [ 55.391174][ T5968] veth1_macvtap: entered promiscuous mode [ 55.405735][ T5969] veth1_macvtap: entered promiscuous mode [ 55.419757][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.435503][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.438605][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.448516][ T5975] veth0_vlan: entered promiscuous mode [ 55.451199][ T5980] veth0_vlan: entered promiscuous mode [ 55.457555][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.465575][ T95] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.475074][ T95] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.478631][ T95] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.485631][ T5980] veth1_vlan: entered promiscuous mode [ 55.489117][ T5975] veth1_vlan: entered promiscuous mode [ 55.492686][ T95] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.497413][ T95] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.508131][ T95] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.511871][ T95] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.516244][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.597125][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.600273][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.615202][ T5975] veth0_macvtap: entered promiscuous mode [ 55.622474][ T5980] veth0_macvtap: entered promiscuous mode [ 55.636369][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.637008][ T5980] veth1_macvtap: entered promiscuous mode [ 55.639536][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.654234][ T5975] veth1_macvtap: entered promiscuous mode [ 55.664792][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.668135][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.683806][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.692172][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.694679][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.698090][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.712251][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.718985][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.723227][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.726390][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.730183][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.738998][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.751049][ T5968] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.767259][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.771356][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.782725][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.787749][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.827897][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.829669][ T6061] SELinux: truncated policydb string identifier [ 55.831305][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.834007][ T6061] SELinux: failed to load policy [ 55.855346][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.857771][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.892568][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.896183][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.917545][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.921384][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.931243][ T6065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6065 comm=syz.2.3 [ 56.175120][ T29] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 56.305787][ T29] usb 7-1: device descriptor read/64, error -71 [ 56.443118][ T6109] Zero length message leads to an empty skb [ 56.445010][ T5977] Bluetooth: hci0: command tx timeout [ 56.445054][ T5974] Bluetooth: hci1: command tx timeout [ 56.445078][ T5974] Bluetooth: hci3: command tx timeout [ 56.445150][ T5983] Bluetooth: hci2: command tx timeout [ 56.452329][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 56.505308][ T6109] team0: Port device team_slave_0 removed [ 56.545061][ T29] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 56.674992][ T29] usb 7-1: device descriptor read/64, error -71 [ 56.785433][ T29] usb usb7-port1: attempt power cycle [ 56.800058][ T6115] netlink: 'syz.3.17': attribute type 8 has an invalid length. [ 56.959290][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 56.991988][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 56.992008][ T40] audit: type=1400 audit(1756719014.985:158): avc: denied { read write } for pid=6123 comm="syz.3.20" name="video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.994329][ T6124] capability: warning: `syz.3.20' uses deprecated v2 capabilities in a way that may be insecure [ 56.994632][ T40] audit: type=1400 audit(1756719014.985:159): avc: denied { open } for pid=6123 comm="syz.3.20" path="/dev/video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.005143][ T5977] Bluetooth: hci1: connection err: -111 [ 57.007614][ T40] audit: type=1400 audit(1756719015.005:160): avc: denied { create } for pid=6123 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.025438][ T40] audit: type=1400 audit(1756719015.005:161): avc: denied { setopt } for pid=6123 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.031632][ T40] audit: type=1400 audit(1756719015.015:162): avc: denied { mount } for pid=6123 comm="syz.3.20" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.038311][ T40] audit: type=1400 audit(1756719015.015:163): avc: denied { mounton } for pid=6123 comm="syz.3.20" path="/5/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 57.066781][ T40] audit: type=1400 audit(1756719015.065:164): avc: denied { map } for pid=6123 comm="syz.3.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.077183][ T40] audit: type=1400 audit(1756719015.065:165): avc: denied { read write } for pid=6123 comm="syz.3.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.085422][ T40] audit: type=1400 audit(1756719015.085:166): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.126033][ T29] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 57.138024][ T40] audit: type=1400 audit(1756719015.135:167): avc: denied { read write } for pid=6125 comm="syz.3.21" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.146222][ T29] usb 7-1: device descriptor read/8, error -71 [ 57.177311][ T6128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.385658][ T29] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 57.408016][ T29] usb 7-1: device descriptor read/8, error -71 [ 57.518365][ T29] usb usb7-port1: unable to enumerate USB device [ 57.658561][ T6154] loop6: detected capacity change from 0 to 7 [ 57.673177][ T6154] Dev loop6: unable to read RDB block 7 [ 57.675331][ T6154] loop6: unable to read partition table [ 57.677399][ T6154] loop6: partition table beyond EOD, truncated [ 57.679450][ T6154] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 57.814215][ T6160] netlink: 'syz.3.31': attribute type 29 has an invalid length. [ 57.818306][ T6160] netlink: 'syz.3.31': attribute type 29 has an invalid length. [ 57.856999][ T6160] bond0: entered promiscuous mode [ 57.859210][ T6160] bond_slave_0: entered promiscuous mode [ 57.861755][ T6160] bond_slave_1: entered promiscuous mode [ 57.864289][ T6160] bond0: entered allmulticast mode [ 57.866926][ T6160] bond_slave_0: entered allmulticast mode [ 57.869335][ T6160] bond_slave_1: entered allmulticast mode [ 57.983111][ T6160] netlink: 524 bytes leftover after parsing attributes in process `syz.3.31'. [ 58.037275][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 58.040785][ T6170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.35'. [ 58.044030][ T6170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.277714][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 58.286215][ T6186] ipvlan2: entered promiscuous mode [ 58.360875][ T6193] ip6erspan0: entered promiscuous mode [ 58.392880][ T6196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.396112][ T6196] IPv6: NLM_F_CREATE should be set when creating new route [ 58.400902][ T6196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.525164][ T5977] Bluetooth: hci2: command tx timeout [ 58.525958][ T5979] Bluetooth: hci1: command tx timeout [ 58.526987][ T5983] Bluetooth: hci3: command tx timeout [ 58.712900][ T6205] Bluetooth: MGMT ver 1.23 [ 