last executing test programs: 2m19.969462907s ago: executing program 1 (id=313): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x3, 0x0, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x8, 0x2}}) r2 = openat$comedi(0xffffff9c, &(0x7f0000000240)='/dev/comedi1\x00', 0x1a1001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'s526\x00', [0x3, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x4, 0x5, 0x1001, 0x1, 0x8, 0x1, 0x4, 0xa, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0xa9b, 0x3, 0x10, 0xe, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x2ee]}) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) 2m19.935700959s ago: executing program 1 (id=314): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) munlock(&(0x7f0000c27000/0x4000)=nil, 0x4000) (async) munlock(&(0x7f0000c27000/0x4000)=nil, 0x4000) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 2m19.822856726s ago: executing program 1 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{0x8}, {0x7, 0x3, 0x9, 0x80, 0x4}}}}, 0xe) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001000000000020000000020000100000000000000000040019"], 0x24}}, 0x48850) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 2m19.820107013s ago: executing program 1 (id=316): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000006b80)={0x490, 0x0, r2, [{{0x4, 0x0, 0x3, 0xffffffffffffffff, 0x101, 0x10, {0x4, 0xf9, 0x1000, 0x100, 0x8000000000000001, 0xff, 0xfffffff7, 0xb, 0xffff4680, 0x8000, 0x9, 0x0, 0x0, 0x7, 0x9}}, {0x0, 0x2, 0x2, 0x200, '%['}}, {{0x3, 0x0, 0x6, 0xd, 0x37b405fc, 0x52a, {0x1, 0x2, 0x400, 0x3, 0x7, 0x3a3, 0x171, 0x400, 0x200, 0x6000, 0xc44, 0x0, 0x0, 0xff, 0x7fff}}, {0x3, 0x7, 0x7, 0xf, '%!@//-('}}, {{0x1, 0x0, 0x6c9, 0xe5b, 0x8, 0xe997, {0x2, 0x7, 0x0, 0x0, 0x0, 0x8, 0x3165, 0x7ca, 0x2, 0xc000, 0x401, 0x0, 0x0, 0xa9, 0xfffffff9}}, {0x6, 0x5, 0xa, 0x7, '/dev/cuse\x00'}}, {{0x5, 0x3, 0xf, 0x9, 0x5, 0x1, {0x4, 0x2, 0x9, 0x1fe, 0x6, 0x7, 0x2, 0x3, 0xffffff81, 0x4000, 0xff, 0x0, 0x0, 0x6, 0xffffffff}}, {0x2, 0x8000001, 0x6, 0x0, ',.$}*:'}}, {{0x4, 0x0, 0x8, 0x5, 0xb540, 0x7, {0x1, 0x5, 0x7, 0x689, 0x1, 0x0, 0x8001, 0x2, 0x7, 0x6000, 0x7, 0x0, 0x0, 0xcee9, 0x1ff}}, {0x3, 0x8, 0xa, 0x4, '/dev/cuse\x00'}}, {{0x5, 0x2, 0x7ff, 0x1, 0xc7db, 0x2, {0x3, 0xc, 0x1, 0xfffffffffffffffa, 0x8000000000000000, 0x4, 0xf5, 0x6, 0x7c3, 0x1000, 0x3ff, 0x0, 0x0, 0x0, 0xffffffff}}, {0x6, 0x0, 0xa, 0x0, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x9, 0x6, 0x8, 0x10000, {0x3, 0x1, 0x40, 0x0, 0xe, 0x5, 0x7, 0x7f, 0x2, 0x6000, 0x5, 0x0, 0xee00, 0xffffffff, 0x5}}, {0x4, 0x4, 0xa, 0x80000001, '/dev/cuse\x00'}}]}, 0x490) (async) write$FUSE_DIRENTPLUS(r1, &(0x7f0000006b80)={0x490, 0x0, r2, [{{0x4, 0x0, 0x3, 0xffffffffffffffff, 0x101, 0x10, {0x4, 0xf9, 0x1000, 0x100, 0x8000000000000001, 0xff, 0xfffffff7, 0xb, 0xffff4680, 0x8000, 0x9, 0x0, 0x0, 0x7, 0x9}}, {0x0, 0x2, 0x2, 0x200, '%['}}, {{0x3, 0x0, 0x6, 0xd, 0x37b405fc, 0x52a, {0x1, 0x2, 0x400, 0x3, 0x7, 0x3a3, 0x171, 0x400, 0x200, 0x6000, 0xc44, 0x0, 0x0, 0xff, 0x7fff}}, {0x3, 0x7, 0x7, 0xf, '%!@//-('}}, {{0x1, 0x0, 0x6c9, 0xe5b, 0x8, 0xe997, {0x2, 0x7, 0x0, 0x0, 0x0, 0x8, 0x3165, 0x7ca, 0x2, 0xc000, 0x401, 0x0, 0x0, 0xa9, 0xfffffff9}}, {0x6, 0x5, 0xa, 0x7, '/dev/cuse\x00'}}, {{0x5, 0x3, 0xf, 0x9, 0x5, 0x1, {0x4, 0x2, 0x9, 0x1fe, 0x6, 0x7, 0x2, 0x3, 0xffffff81, 0x4000, 0xff, 0x0, 0x0, 0x6, 0xffffffff}}, {0x2, 0x8000001, 0x6, 0x0, ',.$}*:'}}, {{0x4, 0x0, 0x8, 0x5, 0xb540, 0x7, {0x1, 0x5, 0x7, 0x689, 0x1, 0x0, 0x8001, 0x2, 0x7, 0x6000, 0x7, 0x0, 0x0, 0xcee9, 0x1ff}}, {0x3, 0x8, 0xa, 0x4, '/dev/cuse\x00'}}, {{0x5, 0x2, 0x7ff, 0x1, 0xc7db, 0x2, {0x3, 0xc, 0x1, 0xfffffffffffffffa, 0x8000000000000000, 0x4, 0xf5, 0x6, 0x7c3, 0x1000, 0x3ff, 0x0, 0x0, 0x0, 0xffffffff}}, {0x6, 0x0, 0xa, 0x0, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x9, 0x6, 0x8, 0x10000, {0x3, 0x1, 0x40, 0x0, 0xe, 0x5, 0x7, 0x7f, 0x2, 0x6000, 0x5, 0x0, 0xee00, 0xffffffff, 0x5}}, {0x4, 0x4, 0xa, 0x80000001, '/dev/cuse\x00'}}]}, 0x490) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x2) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r11], 0x18, 0x40001}}], 0x1, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r11], 0x18, 0x40001}}], 0x1, 0x0) accept(r11, 0x0, 0x0) (async) accept(r11, 0x0, 0x0) 2m18.91305114s ago: executing program 1 (id=327): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) fstat(r2, &(0x7f0000000300)) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) (async) unlink(&(0x7f0000000040)='./file0\x00') (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) fstat(r2, &(0x7f0000000300)) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) (async) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) 2m18.792934852s ago: executing program 1 (id=328): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1) ioctl$NBD_DISCONNECT(r3, 0xab08) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d76697274696f2c756e616d653d6d6f756e74696e666f002c00c0ab978808ffb5c73e08b47df2b07a805c8789520d85ef400480172697eb1f7347708bb6b3eb3bc81b43e8a9cbad4700017569dd90816cd14064f9c3d5f520269448b5a697fbdffe2b49ac8faa4c2b4629d575c6fdd0493e32e3556880eef1"]) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 2m3.795592162s ago: executing program 32 (id=328): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1) ioctl$NBD_DISCONNECT(r3, 0xab08) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d76697274696f2c756e616d653d6d6f756e74696e666f002c00c0ab978808ffb5c73e08b47df2b07a805c8789520d85ef400480172697eb1f7347708bb6b3eb3bc81b43e8a9cbad4700017569dd90816cd14064f9c3d5f520269448b5a697fbdffe2b49ac8faa4c2b4629d575c6fdd0493e32e3556880eef1"]) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 16.97270701s ago: executing program 2 (id=2124): write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) sendmsg$inet6(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e21, 0x5, @private2}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000000700)="85", 0x1}], 0x1}, 0x200000c0) (async) sendmsg$inet6(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e21, 0x5, @private2}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000000700)="85", 0x1}], 0x1}, 0x200000c0) io_setup(0x10000, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000002c0)) 16.800144959s ago: executing program 2 (id=2127): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x4, 0x12) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) 16.740000384s ago: executing program 3 (id=2129): syz_emit_ethernet(0x136, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x100, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1b, "703b744dc5c6a05fed0c0a28a5c04ec93b15911c51d9f1f265deed8eccd95784a601a0b0e6a4c3111b910f0173045fa2141e5b4595c5c99a9e655650a618f1e1b87d92c6bdc8822504781c5a026526818ceac3312187ff298ddd0b51e329a0555c732fabd5572626bc738bf5440cf57f442ac9bd7656e69c22df50f22d2bbe513c01be63f88b0536f418ebe0bf8f7e1c7ec73cf47ec436ed1d6060a46f881e8d701f56440e5259da2369e350ab54d342e18ac1fc323c56eee2eef13fd238914de7816db149570fe8ec5a49f055ba6a24df8c00000000"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000000040)=""/126, 0x7e) 16.739464874s ago: executing program 2 (id=2130): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x5}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000002280)=[{&(0x7f0000002180)=""/62, 0x3e}], 0x1, &(0x7f0000002780)=[{&(0x7f00000022c0)=""/223, 0xdf}], 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x2, {0x40, 0x3, 0x8, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, 0x0, 0x502, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0xee01]) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000080)=@reiserfs_6={0x18, 0x6, {0x3000000, 0x6, 0x17, 0x5, 0x3, 0x9}}, 0xc041) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000008c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) r10 = gettid() tkill(r10, 0xb) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000a40)=0xe8) socketpair(0x1f, 0x800, 0x7, &(0x7f0000000a80)={0xffffffffffffffff}) r13 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000ac0), 0x48080, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0xc9, &(0x7f0000000440)=[{&(0x7f0000000340)="4fa99929b5612f16dca705f5fd49429d990cd40467c6ad474442de17ded51c0ff56007935acaf41b881512e6a28a4f81033515440dcf64db62d659920587d0f003b8c4d4d4af5632959d6a71a7edf077091387c826703604f26658a56a8f01da3e272716e350437723ec00f69f8099be47b88a2e3a84d300dfbacb04e60ed15cf8d6dcf466bba561cc54f2b37c50cd3dbf86bccb5380b770b3f777c45f1429d84c9e96aba5fc7581b9", 0xa9}, {&(0x7f0000000400)="54f961bd960233d1b1e206d75c1292a6a19cb62a53b685b4bd74020454bca14d4210e1aa9dfa59", 0x27}, {&(0x7f00000004c0)="0e1b408b1aa71301aef2abca5e516484b5505fc77903ffd59d3df344798ead7841178cfd2d6223674903be7e17f0ec01bde0e82e7b36632d4b921db57dbac63a51", 0x41}, {&(0x7f0000001f80)="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", 0x1000}], 0x4, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50, 0x20000000}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000800)="11715d476c27b0bffec891e9d77f56277b946ae2e5", 0x15}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRESOCT, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c0000e39f9d6f99b6fa59f73009290b000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x4004084}}], 0x2, 0x8000) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0xff, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x10, 0x5e, 0x0, 0x0, [0x81, 0x7ff, 0x4]}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xe}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c0000000000000000000000000000000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x0) 16.671837671s ago: executing program 3 (id=2132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 16.671602931s ago: executing program 0 (id=2133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x101002, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r4, 0x80000000) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x24040814) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 16.577668641s ago: executing program 0 (id=2136): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000240)=0xc, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x4) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=ANY=[@ANYBLOB="340000001000000000000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001ef041df11af0007866726d0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000000}, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r7 = dup(r6) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x1d, @private1, 0x7}, 0x1c) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f00000000c0)=0xe, 0x4) 16.491623295s ago: executing program 0 (id=2138): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x15) 16.486498705s ago: executing program 3 (id=2139): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) socketpair(0x1, 0x100000005, 0xfffffffc, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x5, 0x2, 0x6, 0x3, 0x2, 0x1, 0x1, 0x6, 0x7fffffff}) write$P9_RREADLINK(r5, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 16.221461516s ago: executing program 4 (id=2142): keyctl$read(0xb, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=@ethtool_cmd={0x28, 0x8, 0xff, 0x8, 0x6, 0x9, 0x1, 0xc, 0xae, 0x7, 0xf562, 0x800000, 0x1, 0x9, 0x12, 0x3, [0x200006, 0x5]}}) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) rmdir(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_LOCK(r2, 0x6405) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000d042abd7000000000001b000000", @ANYRES32=0x0, @ANYBLOB="14220100000000002400128009000100626f6e64000000001400028005000100060000000800070000000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 16.091884489s ago: executing program 4 (id=2143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0x8, 0x2}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x9, 0x8001, 0x2, 0x7, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000090}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000001b00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000003c0)=0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000580)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@access_user}, {@nodevmap}], [{@fowner_gt={'fowner>', r7}}, {@euid_lt={'euid<', r8}}, {@euid_eq={'euid', 0x3d, r9}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'netem\x00'}}, {@smackfsroot}, {@flag='ro'}, {@smackfshat={'smackfshat', 0x3d, 'nbd\x00'}}, {@uid_lt={'uid<', r10}}, {@fsname={'fsname', 0x3d, 'nbd\x00'}}]}}) (async) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x84, r1, 0x1, 0x70bd2d, 0x1fffffc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x32, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x84}}, 0x8841) 16.091534803s ago: executing program 3 (id=2144): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$TCSETS(r0, 0x80047456, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}, 0xc34}], 0x1, 0x40010044, 0x0) 16.089854507s ago: executing program 4 (id=2145): r0 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x140, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xa, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "e9fd11de34f512bc12ed281193f42d4c1009befaf2ec32297a5bddec73ef45c80be7543d69bef0d3fe41f567f1ef3c33dcb37b97cf3b4a6b3c92c954434ce4c5f86a0b34e578974d75a34265d82ccb888f36ad6b785a154063a87d9581120f63386756d2ee41b895809d96deb46e1526701973a6804c154add47dffe120a5fdc6108aecff06ef31d235b86c2da922f369798b8bcf5a2ea6fb44ae1027f933ee2a859e5d1706460293727cb437b568c69097aaae79928e94e8acd6259a2ccb17b205f7c16f8e74494ed77722b43b0d73af0c0314d0922bd4b449489b2db9c36aa247722650c7600a8c128695c5f6fb3d7199f2796939a5e3c2a4a7e0dd640a93d"}]}}]}, 0x140}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x140, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xa, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x140}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x4848) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x4848) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) 16.031325057s ago: executing program 3 (id=2146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x80a1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x80a1) (async) 16.030783097s ago: executing program 3 (id=2147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffe) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000004c0)={0x2, 0x7ff, 0x200, 0x1, 0x200, 0x10000, 0xb, 0x6}, &(0x7f0000000500)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe4c) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) socket$unix(0x1, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xffffffff) accept4(r7, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r8, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 16.029371266s ago: executing program 4 (id=2148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x78, 0x3}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@local, 0x80000000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) 15.951888243s ago: executing program 4 (id=2149): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f00000001c0)={0x10009880, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x22}, &(0x7f00000000c0)=""/48, 0x30, &(0x7f0000000100)=""/117, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) r1 = syz_open_procfs(r0, &(0x7f0000000240)='smaps\x00') read$FUSE(r1, &(0x7f0000001440)={0x2020}, 0x2020) 15.951519075s ago: executing program 4 (id=2150): syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000100)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x8005}}]}}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg$unix(r4, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10100, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000400)={0x2, r6, 0x4, 0x7ff, 0x5da, 0xe, 0x3}) 15.841849492s ago: executing program 2 (id=2151): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31253733", 0x3f, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000250001002e01202244358be009"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000110) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="f78d9ca38fff26f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed", 0x39}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da9884560b0033079725f33a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c4430400", 0x65}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) 15.841280319s ago: executing program 2 (id=2152): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) (async) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) 15.708580799s ago: executing program 0 (id=2153): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000240)={0x0}) ptrace(0x4207, r1) landlock_restrict_self(r0, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r2, 0x5460, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x134, 0x0, 0x1}, 0x18, 0x1) ioctl(r2, 0x5451, 0x0) 15.52184337s ago: executing program 0 (id=2154): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf250600000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000f000000740000200500530001000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000040) 15.471964587s ago: executing program 0 (id=2155): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x6}, 0x50) 15.36193171s ago: executing program 2 (id=2156): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x48000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x48000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 125.069492ms ago: executing program 33 (id=2155): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x6}, 0x50) 81.664478ms ago: executing program 34 (id=2150): syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080), 0x4) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000100)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x8005}}]}}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg$unix(r4, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10100, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000400)={0x2, r6, 0x4, 0x7ff, 0x5da, 0xe, 0x3}) 47.023348ms ago: executing program 35 (id=2156): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x48000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x48000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 0s ago: executing program 36 (id=2147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffe) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000004c0)={0x2, 0x7ff, 0x200, 0x1, 0x200, 0x10000, 0xb, 0x6}, &(0x7f0000000500)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe4c) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) socket$unix(0x1, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xffffffff) accept4(r7, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r8, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) kernel console output (not intermixed with test programs): e802154 phy1 wpan1: encryption failed: -22 [ 120.410382][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.445987][ T9663] bridge_slave_1 (unregistering): left allmulticast mode [ 120.448120][ T9663] bridge_slave_1 (unregistering): left promiscuous mode [ 120.450182][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.474445][ T29] usb 5-1: device descriptor read/64, error -71 [ 120.611605][ T9671] bond0: (slave wlan1): Releasing backup interface [ 120.713244][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.843067][ T29] usb 5-1: device descriptor read/64, error -71 [ 120.868148][ T9681] netlink: 'syz.3.1024': attribute type 21 has an invalid length. [ 120.954189][ T29] usb usb5-port1: attempt power cycle [ 121.293051][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 