58.761657][ T6210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.782117][ T6210] qnx4: no qnx4 filesystem (no root dir). [ 58.910634][ T6227] netlink: 48 bytes leftover after parsing attributes in process `syz.0.54'. [ 59.043811][ T6244] netlink: 596 bytes leftover after parsing attributes in process `syz.2.61'. [ 59.149995][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 59.175617][ T6056] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.247921][ T6262] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.259278][ T6265] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 59.289088][ T6270] capability: warning: `syz.2.71' uses 32-bit capabilities (legacy support in use) [ 59.328886][ T6056] usb 5-1: Using ep0 maxpacket: 8 [ 59.333415][ T6056] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.337640][ T6056] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.341252][ T6056] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.347987][ T6056] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.351222][ T6056] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 59.354564][ T6056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.366751][ T6056] hub 5-1:1.0: bad descriptor, ignoring hub [ 59.368730][ T6056] hub 5-1:1.0: probe with driver hub failed with error -5 [ 59.371455][ T6056] cdc_wdm 5-1:1.0: skipping garbage [ 59.375063][ T6056] cdc_wdm 5-1:1.0: skipping garbage [ 59.384016][ T6056] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 59.386882][ T6056] cdc_wdm 5-1:1.0: Unknown control protocol [ 59.398591][ T6278] sctp: [Deprecated]: syz.2.73 (pid 6278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.398591][ T6278] Use struct sctp_sack_info instead [ 59.473951][ T6281] syz.2.74 uses obsolete (PF_INET,SOCK_PACKET) [ 59.564714][ T6288] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 59.572523][ T6288] team0: Cannot enslave team device to itself [ 59.623778][ T6299] Bluetooth: MGMT ver 1.23 [ 59.646519][ T6227] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 59.661592][ T6304] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 59.676191][ T6304] CIFS mount error: No usable UNC path provided in device string! [ 59.676191][ T6304] [ 59.680357][ T6304] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 59.684721][ T6304] netlink: 'syz.2.81': attribute type 1 has an invalid length. [ 59.816918][ T6315] overlayfs: failed to resolve './file0': -2 [ 59.970977][ T6333] netlink: 'syz.3.89': attribute type 2 has an invalid length. [ 59.975646][ T6333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.118675][ T6346] loop6: detected capacity change from 0 to 7 [ 60.119002][ T6339] Bluetooth: hci4: Frame reassembly failed (-84) [ 60.124019][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 60.128407][ T6346] Dev loop6: unable to read RDB block 7 [ 60.130703][ T6346] loop6: unable to read partition table [ 60.133048][ T6346] loop6: partition table beyond EOD, truncated [ 60.135613][ T6346] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 60.231692][ T6350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.247949][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.95'. [ 60.265486][ T54] usb 5-1: USB disconnect, device number 2 [ 60.492019][ T6385] netlink: 'syz.1.107': attribute type 2 has an invalid length. [ 60.607196][ T5979] Bluetooth: hci1: command tx timeout [ 60.615136][ T5979] Bluetooth: hci3: command tx timeout [ 60.615215][ T5977] Bluetooth: hci2: command tx timeout [ 60.841932][ T6419] tipc: Failed to remove unknown binding: 66,1,1/0:2643528370/2643528372 [ 60.847216][ T6419] tipc: Failed to remove unknown binding: 66,1,1/0:2643528370/2643528372 [ 60.849962][ T6419] tipc: Failed to remove unknown binding: 66,1,1/0:2643528370/2643528372 [ 61.745609][ T6439] __nla_validate_parse: 2 callbacks suppressed [ 61.745624][ T6439] netlink: 104 bytes leftover after parsing attributes in process `syz.1.125'. [ 61.930065][ T6445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.128'. [ 61.934214][ T6445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.128'. [ 62.108254][ T6459] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.133'. [ 62.125746][ T5983] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 62.125978][ T5977] Bluetooth: hci4: command 0xfc11 tx timeout [ 62.149674][ T6462] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 62.170135][ T40] kauditd_printk_skb: 181 callbacks suppressed [ 62.170145][ T40] audit: type=1400 audit(1756719020.165:349): avc: denied { create } for pid=6464 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.179472][ T40] audit: type=1400 audit(1756719020.165:350): avc: denied { setopt } for pid=6464 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.211113][ T6469] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 62.215531][ T1332] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 62.344907][ T1332] usb 6-1: device descriptor read/64, error -71 [ 62.361360][ T40] audit: type=1400 audit(1756719020.355:351): avc: denied { read } for pid=6471 comm="syz.3.138" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.363980][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.138'. [ 62.370410][ T40] audit: type=1400 audit(1756719020.355:352): avc: denied { open } for pid=6471 comm="syz.3.138" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.383301][ T40] audit: type=1400 audit(1756719020.355:353): avc: denied { ioctl } for pid=6471 comm="syz.3.138" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.393251][ T40] audit: type=1400 audit(1756719020.355:354): avc: denied { write } for pid=6471 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.450677][ T40] audit: type=1400 audit(1756719020.445:355): avc: denied { write } for pid=6474 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.491555][ T40] audit: type=1400 audit(1756719020.485:356): avc: denied { append } for pid=6477 comm="syz.0.140" name="v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.529191][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 62.533493][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 62.539754][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 62.543411][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 62.547770][ T40] audit: type=1400 audit(1756719020.545:357): avc: denied { write } for pid=6480 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.555881][ T40] audit: type=1400 audit(1756719020.545:358): avc: denied { getopt } for pid=6480 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.595021][ T1332] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 62.725003][ T1332] usb 6-1: device descriptor read/64, error -71 [ 62.799354][ T6487] gtp0: entered promiscuous mode [ 62.835152][ T1332] usb usb6-port1: attempt power cycle [ 63.176323][ T6514] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 63.185052][ T1332] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 63.205604][ T1332] usb 6-1: device descriptor read/8, error -71 [ 63.291341][ T6518] process 'syz.0.152' launched './file0' with NULL argv: empty string added [ 63.296840][ T6518] ubi31: attaching mtd0 [ 63.299672][ T6518] ubi31: scanning is finished [ 63.301156][ T6518] ubi31: empty MTD device detected [ 63.356521][ T6521] gfs2: Unknown parameter 'bar;±er' [ 63.371836][ T6521] gfs2: Unknown parameter 'bar;±er' [ 63.398114][ T6518] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 63.400588][ T6518] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 63.402993][ T6518] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 63.405560][ T6518] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 63.407970][ T6518] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 63.410229][ T6518] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 63.412746][ T6518] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1065988852 [ 63.416350][ T6518] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 63.424993][ T6526] ubi31: background thread "ubi_bgt31d" started, PID 6526 [ 63.431752][ T6529] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 63.445169][ T1332] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 63.465692][ T1332] usb 6-1: device descriptor read/8, error -71 [ 63.585154][ T1332] usb usb6-port1: unable to enumerate USB device [ 63.642752][ T6544] block nbd3: Attempted send on invalid socket [ 63.645960][ T6544] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.649214][ T6544] exFAT-fs (nbd3): unable to read boot sector [ 63.652002][ T6544] exFAT-fs (nbd3): failed to read boot sector [ 63.654550][ T6544] exFAT-fs (nbd3): failed to recognize exfat type [ 64.668136][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.170'. [ 65.026145][ T6599] tls_set_device_offload: netdev not found [ 65.135123][ T54] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.222373][ T6620] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 65.225577][ T6621] No source specified [ 65.303871][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.308528][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.312274][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.317800][ T54] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.321980][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.327156][ T54] usb 8-1: config 0 descriptor?? [ 65.393436][ T6641] netlink: zone id is out of range [ 65.397944][ T6641] netlink: zone id is out of range [ 65.423699][ T6641] netlink: set zone limit has 4 unknown bytes [ 65.472657][ T61] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.481464][ T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.493438][ T6646] vlan2: entered allmulticast mode [ 65.495896][ T6646] bond0: entered allmulticast mode [ 65.497562][ T6646] bond_slave_0: entered allmulticast mode [ 65.499353][ T6646] bond_slave_1: entered allmulticast mode [ 65.502297][ T61] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.505684][ T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.737575][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.740104][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.742351][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.745693][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.748892][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.751976][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.755530][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.759664][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.763723][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.768259][ T54] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.778529][ T54] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 65.897448][ T6685] gtp0: entered promiscuous mode [ 65.996975][ T6588] netlink: 'syz.3.177': attribute type 8 has an invalid length. [ 66.003390][ T9] usb 8-1: USB disconnect, device number 2 [ 66.568464][ T6700] tipc: Started in network mode [ 66.570979][ T6700] tipc: Node identity 56b432325315, cluster identity 4711 [ 66.574280][ T6700] tipc: Enabled bearer , priority 0 [ 66.579911][ T6702] syzkaller0: MTU too low for tipc bearer [ 66.582400][ T6702] tipc: Disabling bearer [ 66.829735][ T6722] tipc: Started in network mode [ 66.831337][ T6722] tipc: Node identity 2, cluster identity 4711 [ 66.833770][ T6722] tipc: Node number set to 2 [ 66.841991][ T6722] ucma_write: process 219 (syz.0.222) changed security contexts after opening file descriptor, this is not allowed. [ 66.853468][ T6722] input: syz1 as /devices/virtual/input/input6 [ 67.236860][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 67.236871][ T40] audit: type=1400 audit(1756719025.235:419): avc: denied { name_bind } for pid=6766 comm="syz.0.236" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 67.259595][ T6770] 9pnet_virtio: no channels available for device syz [ 67.259961][ T40] audit: type=1400 audit(1756719025.255:420): avc: denied { mounton } for pid=6766 comm="syz.0.236" path="/88/file0" dev="9p" ino=35913812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.429712][ T40] audit: type=1400 audit(1756719025.425:421): avc: denied { create } for pid=6779 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 67.528327][ T6791] fuse: Bad value for 'fd' [ 67.533160][ T6791] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.539122][ T6791] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 67.542937][ T6791] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.546167][ T6791] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 67.557299][ T40] audit: type=1400 audit(1756719025.555:422): avc: denied { ioctl } for pid=6790 comm="syz.0.243" path="socket:[12267]" dev="sockfs" ino=12267 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.688236][ T40] audit: type=1400 audit(1756719025.685:423): avc: denied { read write } for pid=6808 comm="syz.0.249" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.699572][ T40] audit: type=1400 audit(1756719025.685:424): avc: denied { open } for pid=6808 comm="syz.0.249" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.707286][ T40] audit: type=1400 audit(1756719025.705:425): avc: denied { wake_alarm } for pid=6808 comm="syz.0.249" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.783702][ T40] audit: type=1400 audit(1756719025.775:426): avc: denied { read } for pid=6824 comm="syz.3.255" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.795416][ T40] audit: type=1400 audit(1756719025.775:427): avc: denied { open } for pid=6824 comm="syz.3.255" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.802953][ T40] audit: type=1400 audit(1756719025.785:428): avc: denied { ioctl } for pid=6824 comm="syz.3.255" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.873970][ T6839] misc userio: No port type given on /dev/userio [ 67.877201][ T6839] misc userio: No port type given on /dev/userio [ 67.879803][ T6839] misc userio: No port type given on /dev/userio [ 67.881916][ T6839] misc userio: No port type given on /dev/userio [ 67.886983][ T6839] misc userio: Begin command sent, but we're already running [ 67.889325][ T6839] misc userio: Begin command sent, but we're already running [ 67.891883][ T6839] misc userio: Begin command sent, but we're already running [ 67.894354][ T6839] misc userio: Begin command sent, but we're already running [ 67.899804][ T6839] misc userio: Begin command sent, but we're already running [ 67.902165][ T6839] misc userio: Begin command sent, but we're already running [ 67.904484][ T6839] misc userio: Begin command sent, but we're already running [ 67.907428][ T6839] misc userio: Begin command sent, but we're already running [ 67.909711][ T6839] misc userio: Begin command sent, but we're already running [ 67.912065][ T6839] misc userio: Begin command sent, but we're already running [ 67.914494][ T6839] misc userio: Begin command sent, but we're already running [ 67.917415][ T6839] misc userio: Begin command sent, but we're already running [ 67.919728][ T6839] misc userio: Begin command sent, but we're already running [ 67.922027][ T6839] misc userio: Begin command sent, but we're already running [ 67.924367][ T6839] misc userio: Begin command sent, but we're already running [ 67.926736][ T6839] misc userio: Begin command sent, but we're already running [ 67.930517][ T6847] tipc: Enabled bearer , priority 0 [ 67.933238][ T6847] tipc: Enabling of bearer rejected, already enabled [ 67.940352][ T6851] syzkaller0: entered promiscuous mode [ 67.942078][ T6851] syzkaller0: entered allmulticast mode [ 67.948807][ T6847] tipc: Enabling of bearer rejected, already enabled [ 67.951791][ T6847] tipc: Enabling of bearer rejected, already enabled [ 67.954503][ T6847] tipc: Enabling of bearer rejected, already enabled [ 67.966680][ T6847] tipc: Enabling of bearer rejected, already enabled [ 67.969582][ T6847] tipc: Enabling of bearer rejected, already enabled [ 67.973319][ T6847] tipc: Enabling of bearer rejected, already enabled [ 67.997107][ T6847] tipc: Resetting bearer [ 68.005880][ T6847] tipc: Disabling bearer [ 68.068292][ T6860] 9pnet_fd: Insufficient options for proto=fd [ 68.072952][ T6860] dlm: no locking on control device [ 68.213834][ T6872] __nla_validate_parse: 6 callbacks suppressed [ 68.213845][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 68.286067][ T6883] netlink: 'syz.3.268': attribute type 3 has an invalid length. [ 68.288629][ T6882] sg_write: data in/out 808464396/8 bytes for SCSI command 0x30-- guessing data in; [ 68.288629][ T6882] program syz.0.269 not setting count and/or reply_len properly [ 68.289147][ T6883] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 68.299870][ T6883] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.268'. [ 68.392273][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'. [ 68.395274][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.272'. [ 68.400069][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'. [ 68.402863][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.272'. [ 68.479341][ T6899] futex_wake_op: syz.0.274 tries to shift op by 32; fix this program [ 68.520770][ T6901] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 68.594903][ T6008] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.754037][ T6843] Process accounting resumed [ 68.759256][ T6008] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 68.762724][ T6008] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 68.768589][ T6008] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.777125][ T6008] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 68.780516][ T6008] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 68.783476][ T6008] usb 6-1: Product: syz [ 68.786697][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 68.789648][ T6008] usb 6-1: Manufacturer: syz [ 68.791538][ T6008] usb 6-1: SerialNumber: syz [ 68.791938][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 68.798188][ T6008] usb 6-1: config 0 descriptor?? [ 68.803091][ T6008] hub 6-1:0.0: bad descriptor, ignoring hub [ 68.806078][ T6008] hub 6-1:0.0: probe with driver hub failed with error -5 [ 68.811282][ T6008] usb 6-1: selecting invalid altsetting 0 [ 69.113190][ T6929] 8021q: VLANs not supported on wg0 [ 69.116709][ T6008] usb 6-1: USB disconnect, device number 6 [ 69.199749][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 69.273213][ T6956] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 69.277386][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.281747][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.285761][ T6887] SELinux: Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped). [ 69.348070][ T6962] FAULT_INJECTION: forcing a failure. [ 69.348070][ T6962] name failslab, interval 1, probability 0, space 0, times 1 [ 69.352135][ T6962] CPU: 3 UID: 0 PID: 6962 Comm: syz.3.291 Not tainted syzkaller #0 PREEMPT(full) [ 69.352153][ T6962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.352160][ T6962] Call Trace: [ 69.352164][ T6962] [ 69.352168][ T6962] dump_stack_lvl+0x16c/0x1f0 [ 69.352197][ T6962] should_fail_ex+0x512/0x640 [ 69.352213][ T6962] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 69.352226][ T6962] should_failslab+0xc2/0x120 [ 69.352239][ T6962] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 69.352250][ T6962] ? __alloc_skb+0x2b2/0x380 [ 69.352267][ T6962] __alloc_skb+0x2b2/0x380 [ 69.352276][ T6962] ? __pfx___alloc_skb+0x10/0x10 [ 69.352288][ T6962] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 69.352304][ T6962] netlink_alloc_large_skb+0x69/0x130 [ 69.352317][ T6962] netlink_sendmsg+0x6a1/0xdd0 [ 69.352332][ T6962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.352350][ T6962] ____sys_sendmsg+0xa98/0xc70 [ 69.352365][ T6962] ? copy_msghdr_from_user+0x10a/0x160 [ 69.352376][ T6962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.352408][ T6962] ___sys_sendmsg+0x134/0x1d0 [ 69.352422][ T6962] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.352450][ T6962] __sys_sendmsg+0x16d/0x220 [ 69.352462][ T6962] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.352482][ T6962] do_syscall_64+0xcd/0x4c0 [ 69.352496][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.352508][ T6962] RIP: 0033:0x7fb2ead8ebe9 [ 69.352516][ T6962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.352527][ T6962] RSP: 002b:00007fb2ebb4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.352537][ T6962] RAX: ffffffffffffffda RBX: 00007fb2eafc5fa0 RCX: 00007fb2ead8ebe9 [ 69.352543][ T6962] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 69.352550][ T6962] RBP: 00007fb2ebb4c090 R08: 0000000000000000 R09: 0000000000000000 [ 69.352555][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.352561][ T6962] R13: 00007fb2eafc6038 R14: 00007fb2eafc5fa0 R15: 00007ffc70982ae8 [ 69.352575][ T6962] [ 69.357491][ T6964] bridge0: port 3(syz_tun) entered blocking state [ 69.386352][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 69.387804][ T6964] bridge0: port 3(syz_tun) entered disabled state [ 69.431649][ T6964] syz_tun: entered allmulticast mode [ 69.434577][ T6964] syz_tun: entered promiscuous mode [ 69.440972][ T6967] geneve3: entered promiscuous mode [ 69.442696][ T6967] geneve3: entered allmulticast mode [ 69.542357][ T6981] overlayfs: failed to resolve './file0': -2 [ 69.543025][ T6979] bridge_slave_0: left allmulticast mode [ 69.550450][ T6979] bridge_slave_0: left promiscuous mode [ 69.552985][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.561026][ T6979] bridge_slave_1: left allmulticast mode [ 69.563466][ T6979] bridge_slave_1: left promiscuous mode [ 69.570512][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.583441][ T6979] bond0: (slave bond_slave_0): Releasing backup interface [ 69.588331][ T6979] bond_slave_0: left promiscuous mode [ 69.590742][ T6979] bond_slave_0: left allmulticast mode [ 69.591953][ T6981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.601569][ T6979] bond0: (slave bond_slave_1): Releasing backup interface [ 69.607011][ T6979] bond_slave_1: left promiscuous mode [ 69.609459][ T6979] bond_slave_1: left allmulticast mode [ 69.620128][ T6979] team0: Port device team_slave_0 removed [ 69.627313][ T6979] team0: Port device team_slave_1 removed [ 69.630410][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.633560][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.641280][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.653248][ T6984] team0: Mode changed to "activebackup" [ 69.777099][ T7009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.795795][ T7011] overlayfs: missing 'lowerdir' [ 69.975443][ T6056] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.001490][ T7040] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.006539][ T7040] comedi comedi0: No channels found! [ 70.146003][ T6056] usb 8-1: Using ep0 maxpacket: 8 [ 70.151906][ T6056] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.157168][ T6056] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.160062][ T6056] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.163065][ T6056] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 70.174855][ T6056] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.178251][ T7071] @: renamed from vlan0 (while UP) [ 70.186107][ T6056] hub 8-1:1.0: bad descriptor, ignoring hub [ 70.189225][ T6056] hub 8-1:1.0: probe with driver hub failed with error -5 [ 70.191652][ T6056] cdc_wdm 8-1:1.0: skipping garbage [ 70.193296][ T6056] cdc_wdm 8-1:1.0: skipping garbage [ 70.200038][ T6056] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 70.221385][ T7078] netlink: 'syz.2.325': attribute type 11 has an invalid length. [ 70.352509][ T7087] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 70.355301][ T7087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 70.363217][ T7089] vlan1: entered promiscuous mode [ 70.366347][ T7089] vlan1: entered allmulticast mode [ 70.368543][ T7089] veth0_vlan: entered allmulticast mode [ 70.495405][ T6056] usb 8-1: USB disconnect, device number 3 [ 70.517099][ T7104] evm: overlay not supported [ 70.728228][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.732193][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.012645][ T7141] random: crng reseeded on system resumption [ 71.021097][ T7141] Restarting kernel threads ... [ 71.024057][ T7141] Done restarting kernel threads. [ 71.055449][ T7141] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 71.150721][ T7150] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.153133][ T7150] overlayfs: failed to set xattr on upper [ 71.155375][ T7149] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 71.156616][ T7150] overlayfs: ...falling back to redirect_dir=nofollow. [ 71.163642][ T7150] overlayfs: ...falling back to index=off. [ 71.167958][ T7150] overlayfs: ...falling back to uuid=null. [ 71.174177][ T7149] overlayfs: failed to resolve './file1/file0': -2 [ 71.174279][ T7150] overlayfs: failed to resolve './file1/file0': -2 [ 71.353880][ T7172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.393508][ T7172] block nbd0: Attempted send on invalid socket [ 71.396773][ T7172] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.402929][ T7172] FAT-fs (nbd0): unable to read boot sector [ 71.409726][ T7157] mmap: syz.2.350 (7157) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.621525][ T7188] ======================================================= [ 71.621525][ T7188] WARNING: The mand mount option has been deprecated and [ 71.621525][ T7188] and is ignored by this kernel. Remove the mand [ 71.621525][ T7188] option from the mount to silence this warning. [ 71.621525][ T7188] ======================================================= [ 71.636003][ T7188] devpts: Bad value for 'uid' [ 71.638022][ T7188] devpts: Bad value for 'uid' [ 72.065931][ T7213] SELinux: Context system_u:object_r:hald_dccm_exec_t:s0 is not valid (left unmapped). [ 72.164920][ T7218] block nbd0: Attempted send on invalid socket [ 72.167822][ T7218] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.171246][ T7218] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 72.203463][ T7223] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.318614][ T7232] warning: `syz.0.372' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.362509][ T7235] pimreg: entered allmulticast mode [ 72.577033][ T7256] tipc: Enabling not permitted [ 72.578899][ T7256] tipc: Enabling of bearer rejected, failed to enable media [ 72.689216][ T7262] overlayfs: failed to resolve './file1/file0': -2 [ 72.711662][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 72.711672][ T40] audit: type=1400 audit(1756719030.705:476): avc: denied { bind } for pid=7269 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.861712][ T40] audit: type=1400 audit(1756719030.855:477): avc: denied { execute } for pid=7284 comm="syz.1.387" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.926327][ T40] audit: type=1400 audit(1756719030.925:478): avc: denied { ioctl } for pid=7293 comm="syz.3.389" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.926455][ T7294] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 72.936194][ T7294] /dev/nullb0: Can't open blockdev [ 72.944600][ T40] audit: type=1400 audit(1756719030.935:479): avc: denied { read } for pid=7284 comm="syz.1.387" name="file0" dev="9p" ino=35913904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.952014][ T40] audit: type=1400 audit(1756719030.935:480): avc: denied { open } for pid=7284 comm="syz.1.387" path="/106/bus/file0" dev="9p" ino=35913904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.020168][ T40] audit: type=1400 audit(1756719031.015:481): avc: denied { setopt } for pid=7300 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.027480][ T40] audit: type=1400 audit(1756719031.015:482): avc: denied { ioctl } for pid=7300 comm="syz.3.391" path="socket:[16575]" dev="sockfs" ino=16575 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.063681][ T7303] tmpfs: Unknown parameter 'Â~¸§M£D a#2' [ 73.063737][ T40] audit: type=1400 audit(1756719031.055:483): avc: denied { remount } for pid=7302 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.161995][ T7309] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 73.233535][ T40] audit: type=1400 audit(1756719031.225:484): avc: denied { map } for pid=7326 comm="syz.1.401" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.254629][ T40] audit: type=1400 audit(1756719031.245:485): avc: denied { mounton } for pid=7326 comm="syz.1.401" path="/108/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 73.338808][ T7343] tipc: Enabled bearer , priority 10 [ 73.345668][ T7345] netlink: 'syz.0.403': attribute type 11 has an invalid length. [ 73.349687][ T7345] fuse: Bad value for 'user_id' [ 73.351521][ T7345] fuse: Bad value for 'user_id' [ 73.355516][ T7344] __nla_validate_parse: 9 callbacks suppressed [ 73.355526][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'. [ 73.496155][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 73.637968][ T7370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=7370 comm=syz.2.415 [ 73.762033][ T7381] fuse: Unknown parameter '' [ 74.221022][ T7396] comedi: No check for data length of config insn id 3 is implemented [ 74.223743][ T7396] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 74.227811][ T7396] comedi: Assuming n=15 is correct [ 74.230034][ T7395] comedi: No check for data length of config insn id 3 is implemented [ 74.232579][ T7395] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 74.235928][ T7395] comedi: Assuming n=15 is correct [ 74.336184][ T1332] tipc: Node number set to 94450226 [ 74.610796][ T5378] pmem0: [POWERTEC] [ 74.754881][ T6057] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.758555][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 74.768665][ T7435] 9pnet_fd: p9_fd_create_tcp (7435): problem connecting socket to 127.0.0.1 [ 74.916319][ T6057] usb 5-1: Using ep0 maxpacket: 32 [ 74.921712][ T6057] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 74.927980][ T6057] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 74.931745][ T6057] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 74.935249][ T6057] usb 5-1: Product: syz [ 74.937028][ T6057] usb 5-1: Manufacturer: syz [ 74.939038][ T6057] usb 5-1: SerialNumber: syz [ 74.943478][ T6057] usb 5-1: config 0 descriptor?? [ 74.947300][ T7411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.163236][ T6037] usb 5-1: USB disconnect, device number 3 [ 75.393495][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 75.432007][ T7441] Bluetooth: MGMT ver 1.23 [ 75.501685][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'. [ 75.921193][ T7506] bridge0: entered promiscuous mode [ 75.965940][ T7509] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 76.056626][ T7518] (syz.2.463,7518,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 76.106540][ T7523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.464'. [ 76.258043][ T7534] overlayfs: failed to clone upperpath [ 76.265609][ T7534] netlink: 'syz.2.468': attribute type 13 has an invalid length. [ 76.280855][ T7534] gretap0: refused to change device tx_queue_len [ 76.283750][ T7534] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 76.380672][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.671081][ T7544] overlayfs: failed to resolve './file0': -2 [ 76.993590][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 77.001840][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 77.001915][ T61] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.009205][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.013193][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.017326][ T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.243265][ T7602] syz.0.488 (7602): /proc/7601/oom_adj is deprecated, please use /proc/7601/oom_score_adj instead. [ 77.292356][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 77.297749][ T7613] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 77.312490][ T7614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.491'. [ 77.312756][ T7613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.389319][ T7619] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.480938][ T7630] 9pnet_fd: Insufficient options for proto=fd [ 77.484951][ T5977] Bluetooth: hci2: command 0x0401 tx timeout [ 77.489040][ T5983] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 77.750774][ C2] vkms_vblank_simulate: vblank timer overrun [ 78.023228][ C2] vkms_vblank_simulate: vblank timer overrun [ 78.303146][ T7652] team0: Port device vxlan0 added [ 78.306123][ T95] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.309110][ T95] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.313426][ T95] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.317336][ T95] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.346172][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 78.346183][ T40] audit: type=1400 audit(1756719036.345:521): avc: denied { write } for pid=7657 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.563338][ T7682] __nla_validate_parse: 2 