121.324013][ T29] usb 5-1: device descriptor read/8, error -71 [ 121.443770][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 121.443786][ T40] audit: type=1400 audit(1760098758.547:36689): avc: denied { create } for pid=9685 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.455839][ T40] audit: type=1400 audit(1760098758.547:36690): avc: denied { setopt } for pid=9685 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.486256][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1027'. [ 121.515814][ T5945] Bluetooth: hci0: unexpected event for opcode 0x200f [ 121.563085][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 121.585055][ T29] usb 5-1: device descriptor read/8, error -71 [ 121.691927][ T40] audit: type=1400 audit(1760098758.787:36691): avc: denied { ioctl } for pid=9694 comm="syz.3.1029" path="socket:[28080]" dev="sockfs" ino=28080 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.706940][ T29] usb usb5-port1: unable to enumerate USB device [ 121.834440][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 121.839650][ T9712] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 121.843274][ T40] audit: type=1400 audit(1760098758.947:36692): avc: denied { create } for pid=9711 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 121.844583][ T9712] overlayfs: failed to clone upperpath [ 121.853843][ T9712] overlayfs: failed to clone lowerpath [ 121.891859][ T9716] openvswitch: netlink: Flow key attr not present in new flow. [ 121.922537][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 121.927840][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 122.050275][ T9734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1043'. [ 122.083227][ T40] audit: type=1800 audit(1760098759.177:36693): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.1045" name="/newroot/299/file0" dev="tmpfs" ino=1607 res=0 errno=0 [ 122.124366][ T9745] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1046'. [ 122.208872][ T9748] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 122.256936][ T9753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.296371][ T9758] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 122.360960][ T40] audit: type=1400 audit(1760098759.457:36694): avc: denied { accept } for pid=9766 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.371539][ T9770] overlay: Unknown parameter 'subj_user' [ 122.508944][ T40] audit: type=1400 audit(1760098759.607:36695): avc: denied { getopt } for pid=9789 comm="syz.3.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.555231][ T5945] Bluetooth: hci3: ISO packet too small [ 122.572912][ T40] audit: type=1400 audit(1760098759.667:36696): avc: denied { audit_write } for pid=9785 comm="syz.2.1059" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 122.580747][ T40] audit: type=1107 audit(1760098759.667:36697): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='uff3[6s)YH,'q42Gzmzca̅j,߳^?B?K8:KWliծ)E^*Z{l4j\%kV3CQ@M,' [ 122.736475][ T40] audit: type=1326 audit(1760098759.837:36698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9796 comm="syz.3.1062" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef67f8eec9 code=0x0 [ 122.955681][ T9803] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.958742][ T9803] overlayfs: failed to set xattr on upper [ 122.961093][ T9803] overlayfs: ...falling back to redirect_dir=nofollow. [ 122.963832][ T9803] overlayfs: ...falling back to metacopy=off. [ 122.965791][ T9803] overlayfs: ...falling back to index=off. [ 122.967836][ T9803] overlayfs: ...falling back to uuid=null. [ 123.137478][ T9807] netlink: 'syz.0.1064': attribute type 11 has an invalid length. [ 123.357394][ T9817] xt_ecn: cannot match TCP bits for non-tcp packets [ 124.313333][ T9840] netlink: 'syz.2.1076': attribute type 2 has an invalid length. [ 124.315945][ T9840] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 124.545674][ T9861] pim6reg13: entered allmulticast mode [ 124.777693][ T9876] XFS (nullb0): Invalid superblock magic number [ 124.959128][ T9899] tmpfs: User quota inode hardlimit too large. [ 125.152558][ T9930] Cannot find add_set index 0 as target [ 125.199711][ T9942] befs: (nullb0): No write support. Marking filesystem read-only [ 125.203769][ T9942] befs: (nullb0): invalid magic header [ 125.302789][ T9955] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 125.325279][ T9955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.365562][ T9955] bond3: (slave veth3): Enslaving as an active interface with a down link [ 125.376085][ T9955] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 125.378557][ T9955] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 125.415966][ T9961] cgroup: subsys name conflicts with all [ 125.733143][ T6021] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 125.903241][ T6021] usb 5-1: Using ep0 maxpacket: 16 [ 125.909235][ T6021] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 125.912802][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 125.916256][ T6021] usb 5-1: Product: syz [ 125.917930][ T6021] usb 5-1: Manufacturer: syz [ 125.919781][ T6021] usb 5-1: SerialNumber: syz [ 125.924120][ T6021] usb 5-1: config 0 descriptor?? [ 126.004906][ T9978] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 126.047243][ T9980] __nla_validate_parse: 3 callbacks suppressed [ 126.047260][ T9980] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1120'. [ 126.129383][ T6021] usb 5-1: USB disconnect, device number 13 [ 126.669080][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 126.669091][ T40] audit: type=1400 audit(1760098763.767:36712): avc: denied { create } for pid=10011 comm="syz.0.1130" name=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.710038][T10014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=10014 comm=syz.0.1131 [ 126.710506][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1131'. [ 126.752379][ T40] audit: type=1400 audit(1760098763.847:36713): avc: denied { connect } for pid=10016 comm="syz.0.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 126.786920][T10017] netlink: 'syz.0.1132': attribute type 21 has an invalid length. [ 126.867197][ T40] audit: type=1400 audit(1760098763.967:36714): avc: denied { map } for pid=10018 comm="syz.0.1133" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 126.905871][T10026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10026 comm=syz.2.1135 [ 126.949765][ T40] audit: type=1400 audit(1760098764.047:36715): avc: denied { search } for pid=10031 comm="syz.2.1137" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.959173][ T40] audit: type=1400 audit(1760098764.047:36716): avc: denied { search } for pid=10031 comm="syz.2.1137" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.968551][ T40] audit: type=1400 audit(1760098764.047:36717): avc: denied { search } for pid=10031 comm="syz.2.1137" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 127.000722][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 127.005311][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1138'. [ 127.077816][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 127.083878][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 127.175412][T10063] netlink: 'syz.2.1146': attribute type 13 has an invalid length. [ 127.202516][T10063] gretap0: refused to change device tx_queue_len [ 127.205111][T10063] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.221541][T10063] pimreg3: entered allmulticast mode [ 127.545171][T10076] bridge: RTM_NEWNEIGH with invalid ether address [ 127.790012][ T40] audit: type=1400 audit(1760098764.887:36718): avc: denied { bind } for pid=10104 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.838404][T10109] netlink: 'syz.0.1159': attribute type 2 has an invalid length. [ 127.840856][T10109] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1159'. [ 128.118851][T10128] gretap1: entered promiscuous mode [ 128.205566][ T40] audit: type=1400 audit(1760098765.307:36719): avc: denied { setopt } for pid=10129 comm="syz.0.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 128.210810][T10138] netlink: 212268 bytes leftover after parsing attributes in process `syz.0.1167'. [ 128.218798][T10138] openvswitch: netlink: Message has 512 unknown bytes. [ 128.430624][T10151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51127 sclass=netlink_route_socket pid=10151 comm=syz.2.1173 [ 128.431568][ T40] audit: type=1400 audit(1760098765.527:36720): avc: denied { write } for pid=10148 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.471593][T10154] 9pnet: Unknown protocol version 9p20\++} [ 129.024923][T10131] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 129.078707][T10164] 9pnet_fd: p9_fd_create_unix (10164): problem connecting socket: qY3aK: -91 [ 129.081735][ T40] audit: type=1400 audit(1760098766.177:36721): avc: denied { mounton } for pid=10162 comm="syz.4.1177" path=2F3131302FE91F7189591E9233614B dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 129.205247][T10177] vivid-001: disconnect [ 129.842755][T10182] netlink: 'syz.2.1183': attribute type 15 has an invalid length. [ 130.022066][T10176] vivid-001: reconnect [ 130.233181][ T5945] Bluetooth: hci0: command 0x0c20 tx timeout [ 130.266471][T10205] overlayfs: failed to resolve 'verity=require': -2 [ 130.439059][ T6021] hid-generic 07FF:0C0D:0DAE.0008: reserved main item tag 0xe [ 130.445085][ T6021] hid-generic 07FF:0C0D:0DAE.0008: hidraw2: HID v0.09 Device [syz1] on syz1 [ 130.594464][T10227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1195'. [ 130.598120][T10227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10227 comm=syz.2.1195 [ 131.246547][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1199'. [ 131.360079][T10248] binder: BC_ACQUIRE_RESULT not supported [ 131.362156][T10248] binder: 10247:10248 ioctl c0306201 2000000001c0 returned -22 [ 131.447043][T10254] overlayfs: failed to clone upperpath [ 131.532330][T10264] Context (ID=0x4d8) not attached to queue pair (handle=0x4d9:0x0) [ 131.843028][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 131.843044][ T40] audit: type=1400 audit(1760098768.937:36728): avc: denied { getopt } for pid=10296 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.039103][T10313] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 132.048784][T10313] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.221807][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.254027][T10318] macvlan0: left promiscuous mode [ 132.256064][T10318] macvlan0: left allmulticast mode [ 132.290897][T10318] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 132.327181][T10318] veth5: left promiscuous mode [ 132.339713][T10318] gretap1: left promiscuous mode [ 132.341576][ T7589] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.344539][ T7589] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.347373][ T7589] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.350099][ T7589] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.700076][ T40] audit: type=1400 audit(1760098769.797:36729): avc: denied { map } for pid=10326 comm="syz.3.1227" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 132.706428][T10327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1227'. [ 132.709466][ T40] audit: type=1400 audit(1760098769.797:36730): avc: denied { execute } for pid=10326 comm="syz.3.1227" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 132.713131][T10327] syz.3.1227 (10327) used obsolete PPPIOCDETACH ioctl [ 132.877399][T10330] netlink: 'syz.3.1228': attribute type 10 has an invalid length. [ 132.883877][T10330] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 132.964623][T10333] netlink: 'syz.2.1229': attribute type 11 has an invalid length. [ 133.087298][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 133.118584][T10343] sctp: [Deprecated]: syz.2.1233 (pid 10343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.118584][T10343] Use struct sctp_sack_info instead [ 133.177211][T10347] netlink: 'syz.2.1235': attribute type 19 has an invalid length. [ 133.180345][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 133.191168][ T7603] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.191283][T10347] netlink: 'syz.2.1235': attribute type 19 has an invalid length. [ 133.196751][ T7603] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.197631][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 133.200075][ T7603] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.206596][ T7603] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.221481][T10349] netlink: 'syz.4.1236': attribute type 7 has an invalid length. [ 133.264760][ T5945] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 133.303194][T10356] netlink: 'syz.2.1239': attribute type 21 has an invalid length. [ 133.309210][T10356] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1239'. [ 133.381129][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 133.388207][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 133.516494][T10378] netlink: 'syz.2.1246': attribute type 11 has an invalid length. [ 133.520267][T10378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1246'. [ 133.668897][ T40] audit: type=1400 audit(1760098770.767:36731): avc: denied { setopt } for pid=10389 comm="syz.2.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 134.083519][T10320] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 134.243704][T10320] usb 9-1: Using ep0 maxpacket: 8 [ 134.246666][T10320] usb 9-1: config 0 interface 0 has no altsetting 0 [ 134.248756][T10320] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.251541][T10320] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.260284][T10320] usb 9-1: config 0 descriptor?? [ 134.447797][T10433] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 134.464796][T10433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.476482][T10433] bond2: (slave ip6erspan0): making interface the new active one [ 134.480458][T10433] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 134.485546][T10436] No control pipe specified [ 134.590926][T10446] overlayfs: failed to clone upperpath [ 134.595295][ T5945] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 134.598287][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 134.666557][T10320] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 134.668767][T10320] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 134.670969][T10320] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 134.673481][T10320] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 134.675686][T10320] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 134.678187][T10320] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 134.726317][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 134.866726][ T40] audit: type=1400 audit(1760098771.967:36732): avc: denied { bind } for pid=10412 comm="syz.4.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 134.883696][T10413] block device autoloading is deprecated and will be removed. [ 134.887973][ T40] audit: type=1400 audit(1760098771.987:36733): avc: denied { ioctl } for pid=10468 comm="syz.2.1276" path="socket:[32379]" dev="sockfs" ino=32379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.906594][ T840] usb 9-1: USB disconnect, device number 3 [ 135.785976][ T40] audit: type=1400 audit(1760098772.887:36734): avc: denied { read write } for pid=10499 comm="syz.4.1286" name="file1" dev="9p" ino=71827837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.796184][ T40] audit: type=1400 audit(1760098772.887:36735): avc: denied { open } for pid=10499 comm="syz.4.1286" path="/130/file0/file1" dev="9p" ino=71827837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.869481][T10502] 9pnet_virtio: no channels available for device syz [ 136.847174][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 136.955109][ T40] audit: type=1400 audit(1760098774.057:36736): avc: denied { ioctl } for pid=10514 comm="syz.4.1289" path="socket:[33992]" dev="sockfs" ino=33992 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.062381][T10522] gfs2: error -5 reading superblock [ 137.489511][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1297'. [ 137.682423][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 137.731728][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 137.736719][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 137.742770][T10565] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 137.746035][T10565] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 137.749399][T10565] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 137.752560][T10565] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 137.800740][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1306'. [ 137.804323][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 137.917818][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.988920][T10596] sctp: [Deprecated]: syz.4.1315 (pid 10596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.988920][T10596] Use struct sctp_sack_info instead [ 138.001987][T10599] sctp: [Deprecated]: syz.4.1315 (pid 10599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.001987][T10599] Use struct sctp_sack_info instead [ 138.015844][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 138.071704][T10605] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 138.140992][T10612] IPVS: Scheduler module ip_vs_sip not found [ 138.481995][T10631] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1322'. [ 138.724111][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1327'. [ 138.757711][T10645] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.761473][T10645] bridge_slave_1: left allmulticast mode [ 138.763666][T10645] bridge_slave_1: left promiscuous mode [ 138.765680][T10645] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.770526][T10645] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 139.134789][ T40] audit: type=1326 audit(1760623064.239:36737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10665 comm="syz.2.1334" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f835f98eec9 code=0x0 [ 139.232232][T10669] usb usb8: usbfs: process 10669 (syz.3.1335) did not claim interface 0 before use [ 139.265466][T10672] bond1: option downdelay: invalid value (18446744073709551615) [ 139.268780][T10672] bond1: option downdelay: allowed values 0 - 2147483647 [ 139.273615][T10672] bond1 (unregistering): Released all slaves [ 139.692662][T10692] openvswitch: netlink: Message has 512 unknown bytes. [ 139.833058][ T840] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 139.994580][ T840] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.998947][ T840] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.005888][ T840] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.009644][ T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.046620][T10708] team0: Port device team_slave_0 removed [ 140.219930][ T840] usb 9-1: usb_control_msg returned -32 [ 140.222199][ T40] audit: type=1400 audit(1760623065.319:36738): avc: denied { mount } for pid=10687 comm="syz.4.1340" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 140.222310][ T840] usbtmc 9-1:16.0: can't read capabilities [ 140.240805][ T840] usb 9-1: USB disconnect, device number 4 [ 140.402412][ T40] audit: type=1400 audit(1760623065.499:36739): avc: denied { getattr } for pid=10732 comm="syz.2.1353" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=35038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.632361][T10749] GUP no longer grows the stack in syz.4.1350 (10749): 200000007000-20000000a000 (200000004000) [ 140.638279][T10749] CPU: 2 UID: 0 PID: 10749 Comm: syz.4.1350 Not tainted syzkaller #0 PREEMPT(full) [ 140.638307][T10749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.638318][T10749] Call Trace: [ 140.638325][T10749] [ 140.638332][T10749] dump_stack_lvl+0x16c/0x1f0 [ 140.638375][T10749] gup_vma_lookup+0x1d2/0x220 [ 140.638397][T10749] __get_user_pages+0x241/0x3530 [ 140.638426][T10749] ? do_sock_setsockopt+0xf0/0x1d0 [ 140.638445][T10749] ? __sys_setsockopt+0x1a0/0x230 [ 140.638469][T10749] ? __x64_sys_setsockopt+0xbd/0x160 [ 140.638492][T10749] ? do_syscall_64+0xcd/0xfa0 [ 140.638518][T10749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.638536][T10749] ? __pfx___get_user_pages+0x10/0x10 [ 140.638565][T10749] __gup_longterm_locked+0x2dd/0x17e0 [ 140.638587][T10749] ? __lock_acquire+0xac0/0x1ce0 [ 140.638621][T10749] ? __pfx___gup_longterm_locked+0x10/0x10 [ 140.638657][T10749] pin_user_pages+0x13c/0x160 [ 140.638679][T10749] ? __pfx_pin_user_pages+0x10/0x10 [ 140.638699][T10749] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 140.638720][T10749] ? xdp_umem_create+0x657/0x1270 [ 140.638750][T10749] xdp_umem_create+0x741/0x1270 [ 140.638782][T10749] xsk_setsockopt+0x6db/0x9a0 [ 140.638805][T10749] ? __pfx_xsk_setsockopt+0x10/0x10 [ 140.638827][T10749] ? find_held_lock+0x2b/0x80 [ 140.638854][T10749] ? selinux_socket_setsockopt+0x6a/0x80 [ 140.638895][T10749] ? __pfx_xsk_setsockopt+0x10/0x10 [ 140.638920][T10749] do_sock_setsockopt+0xf0/0x1d0 [ 140.638943][T10749] __sys_setsockopt+0x1a0/0x230 [ 140.638974][T10749] __x64_sys_setsockopt+0xbd/0x160 [ 140.638999][T10749] ? do_syscall_64+0x91/0xfa0 [ 140.639024][T10749] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.639051][T10749] do_syscall_64+0xcd/0xfa0 [ 140.639080][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.639098][T10749] RIP: 0033:0x7f39ea38eec9 [ 140.639113][T10749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.639131][T10749] RSP: 002b:00007f39eb279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.639150][T10749] RAX: ffffffffffffffda RBX: 00007f39ea5e6270 RCX: 00007f39ea38eec9 [ 140.639189][T10749] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000a [ 140.639201][T10749] RBP: 00007f39ea411f91 R08: 0000000000000020 R09: 0000000000000000 [ 140.639213][T10749] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 140.639224][T10749] R13: 00007f39ea5e6308 R14: 00007f39ea5e6270 R15: 00007fff503cd4d8 [ 140.639253][T10749] [ 140.639682][ T40] audit: type=1400 audit(1760623065.739:36740): avc: denied { read } for pid=10750 comm="syz.2.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.744267][T10763] netlink: 'syz.0.1361': attribute type 1 has an invalid length. [ 140.745046][ T40] audit: type=1400 audit(1760623065.829:36741): avc: denied { read } for pid=10759 comm="syz.2.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.746215][T10763] netlink: 'syz.0.1361': attribute type 101 has an invalid length. [ 140.770014][T10763] netlink: 'syz.0.1361': attribute type 21 has an invalid length. [ 140.824743][ T24] libceph: connect (1)[c::]:6789 error -101 [ 140.827832][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 140.914424][ T40] audit: type=1400 audit(1760623066.019:36742): avc: denied { create } for pid=10765 comm="syz.0.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 140.921985][ T40] audit: type=1400 audit(1760623066.019:36743): avc: denied { getopt } for pid=10765 comm="syz.0.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 140.923227][T10770] 9p: Unknown access argument 00000000004294967295vs6T(Y>HN~s!L}\؇q+<7(Rx3*II[7: -22 [ 141.095109][ T24] libceph: connect (1)[c::]:6789 error -101 [ 141.097350][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 141.361551][T10776] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 141.365430][T10776] xt_hashlimit: overflow, rate too high: 0 [ 141.386132][T10776] XFS (nullb0): Invalid superblock magic number [ 141.460838][T10783] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 141.463350][T10783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.466695][T10783] vhci_hcd vhci_hcd.0: Device attached [ 141.473567][T10784] vhci_hcd: cannot find a urb of seqnum 512 max seqnum 0 [ 141.476835][ T7596] vhci_hcd: stop threads [ 141.478519][ T7596] vhci_hcd: release socket [ 141.480394][ T7596] vhci_hcd: disconnect device [ 141.489591][T10783] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 141.613306][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 141.615311][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 141.640584][T10766] ceph: No mds server is up or the cluster is laggy [ 141.943116][ T6021] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.036714][T10799] loop7: detected capacity change from 0 to 7 [ 142.115180][ T6021] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.118852][ T6021] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 142.123433][ T6021] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.126897][ T6021] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.131670][ T6021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 142.135702][ T6021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.140625][ T6021] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.144355][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.147500][ T6021] usb 5-1: Product: syz [ 142.149195][ T6021] usb 5-1: Manufacturer: syz [ 142.154365][T10789] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.158271][ T6021] cdc_wdm 5-1:1.0: skipping garbage [ 142.159977][ T6021] cdc_wdm 5-1:1.0: skipping garbage [ 142.162711][ T6021] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 142.165279][ T6021] cdc_wdm 5-1:1.0: Unknown control protocol [ 142.187138][ T6061] Dev loop7: unable to read RDB block 7 [ 142.189155][ T6061] loop7: unable to read partition table [ 142.191051][ T6061] loop7: partition table beyond EOD, truncated [ 142.275035][ T40] audit: type=1400 audit(1760623067.379:36744): avc: denied { getattr } for pid=10801 comm="syz.3.1373" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.282678][ T40] audit: type=1400 audit(1760623067.379:36745): avc: denied { ioctl } for pid=10801 comm="syz.3.1373" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.318550][T10808] __nla_validate_parse: 8 callbacks suppressed [ 142.318567][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1374'. [ 142.324462][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1374'. [ 142.339527][T10799] Dev loop7: unable to read RDB block 7 [ 142.342007][T10799] loop7: unable to read partition table [ 142.345077][T10799] loop7: partition table beyond EOD, truncated [ 142.349148][T10799] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 142.362311][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 142.369582][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.370756][ T40] audit: type=1400 audit(1760623067.469:36746): avc: denied { read write } for pid=10788 comm="syz.0.1368" name="cdc-wdm0" dev="devtmpfs" ino=3288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 142.372221][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.381969][ T40] audit: type=1400 audit(1760623067.469:36747): avc: denied { open } for pid=10788 comm="syz.0.1368" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 142.384997][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.396787][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.398409][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.402043][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.404707][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.404725][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.404969][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.409073][T10811] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1376'. [ 142.409774][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.413692][ T5983] usb 5-1: USB disconnect, device number 14 [ 142.415243][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 142.591609][T10824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1380'. [ 142.594933][T10825] comedi comedi3: comedi_config --init_data is deprecated [ 142.599757][T10825] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1381'. [ 142.625368][T10825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.632903][T10827] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 142.637562][T10825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.638218][T10828] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 142.648366][T10825] bond0 (unregistering): (slave bond1): Releasing backup interface [ 142.656404][T10825] bond0 (unregistering): Released all slaves [ 142.685006][T10830] netlink: 'syz.4.1383': attribute type 4 has an invalid length. [ 142.688224][T10830] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1383'. [ 142.740893][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1384'. [ 142.791004][ T40] audit: type=1400 audit(1760623067.889:36748): avc: denied { append } for pid=10836 comm="syz.4.1386" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.865934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.882844][T10848] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 142.882879][ T40] audit: type=1400 audit(1760623067.979:36749): avc: denied { read } for pid=10847 comm="syz.4.