callbacks suppressed [ 78.563348][ T7682] netlink: 57 bytes leftover after parsing attributes in process `syz.1.514'. [ 78.568076][ T2301] Process accounting resumed [ 78.572322][ T55] Process accounting resumed [ 78.574755][ T55] Process accounting resumed [ 78.577475][ T55] Process accounting resumed [ 78.579269][ T55] Process accounting resumed [ 78.580981][ T55] Process accounting resumed [ 78.582829][ T55] Process accounting resumed [ 78.584543][ T55] Process accounting resumed [ 78.587666][ T55] Process accounting resumed [ 78.589668][ T55] Process accounting resumed [ 78.591546][ T55] Process accounting resumed [ 78.593345][ T55] Process accounting resumed [ 78.595479][ T1332] Process accounting resumed [ 78.597262][ T1332] Process accounting resumed [ 78.599018][ T1332] Process accounting resumed [ 78.600754][ T1332] Process accounting resumed [ 78.603132][ T1332] Process accounting resumed [ 78.604930][ T1332] Process accounting resumed [ 78.606663][ T1332] Process accounting resumed [ 78.608440][ T1332] Process accounting resumed [ 78.610367][ T2301] Process accounting resumed [ 78.612830][ T1332] Process accounting resumed [ 78.614587][ T1332] Process accounting resumed [ 78.616441][ T1332] Process accounting resumed [ 78.618149][ T1332] Process accounting resumed [ 78.619957][ T1332] Process accounting resumed [ 78.621892][ T2301] Process accounting resumed [ 78.624354][ T2301] Process accounting resumed [ 78.627801][ T2301] Process accounting resumed [ 78.631513][ T2301] Process accounting resumed [ 78.633756][ T2301] Process accounting resumed [ 78.636664][ T2301] Process accounting resumed [ 78.638927][ T2301] Process accounting resumed [ 78.641964][ T2301] Process accounting resumed [ 78.644295][ T2301] Process accounting resumed [ 78.647632][ T2301] Process accounting resumed [ 78.650021][ T2301] Process accounting resumed [ 78.652736][ T2301] Process accounting resumed [ 78.654997][ T2301] Process accounting resumed [ 78.657260][ T2301] Process accounting resumed [ 78.659466][ T2301] Process accounting resumed [ 78.661633][ T2301] Process accounting resumed [ 78.663413][ T2301] Process accounting resumed [ 78.665116][ T2301] Process accounting resumed [ 78.666815][ T2301] Process accounting resumed [ 78.668663][ T2301] Process accounting resumed [ 78.670321][ T2301] Process accounting resumed [ 78.671993][ T2301] Process accounting resumed [ 78.674514][ T2301] Process accounting resumed [ 78.676383][ T2301] Process accounting resumed [ 78.678003][ T2301] Process accounting resumed [ 78.679636][ T2301] Process accounting resumed [ 78.681240][ T2301] Process accounting resumed [ 78.682990][ T2301] Process accounting resumed [ 78.684625][ T2301] Process accounting resumed [ 78.688905][ T2301] Process accounting resumed [ 78.690521][ T2301] Process accounting resumed [ 78.692405][ T2301] Process accounting resumed [ 78.694513][ T2301] Process accounting resumed [ 78.696444][ T2301] Process accounting resumed [ 78.698044][ T2301] Process accounting resumed [ 78.699723][ T2301] Process accounting resumed [ 78.702595][ T2301] Process accounting resumed [ 78.704933][ T2301] Process accounting resumed [ 78.707131][ T2301] Process accounting resumed [ 78.725015][ T7681] Process accounting resumed [ 78.766032][ T40] audit: type=1400 audit(1756719036.765:522): avc: denied { ioctl } for pid=7698 comm="syz.2.522" path="socket:[17248]" dev="sockfs" ino=17248 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.768136][ T7700] netlink: 'syz.0.523': attribute type 15 has an invalid length. [ 79.274364][ T40] audit: type=1400 audit(1756719037.265:523): avc: denied { setattr } for pid=7738 comm="syz.0.536" path="socket:[17265]" dev="sockfs" ino=17265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.328272][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 79.355579][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.540'. [ 79.364966][ T6008] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 79.368014][ T40] audit: type=1400 audit(1756719037.365:524): avc: denied { bind } for pid=7753 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.505872][ T6008] usb 6-1: device descriptor read/64, error -71 [ 79.517608][ T7772] batadv_slave_0: entered promiscuous mode [ 79.522340][ T7772] batadv_slave_0: left promiscuous mode [ 79.684991][ T2301] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 79.707095][ T7767] overlay: Unknown parameter 'fsuuid' [ 79.755406][ T6008] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 79.762373][ T7791] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 79.846362][ T2301] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.853031][ T2301] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.856724][ T2301] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.859365][ T2301] usb 8-1: SerialNumber: syz [ 79.894905][ T6008] usb 6-1: device descriptor read/64, error -71 [ 80.007610][ T6008] usb usb6-port1: attempt power cycle [ 80.069652][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 80.072844][ T7770] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 80.076058][ T7770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.081199][ T2301] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 80.097224][ T2301] usb 8-1: USB disconnect, device number 4 [ 80.287201][ T40] audit: type=1400 audit(1756719038.285:525): avc: denied { write } for pid=7813 comm="syz.0.560" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.290249][ T7814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7814 comm=syz.0.560 [ 80.293221][ T7815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7815 comm=syz.0.560 [ 80.295865][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 80.354985][ T6008] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 80.376019][ T6008] usb 6-1: device descriptor read/8, error -71 [ 80.454347][ T7825] mkiss: ax0: crc mode is auto. [ 80.569734][ T7834] netlink: 'syz.0.566': attribute type 3 has an invalid length. [ 80.573039][ T7834] netlink: 224 bytes leftover after parsing attributes in process `syz.0.566'. [ 80.616971][ T6008] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 80.626481][ T7838] netlink: 'syz.3.568': attribute type 16 has an invalid length. [ 80.629691][ T7838] netlink: 'syz.3.568': attribute type 17 has an invalid length. [ 80.645514][ T6008] usb 6-1: device descriptor read/8, error -71 [ 80.684076][ T7838] bond0: left promiscuous mode [ 80.686491][ T7838] bond0: left allmulticast mode [ 80.721846][ T7850] overlayfs: failed to clone upperpath [ 80.755859][ T6008] usb usb6-port1: unable to enumerate USB device [ 80.861062][ T7838] geneve3: left promiscuous mode [ 80.862684][ T7838] geneve3: left allmulticast mode [ 80.867265][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.900615][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.904794][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.908888][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.947401][ T7858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.967016][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 80.969507][ T40] audit: type=1400 audit(1756719038.965:526): avc: denied { accept } for pid=7860 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.001636][ T40] audit: type=1400 audit(1756719038.995:527): avc: denied { setopt } for pid=7863 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.063216][ T7867] overlayfs: upper fs does not support tmpfile. [ 81.069550][ T7870] netlink: 'syz.0.578': attribute type 15 has an invalid length. [ 81.073845][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 81.078075][ T7870] netlink: 'syz.0.578': attribute type 15 has an invalid length. [ 81.081332][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 81.136358][ T40] audit: type=1400 audit(1756719039.135:528): avc: denied { bind } for pid=7878 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.336352][ T7901] batman_adv: batadv0: Adding interface: gretap1 [ 81.338891][ T7901] batman_adv: batadv0: Interface activated: gretap1 [ 81.505652][ T40] audit: type=1400 audit(1756719039.505:529): avc: denied { read } for pid=7910 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.628946][ T7914] netlink: 32 bytes leftover after parsing attributes