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.063189][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1391'. [ 143.463083][ T840] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 143.624732][ T840] usb 5-1: config 0 has no interfaces? [ 143.626566][ T840] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 143.629575][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.633881][ T840] usb 5-1: config 0 descriptor?? [ 143.740428][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 143.779767][T10876] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 143.781776][T10876] PKCS7: Only support pkcs7_signedData type [ 143.796861][T10876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10876 comm=syz.2.1396 [ 143.838923][ T53] usb 5-1: USB disconnect, device number 15 [ 143.895019][ T40] audit: type=1400 audit(1760623068.999:36750): avc: denied { ioctl } for pid=10885 comm="syz.3.1399" path="socket:[36882]" dev="sockfs" ino=36882 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.028406][ T40] audit: type=1400 audit(1760623069.129:36751): avc: denied { block_suspend } for pid=10887 comm="syz.2.1400" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.086468][T10896] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.178372][T10898] geneve2: entered promiscuous mode [ 144.180381][T10898] geneve2: entered allmulticast mode [ 144.313093][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.352621][T10904] ceph: Path missing in source [ 144.358787][ T40] audit: type=1400 audit(1760623069.459:36752): avc: denied { execute } for pid=10900 comm="syz.3.1405" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.742042][T10926] netlink: 'syz.4.1413': attribute type 2 has an invalid length. [ 144.836102][T10932] qnx6: unable to set blocksize [ 144.923185][ T53] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 145.084048][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 145.086923][ T53] usb 5-1: too many configurations: 236, using maximum allowed: 8 [ 145.091876][ T53] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 145.095353][ T53] usb 5-1: can't read configurations, error -61 [ 145.213410][ T841] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 145.223571][ T53] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 145.363320][ T841] usb 9-1: Using ep0 maxpacket: 16 [ 145.367176][ T841] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 32 [ 145.371149][ T841] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.376588][ T841] usb 9-1: config 1 interface 0 has no altsetting 0 [ 145.382599][ T841] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 145.386367][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 145.388501][ T841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.391974][ T841] usb 9-1: Product: syz [ 145.394060][ T841] usb 9-1: Manufacturer: syz [ 145.395974][ T841] usb 9-1: SerialNumber: syz [ 145.399244][ T53] usb 5-1: too many configurations: 236, using maximum allowed: 8 [ 145.404663][ T53] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 145.407944][ T53] usb 5-1: can't read configurations, error -61 [ 145.411767][ T53] usb usb5-port1: attempt power cycle [ 145.412181][T10942] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 145.624690][ T841] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 145.763105][ T53] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 145.784205][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 145.788596][ T53] usb 5-1: too many configurations: 236, using maximum allowed: 8 [ 145.793471][ T40] audit: type=1400 audit(1760623070.899:36753): avc: denied { write } for pid=10947 comm="syz.2.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.801595][ T53] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 145.805049][ T53] usb 5-1: can't read configurations, error -61 [ 145.933331][ T53] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 145.974137][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 145.977346][ T53] usb 5-1: too many configurations: 236, using maximum allowed: 8 [ 145.981976][ T53] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 145.986069][ T53] usb 5-1: can't read configurations, error -61 [ 145.990014][ T53] usb usb5-port1: unable to enumerate USB device [ 146.198573][ T840] usb 9-1: USB disconnect, device number 5 [ 146.203986][ T840] usblp0: removed [ 147.010072][T10974] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.180665][T10979] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.184913][T10979] block device autoloading is deprecated and will be removed. [ 147.268603][T10978] md: could not open device unknown-block(0,0). [ 147.271681][T10978] md: md_import_device returned -6 [ 147.415470][T10994] __nla_validate_parse: 5 callbacks suppressed [ 147.415486][T10994] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1434'. [ 147.471234][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 147.517217][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 147.517234][ T40] audit: type=1400 audit(1760623072.619:36760): avc: denied { ioctl } for pid=11010 comm="syz.2.1442" path="socket:[36991]" dev="sockfs" ino=36991 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 147.521287][T11013] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1442'. [ 147.530233][ T40] audit: type=1400 audit(1760623072.619:36761): avc: denied { write } for pid=11010 comm="syz.2.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 147.558536][T11017] hpfs: hpfs_map_sector(): read error [ 147.633911][T11040] tmpfs: Unknown parameter '' [ 147.662926][T11043] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1451'. [ 147.695465][ T40] audit: type=1400 audit(1760623072.799:36762): avc: denied { read } for pid=11048 comm="syz.2.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.820460][ T40] audit: type=1400 audit(1760623072.919:36763): avc: denied { bind } for pid=11056 comm="syz.4.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.828544][T11061] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1457'. [ 147.830131][T11061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11061 comm=syz.0.1457 [ 147.831575][ T40] audit: type=1400 audit(1760623072.919:36764): avc: denied { connect } for pid=11056 comm="syz.4.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.933591][ T40] audit: type=1400 audit(1760623073.039:36765): avc: denied { node_bind } for pid=11074 comm="syz.2.1462" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 147.935504][T11075] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.940341][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 147.941083][T11077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11077 comm=syz.4.1463 [ 147.982110][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1464'. [ 148.026179][T11086] overlayfs: unescaped trailing colons in lowerdir mount option. [ 148.030385][T11086] netlink: 'syz.0.1466': attribute type 1 has an invalid length. [ 148.042195][T11089] netlink: 'syz.4.1467': attribute type 4 has an invalid length. [ 148.045790][T11089] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1467'. [ 148.057189][T11086] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 148.060984][T11086] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 148.074928][T11089] .`: renamed from bond0 (while UP) [ 148.107368][T11090] gretap1: entered promiscuous mode [ 148.156457][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 148.186380][T11098] usb usb8: usbfs: process 11098 (syz.0.1469) did not claim interface 0 before use [ 149.000405][T11110] veth0_to_bond: entered allmulticast mode [ 149.421772][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 149.663096][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.663136][ T65] Bluetooth: hci4: command 0x1003 tx timeout [ 149.694828][T11152] netlink: 'syz.2.1485': attribute type 20 has an invalid length. [ 149.697649][T11152] netlink: 'syz.2.1485': attribute type 20 has an invalid length. [ 149.789235][ T40] audit: type=1400 audit(1760623074.889:36766): avc: denied { connect } for pid=11157 comm="syz.2.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.847753][T11164] SELinux: ebitmap: truncated map [ 149.853528][T11164] SELinux: failed to load policy [ 149.926668][T11169] netlink: 'syz.2.1488': attribute type 21 has an invalid length. [ 149.972206][T11179] 9pnet_fd: Insufficient options for proto=fd [ 150.101955][T11194] kvm: user requested TSC rate below hardware speed [ 150.272853][ T40] audit: type=1400 audit(1760623075.369:36767): avc: denied { getopt } for pid=11204 comm="syz.0.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.357004][T11216] netlink: 'syz.0.1507': attribute type 29 has an invalid length. [ 151.037114][T11277] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 151.041645][ T40] audit: type=1400 audit(1760623076.139:36768): avc: denied { relabelto } for pid=11275 comm="syz.2.1524" name="500" dev="tmpfs" ino=2669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 151.051895][ T40] audit: type=1400 audit(1760623076.139:36769): avc: denied { associate } for pid=11275 comm="syz.2.1524" name="500" dev="tmpfs" ino=2669 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 151.350730][T11300] XFS (nullb0): Invalid superblock magic number [ 151.533484][T11316] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 151.537255][T11316] binder: 11315:11316 ioctl c0306201 2000000003c0 returned -14 [ 151.576474][T11321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.743193][T11329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.745970][T11330] netlink: 'syz.3.1537': attribute type 64 has an invalid length. [ 151.748359][T11330] netlink: 'syz.3.1537': attribute type 4 has an invalid length. [ 151.844843][T11329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.862596][T11332] xt_ecn: cannot match TCP bits for non-tcp packets [ 152.195041][T11362] syzkaller1: entered promiscuous mode [ 152.197389][T11362] syzkaller1: entered allmulticast mode [ 152.372838][T10321] libceph: connect (1)[c::]:6789 error -22 [ 152.375783][T10321] libceph: mon0 (1)[c::]:6789 connect error [ 152.416271][T11366] ceph: No mds server is up or the cluster is laggy [ 153.039549][T11388] syzkaller0: entered promiscuous mode [ 153.041643][T11388] syzkaller0: entered allmulticast mode [ 153.185705][T11390] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001 [ 153.247733][T11395] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 153.255750][T11395] libceph: resolve '40' (ret=-3): failed [ 153.255866][T11396] libceph: resolve '40' (ret=-3): failed [ 153.311957][T11405] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 153.319150][T11406] lo speed is unknown, defaulting to 1000 [ 153.322231][T11410] __nla_validate_parse: 13 callbacks suppressed [ 153.322246][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 153.322496][T11406] lo speed is unknown, defaulting to 1000 [ 153.339108][T11406] lo speed is unknown, defaulting to 1000 [ 153.355523][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1564'. [ 153.360608][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1564'. [ 153.443544][ T40] audit: type=1326 audit(1760623078.549:36770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11422 comm="syz.0.1568" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b8a78eec9 code=0x0 [ 153.457640][T11406] infiniband syz0: set active [ 153.459886][T11406] infiniband syz0: added lo [ 153.460400][ T840] lo speed is unknown, defaulting to 1000 [ 153.465124][T11429] tipc: Started in network mode [ 153.466756][T11429] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 153.469121][T11429] tipc: Enabled bearer , priority 0 [ 153.489372][T11406] RDS/IB: syz0: added [ 153.491115][T11406] smc: adding ib device syz0 with port count 1 [ 153.493161][T11406] smc: ib device syz0 port 1 has no pnetid [ 153.494354][T11432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1571'. [ 153.496741][ T6021] lo speed is unknown, defaulting to 1000 [ 153.513347][T11406] lo speed is unknown, defaulting to 1000 [ 153.618581][T11406] lo speed is unknown, defaulting to 1000 [ 153.635249][T11447] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 153.653899][T11447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.663455][ T40] audit: type=1400 audit(1760623078.759:36771): avc: denied { create } for pid=11451 comm="syz.4.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.664711][T11449] bond3: (slave geneve2): making interface the new active one [ 153.673575][T11449] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 153.676895][ T7597] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.681191][ T7597] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.684584][ T7597] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.687451][ T7597] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.718407][T11406] lo speed is unknown, defaulting to 1000 [ 153.728427][T11458] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 153.809986][T11406] lo speed is unknown, defaulting to 1000 [ 154.108976][ T40] audit: type=1400 audit(1760623079.209:36772): avc: denied { read } for pid=11467 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.351461][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 154.431232][ T40] audit: type=1400 audit(1760623079.529:36773): avc: denied { append } for pid=11481 comm="syz.0.1584" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 154.463509][ T6020] tipc: Node number set to 11578026 [ 154.512331][ T40] audit: type=1400 audit(1760623079.609:36774): avc: denied { bind } for pid=11486 comm="syz.0.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.574769][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 154.602616][ T40] audit: type=1400 audit(1760623079.699:36775): avc: denied { listen } for pid=11495 comm="syz.2.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.639857][T11500] lo speed is unknown, defaulting to 1000 [ 154.722410][T11514] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 154.760756][T11517] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 154.763297][T11517] overlayfs: failed to set xattr on upper [ 154.765101][T11517] overlayfs: ...falling back to redirect_dir=nofollow. [ 154.768922][T11517] overlayfs: ...falling back to index=off. [ 154.770774][T11517] overlayfs: ...falling back to uuid=null. [ 154.774834][T11519] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 154.775487][T11517] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 154.777092][T11519] overlayfs: failed to set xattr on upper [ 154.777116][T11519] overlayfs: ...falling back to redirect_dir=nofollow. [ 154.777120][T11519] overlayfs: ...falling back to index=off. [ 154.777124][T11519] overlayfs: ...falling back to uuid=null. [ 155.024774][T11547] Illegal XDP return value 8824145 on prog (id 323) dev N/A, expect packet loss! [ 155.038460][T11547] netlink: 964 bytes leftover after parsing attributes in process `syz.2.1601'. [ 155.041259][T11547] openvswitch: netlink: Flow key attr not present in new flow. [ 155.095672][ T6020] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 155.197137][T11573] binder: 11572:11573 ioctl 40187542 0 returned -22 [ 155.254502][ T40] audit: type=1400 audit(1760623080.359:36776): avc: denied { accept } for pid=11581 comm="syz.3.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 155.254694][ T6020] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.264781][ T6020] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.267721][ T6020] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 155.271165][ T6020] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 155.274236][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.278361][T11526] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.281576][ T6020] hub 5-1:1.0: bad descriptor, ignoring hub [ 155.284181][ T6020] hub 5-1:1.0: probe with driver hub failed with error -5 [ 155.286620][ T6020] cdc_wdm 5-1:1.0: skipping garbage [ 155.288273][ T6020] cdc_wdm 5-1:1.0: skipping garbage [ 155.290774][ T6020] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 155.292643][ T6020] cdc_wdm 5-1:1.0: Unknown control protocol [ 155.355772][ T5945] block nbd1: Receive control failed (result -32) [ 155.393464][T11596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11596 comm=syz.4.1616 [ 155.399598][T11596] exFAT-fs (nullb0): invalid boot record signature [ 155.402233][T11596] exFAT-fs (nullb0): failed to read boot sector [ 155.405961][T11596] exFAT-fs (nullb0): failed to recognize exfat type [ 155.451594][T11598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1615'. [ 155.556566][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.558692][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.568461][T11613] only policy match revision 0 supported [ 155.568478][T11613] unable to load match [ 155.590930][T11526] overlayfs: failed to resolve './file1/file0': -2 [ 155.595663][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.598528][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.665942][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.668036][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.875510][T10321] usb 5-1: USB disconnect, device number 20 [ 156.081206][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 156.085029][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 156.088695][T11619] netlink: 'syz.2.1621': attribute type 18 has an invalid length. [ 156.091596][T11619] netlink: 'syz.2.1621': attribute type 18 has an invalid length. [ 156.306179][T11626] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 156.344823][ T40] audit: type=1400 audit(1760623081.449:36777): avc: denied { map } for pid=11627 comm="syz.3.1625" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 156.354887][ T40] audit: type=1400 audit(1760623081.449:36778): avc: denied { execute } for pid=11627 comm="syz.3.1625" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 156.475508][T11643] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 156.478298][T11643] overlayfs: failed to set xattr on upper [ 156.480450][T11643] overlayfs: ...falling back to redirect_dir=nofollow. [ 156.486684][T11643] overlayfs: ...falling back to metacopy=off. [ 156.489171][T11643] overlayfs: ...falling back to index=off. [ 156.491349][T11643] overlayfs: ...falling back to uuid=null. [ 156.499041][T11648] syzkaller0: entered promiscuous mode [ 156.501257][T11648] syzkaller0: entered allmulticast mode [ 156.556356][ T40] audit: type=1400 audit(1760623081.659:36779): avc: denied { remount } for pid=11651 comm="syz.4.1635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 156.615127][T11658] netlink: 'syz.4.1637': attribute type 5 has an invalid length. [ 157.893619][T11681] /dev/sr0: Can't open blockdev [ 160.224346][ T5945] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 160.227280][ T5945] Bluetooth: hci0: Injecting HCI hardware error event [ 160.231859][ T65] Bluetooth: hci0: hardware error 0x00 [ 162.303337][ T65] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 170.543562][T11703] syz_tun: entered allmulticast mode [ 170.553043][T11703] can0: slcan on ttyS3. [ 170.606246][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 170.606260][ T40] audit: type=1400 audit(1760623095.709:36782): avc: denied { listen } for pid=11714 comm="syz.0.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.646494][T11703] can0 (unregistered): slcan off ttyS3. [ 170.675495][T11703] __nla_validate_parse: 5 callbacks suppressed [ 170.675506][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 170.697936][T11703] syz_tun (unregistering): left allmulticast mode [ 170.710483][T11728] overlayfs: failed to clone upperpath [ 170.768924][ T40] audit: type=1400 audit(1760623095.869:36783): avc: denied { listen } for pid=11720 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 170.804885][ T40] audit: type=1400 audit(1760623095.909:36784): avc: denied { allowed } for pid=11740 comm="syz.4.