in process `syz.2.591'. [ 81.633912][ T7914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=7914 comm=syz.2.591 [ 81.730407][ T7922] ip6tnl1: entered promiscuous mode [ 81.732328][ T7922] ip6tnl1: entered allmulticast mode [ 82.252303][ T7943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.280064][ T7943] batadv_slave_0: entered promiscuous mode [ 82.294787][ T7943] batadv_slave_0: left promiscuous mode [ 82.313903][ T7945] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 82.922909][ T8002] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 82.987079][ T8002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.046333][ T8005] veth3: entered promiscuous mode [ 83.050447][ T8005] bond2: (slave veth3): Enslaving as an active interface with a down link [ 83.082300][ T8002] vlan2: entered allmulticast mode [ 83.084998][ T8002] bond2: entered allmulticast mode [ 83.089172][ T8002] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 83.195544][ T40] audit: type=1400 audit(1756719041.195:530): avc: denied { ioctl } for pid=8009 comm="syz.3.621" path="socket:[20148]" dev="sockfs" ino=20148 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.243979][ T8014] tipc: Started in network mode [ 83.246748][ T8014] tipc: Node identity 127efc0be629, cluster identity 4711 [ 83.249461][ T8014] tipc: Enabled bearer , priority 0 [ 83.252098][ T8014] syzkaller0: entered promiscuous mode [ 83.253856][ T8014] syzkaller0: entered allmulticast mode [ 83.259482][ T8014] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 83.270830][ T8014] tipc: Resetting bearer [ 83.277579][ T8013] tipc: Resetting bearer [ 83.295053][ T8013] tipc: Disabling bearer [ 83.340307][ T8016] 9pnet: Could not find request transport: vd [ 83.486423][ T6008] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.648780][ T6008] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.653525][ T6008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 36, changing to 9 [ 83.658214][ T6008] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.663361][ T6008] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.669632][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.674931][ T6008] usb 8-1: config 0 descriptor?? [ 84.081672][ T6008] hid_parser_main: 28 callbacks suppressed [ 84.081688][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.087013][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.089343][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.092343][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.094698][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.097241][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.099865][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.102789][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.105669][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.108448][ T6008] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.115045][ T6008] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 84.223510][ T40] audit: type=1400 audit(1756719042.215:531): avc: denied { getopt } for pid=8043 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.265816][ T8048] overlayfs: conflicting options: userxattr,redirect_dir=on [ 84.269187][ T8048] trusted_key: syz.0.632 sent an empty control message without MSG_MORE. [ 84.284608][ T8050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.284648][ T8048] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 84.293829][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.299627][ T8048] batadv0: entered allmulticast mode [ 84.302669][ T8048] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.308884][ T8052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.348010][ T40] audit: type=1400 audit(1756719042.345:532): avc: denied { mounton } for pid=8009 comm="syz.3.621" path="/proc/289/task" dev="proc" ino=20153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 84.507012][ T8070] kvm: emulating exchange as write [ 84.549979][ T1332] usb 8-1: USB disconnect, device number 5 [ 84.629192][ T8080] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 84.675225][ T40] audit: type=1400 audit(1756719042.665:533): avc: denied { read } for pid=8085 comm="syz.0.646" laddr=::ac14:14aa lport=38610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.701068][ T40] audit: type=1400 audit(1756719042.695:534): avc: denied { getopt } for pid=8087 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.797363][ T8100] __nla_validate_parse: 4 callbacks suppressed [ 84.797373][ T8100] netlink: 174872 bytes leftover after parsing attributes in process `syz.0.652'. [ 84.838038][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.0.653 [ 84.838938][ T8105] CUSE: unknown device info "" [ 84.843267][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.653'. [ 84.845784][ T8105] CUSE: zero length info key specified [ 84.887065][ T8107] ================================================================== [ 84.887074][ T8107] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 84.887108][ T8107] Write of size 8 at addr ffffc900051b9000 by task syz.1.655/8107 [ 84.887116][ T8107] [ 84.887121][ T8107] CPU: 0 UID: 0 PID: 8107 Comm: syz.1.655 Not tainted syzkaller #0 PREEMPT(full) [ 84.887134][ T8107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.887141][ T8107] Call Trace: [ 84.887145][ T8107] [ 84.887149][ T8107] dump_stack_lvl+0x116/0x1f0 [ 84.887169][ T8107] print_report+0xcd/0x630 [ 84.887187][ T8107] ? __virt_addr_valid+0x81/0x610 [ 84.887211][ T8107] ? sys_imageblit+0x1a6f/0x1e60 [ 84.887232][ T8107] kasan_report+0xe0/0x110 [ 84.887252][ T8107] ? sys_imageblit+0x1a6f/0x1e60 [ 84.887277][ T8107] sys_imageblit+0x1a6f/0x1e60 [ 84.887300][ T8107] ? __pfx_sys_imageblit+0x10/0x10 [ 84.887315][ T8107] ? lock_acquire+0x179/0x350 [ 84.887331][ T8107] ? __page_table_check_ptes_set+0x1ae/0x420 [ 84.887343][ T8107] ? find_held_lock+0x2b/0x80 [ 84.887357][ T8107] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 84.887373][ T8107] ? pfn_valid+0x26a/0x4d0 [ 84.887392][ T8107] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 84.887409][ T8107] bit_putcs+0x90f/0xde0 [ 84.887431][ T8107] ? __pfx_bit_putcs+0x10/0x10 [ 84.887442][ T8107] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 84.887457][ T8107] ? fb_get_color_depth+0x120/0x250 [ 84.887467][ T8107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.887481][ T8107] ? __pfx_bit_putcs+0x10/0x10 [ 84.887491][ T8107] fbcon_putcs+0x384/0x4a0 [ 84.887509][ T8107] do_update_region+0x2e6/0x3f0 [ 84.887524][ T8107] invert_screen+0x1e4/0x590 [ 84.887535][ T8107] ? __pfx_invert_screen+0x10/0x10 [ 84.887545][ T8107] ? __pfx_complement_pos+0x10/0x10 [ 84.887555][ T8107] ? vc_do_resize+0x24d/0x10e0 [ 84.887564][ T8107] ? __vmalloc_node_noprof+0xad/0xf0 [ 84.887579][ T8107] clear_selection+0x59/0x70 [ 84.887595][ T8107] vc_do_resize+0xd9b/0x10e0 [ 84.887607][ T8107] ? __pfx_vc_do_resize+0x10/0x10 [ 84.887616][ T8107] ? __lock_acquire+0xb97/0x1ce0 [ 84.887633][ T8107] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 84.887648][ T8107] fbcon_set_disp+0x7ad/0xe50 [ 84.887664][ T8107] ? fbcon_set_bitops+0x14d/0x1c0 [ 84.887675][ T8107] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 84.887689][ T8107] set_con2fb_map+0x703/0x1080 [ 84.887701][ T8107] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 84.887712][ T8107] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 84.887725][ T8107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.887737][ T8107] do_fb_ioctl+0x328/0x7e0 [ 84.887750][ T8107] ? __pfx_do_fb_ioctl+0x10/0x10 [ 84.887765][ T8107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.887783][ T8107] ? selinux_file_ioctl+0x180/0x270 [ 84.887799][ T8107] fb_ioctl+0xe5/0x150 [ 84.887810][ T8107] ? __pfx_fb_ioctl+0x10/0x10 [ 84.887823][ T8107] __x64_sys_ioctl+0x18b/0x210 [ 84.887839][ T8107] do_syscall_64+0xcd/0x4c0 [ 84.887852][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.887863][ T8107] RIP: 0033:0x7f6cedd8ebe9 [ 84.887871][ T8107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.887881][ T8107] RSP: 002b:00007f6ceec22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.887892][ T8107] RAX: ffffffffffffffda RBX: 00007f6cedfc5fa0 RCX: 00007f6cedd8ebe9 [ 84.887899][ T8107] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 84.887905][ T8107] RBP: 00007f6cede11e19 R08: 0000000000000000 R09: 0000000000000000 [ 84.887911][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.887917][ T8107] R13: 00007f6cedfc6038 R14: 00007f6cedfc5fa0 R15: 00007fffa41091f8 [ 84.887927][ T8107] [ 84.887931][ T8107] [ 84.887934][ T8107] The buggy address belongs to a vmalloc virtual mapping [ 84.887942][ T8107] Memory state around the buggy address: [ 84.887948][ T8107] ffffc900051b8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.887955][ T8107] ffffc900051b8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.887962][ T8107] >ffffc900051b9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.887968][ T8107] ^ [ 84.887973][ T8107] ffffc900051b9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.887980][ T8107] ffffc900051b9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.887986][ T8107] ================================================================== [ 84.887992][ T8107] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.887998][ T8107] CPU: 0 UID: 0 PID: 8107 Comm: syz.1.655 Not tainted syzkaller #0 PREEMPT(full) [ 84.888015][ T8107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.888022][ T8107] Call Trace: [ 84.888025][ T8107] [ 84.888029][ T8107] dump_stack_lvl+0x3d/0x1f0 [ 84.888041][ T8107] vpanic+0x6e8/0x7a0 [ 84.888057][ T8107] ? __pfx_vpanic+0x10/0x10 [ 84.888073][ T8107] ? __pfx_vprintk_emit+0x10/0x10 [ 84.888088][ T8107] ? sys_imageblit+0x1a6f/0x1e60 [ 84.888102][ T8107] panic+0xca/0xd0 [ 84.888117][ T8107] ? __pfx_panic+0x10/0x10 [ 84.888135][ T8107] ? check_panic_on_warn+0x1f/0xb0 [ 84.888144][ T8107] check_panic_on_warn+0xab/0xb0 [ 84.888154][ T8107] end_report+0x107/0x170 [ 84.888165][ T8107] kasan_report+0xee/0x110 [ 84.888177][ T8107] ? sys_imageblit+0x1a6f/0x1e60 [ 84.888193][ T8107] sys_imageblit+0x1a6f/0x1e60 [ 84.888209][ T8107] ? __pfx_sys_imageblit+0x10/0x10 [ 84.888224][ T8107] ? lock_acquire+0x179/0x350 [ 84.888240][ T8107] ? __page_table_check_ptes_set+0x1ae/0x420 [ 84.888251][ T8107] ? find_held_lock+0x2b/0x80 [ 84.888265][ T8107] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 84.888277][ T8107] ? pfn_valid+0x26a/0x4d0 [ 84.888294][ T8107] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 84.888311][ T8107] bit_putcs+0x90f/0xde0 [ 84.888335][ T8107] ? __pfx_bit_putcs+0x10/0x10 [ 84.888353][ T8107] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 84.888380][ T8107] ? fb_get_color_depth+0x120/0x250 [ 84.888398][ T8107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.888413][ T8107] ? __pfx_bit_putcs+0x10/0x10 [ 84.888424][ T8107] fbcon_putcs+0x384/0x4a0 [ 84.888441][ T8107] do_update_region+0x2e6/0x3f0 [ 84.888456][ T8107] invert_screen+0x1e4/0x590 [ 84.888467][ T8107] ? __pfx_invert_screen+0x10/0x10 [ 84.888477][ T8107] ? __pfx_complement_pos+0x10/0x10 [ 84.888488][ T8107] ? vc_do_resize+0x24d/0x10e0 [ 84.888497][ T8107] ? __vmalloc_node_noprof+0xad/0xf0 [ 84.888513][ T8107] clear_selection+0x59/0x70 [ 84.888528][ T8107] vc_do_resize+0xd9b/0x10e0 [ 84.888541][ T8107] ? __pfx_vc_do_resize+0x10/0x10 [ 84.888550][ T8107] ? __lock_acquire+0xb97/0x1ce0 [ 84.888567][ T8107] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 84.888583][ T8107] fbcon_set_disp+0x7ad/0xe50 [ 84.888599][ T8107] ? fbcon_set_bitops+0x14d/0x1c0 [ 84.888610][ T8107] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 84.888625][ T8107] set_con2fb_map+0x703/0x1080 [ 84.888636][ T8107] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 84.888648][ T8107] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 84.888661][ T8107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.888673][ T8107] do_fb_ioctl+0x328/0x7e0 [ 84.888686][ T8107] ? __pfx_do_fb_ioctl+0x10/0x10 [ 84.888701][ T8107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.888720][ T8107] ? selinux_file_ioctl+0x180/0x270 [ 84.888735][ T8107] fb_ioctl+0xe5/0x150 [ 84.888747][ T8107] ? __pfx_fb_ioctl+0x10/0x10 [ 84.888760][ T8107] __x64_sys_ioctl+0x18b/0x210 [ 84.888776][ T8107] do_syscall_64+0xcd/0x4c0 [ 84.888788][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.888799][ T8107] RIP: 0033:0x7f6cedd8ebe9 [ 84.888807][ T8107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.888817][ T8107] RSP: 002b:00007f6ceec22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.888826][ T8107] RAX: ffffffffffffffda RBX: 00007f6cedfc5fa0 RCX: 00007f6cedd8ebe9 [ 84.888834][ T8107] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 84.888840][ T8107] RBP: 00007f6cede11e19 R08: 0000000000000000 R09: 0000000000000000 [ 84.888846][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.888853][ T8107] R13: 00007f6cedfc6038 R14: 00007f6cedfc5fa0 R15: 00007fffa41091f8 [ 84.888863][ T8107] [ 84.889652][ T8107] Kernel Offset: disabled VM DIAGNOSIS: 09:30:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643cf5 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90006f3ef30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000062 R14=ffffffff9b112060 R15=ffffffff85643c90 RIP=ffffffff85643d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6ceec226c0 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6ceec21f98 CR3=000000003bbb6000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa4109706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa4109706 00007fffa410970c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cedf974a8 00007f6cedf974a0 00007f6cedf97498 00007f6cedf97470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ceeafd100 00007f6cedf97460 00007f6cedf97478 00007f6cedf974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cedf974b8 00007f6cedf974b0 00007f6cedf974a8 00007f6cedf974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801de92440 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31963fff CR3=000000003bbb6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=000000000000003f Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa4109706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa4109706 00007fffa410970c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cede12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cedf974a8 00007f6cedf974a0 00007f6cedf97498 00007f6cedf97470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ceeafd100 00007f6cedf97460 00007f6cedf97478 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cedf974b8 00007f6cedf974b0 00007f6cedf974a8 00007f6cedf974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff8880267e0000 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556f235500 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f01a0cf56c0 CR3=000000004f4ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca8e1c5a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca8e1c726 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca8e1c726 00007ffca8e1c72c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a0012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a0012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a0012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a0012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a0012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a0012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888032200000 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9dd354e880 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffa4107cd8 CR3=0000000032712000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff906fb4d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff906fb4d6 00007fff906fb4dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29ab412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29ab412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29ab412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29ab412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29ab412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29ab412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29ab5974a8 00007f29ab5974a0 00007f29ab597498 00007f29ab597470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29ac0fd100 00007f29ab597460 00007f29ab590004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29ab5974b8 00007f29ab5974b0 00007f29ab5974a8 00007f29ab5974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000