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.013889][T11760] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 171.469429][T11790] netlink: 'syz.3.1670': attribute type 2 has an invalid length. [ 171.533071][T11797] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1672'. [ 171.653882][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 171.734464][T11819] fuse: Bad value for 'user_id' [ 171.736068][T11819] fuse: Bad value for 'user_id' [ 172.051054][ T40] audit: type=1400 audit(1760623097.149:36785): avc: denied { create } for pid=11822 comm="syz.4.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 172.052081][T11825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1681'. [ 172.093012][ T40] audit: type=1400 audit(1760623097.189:36786): avc: denied { read } for pid=11826 comm="syz.4.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.341951][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1684'. [ 172.351742][T11834] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 172.400498][T11836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61970 sclass=netlink_route_socket pid=11836 comm=syz.4.1685 [ 172.437676][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1687'. [ 172.539196][T11841] macvlan2: left promiscuous mode [ 172.541059][T11841] macvlan2: left allmulticast mode [ 172.544099][T11841] xfrm1: left allmulticast mode [ 172.549960][ T7611] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.552680][ T7611] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.556925][ T7611] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.560025][ T7611] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.562518][ T7611] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.565282][ T7611] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.567891][ T7611] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.570522][ T7611] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.586729][T11850] ipvlan3: entered allmulticast mode [ 172.588452][T11850] team0: entered allmulticast mode [ 172.589955][T11850] team_slave_1: entered allmulticast mode [ 172.591814][T11850] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 172.649253][T11860] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1691'. [ 172.651657][T11859] loop7: detected capacity change from 0 to 7 [ 173.099572][T11881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.102050][T11881] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 173.114905][T11881] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.116905][T11881] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 173.154518][T11881] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.156452][T11881] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 173.328625][ T40] audit: type=1400 audit(1760623098.429:36787): avc: denied { accept } for pid=11911 comm="syz.4.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.357119][ T40] audit: type=1400 audit(1760623098.459:36788): avc: denied { sqpoll } for pid=11914 comm="syz.4.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 173.403746][ T40] audit: type=1400 audit(1760623098.509:36789): avc: denied { append } for pid=11917 comm="syz.4.1703" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 173.986878][T11946] hfsplus: unable to find HFS+ superblock [ 174.123739][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'. [ 174.871051][T12020] overlayfs: failed to resolve 'verity=require': -2 [ 174.956123][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 174.960029][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 174.999891][T12045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=12045 comm=syz.4.1741 [ 175.032437][ T40] audit: type=1400 audit(1760623100.129:36790): avc: denied { read write } for pid=7797 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.040450][ T40] audit: type=1400 audit(1760623100.129:36791): avc: denied { open } for pid=7797 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.116012][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.136637][ T53] lo speed is unknown, defaulting to 1000 [ 175.267470][T12080] netlink: 'syz.0.1752': attribute type 17 has an invalid length. [ 175.270899][T12080] macvtap0: entered allmulticast mode [ 175.273330][T12080] veth0_macvtap: entered allmulticast mode [ 175.277173][T12080] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 175.359896][T12090] exFAT-fs (nullb0): invalid boot record signature [ 175.362657][T12090] exFAT-fs (nullb0): failed to read boot sector [ 175.365507][T12090] exFAT-fs (nullb0): failed to recognize exfat type [ 175.423130][ C0] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 175.426635][ C0] sr 2:0:0:0: [sr0] tag#24 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 175.436454][T12090] netlink: 'syz.0.1754': attribute type 4 has an invalid length. [ 175.442127][T12090] netlink: 'syz.0.1754': attribute type 4 has an invalid length. [ 175.449694][T12090] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 175.653484][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 175.653495][ T40] audit: type=1400 audit(1760623100.759:36870): avc: denied { create } for pid=12117 comm="syz.0.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.666004][ T40] audit: type=1400 audit(1760623100.769:36871): avc: denied { read } for pid=12119 comm="syz.2.1764" path="socket:[41424]" dev="sockfs" ino=41424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.682551][ T40] audit: type=1400 audit(1760623100.779:36872): avc: denied { bind } for pid=12122 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.689493][ T40] audit: type=1400 audit(1760623100.779:36873): avc: denied { connect } for pid=12122 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.703051][ T40] audit: type=1400 audit(1760623100.789:36874): avc: denied { ioctl } for pid=12122 comm="syz.0.1766" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=38866 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.755602][ T40] audit: type=1400 audit(1760623100.859:36875): avc: denied { map_read map_write } for pid=12122 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.811399][ T40] audit: type=1400 audit(1760623100.909:36876): avc: denied { ioctl } for pid=12139 comm="syz.2.1770" path="socket:[38873]" dev="sockfs" ino=38873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.863658][ T40] audit: type=1400 audit(1760623100.969:36877): avc: denied { unmount } for pid=7797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 175.883502][ T40] audit: type=1400 audit(1760623100.989:36878): avc: denied { read } for pid=12146 comm="syz.0.1772" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 175.890756][ T40] audit: type=1400 audit(1760623100.989:36879): avc: denied { open } for pid=12146 comm="syz.0.1772" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 176.002874][T12162] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 176.292256][T12185] __nla_validate_parse: 4 callbacks suppressed [ 176.292273][T12185] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1785'. [ 176.796133][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 176.862172][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 177.586520][T12240] netlink: 'syz.2.1801': attribute type 10 has an invalid length. [ 177.615889][T12242] netlink: 'syz.2.1802': attribute type 4 has an invalid length. [ 177.621916][T12242] netlink: 'syz.2.1802': attribute type 4 has an invalid length. [ 177.653042][ T5983] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 177.803156][ T5983] usb 9-1: Using ep0 maxpacket: 8 [ 177.812219][T12245] netlink: 'syz.0.1804': attribute type 4 has an invalid length. [ 177.814879][T12245] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1804'. [ 177.819307][T12245] .`: renamed from bond0 [ 177.819942][ T5983] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 177.825132][ T5983] usb 9-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 177.828834][ T5983] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.832431][ T5983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.836904][T12245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1391 sclass=netlink_route_socket pid=12245 comm=syz.0.1804 [ 177.874057][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.881404][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.886318][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.890098][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.895498][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.905737][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.908149][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.910506][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.914374][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.917733][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.947918][T12246] lo speed is unknown, defaulting to 1000 [ 178.150130][T12246] chnl_net:caif_netlink_parms(): no params data found [ 178.231624][ T7602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.233304][ T7923] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 178.237897][ T7602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.316685][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.319731][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.325809][T12246] bridge_slave_0: entered allmulticast mode [ 178.329672][T12246] bridge_slave_0: entered promiscuous mode [ 178.345008][ T7602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.349259][ T7602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.358758][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.361619][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.376388][T12246] bridge_slave_1: entered allmulticast mode [ 178.380299][T12246] bridge_slave_1: entered promiscuous mode [ 178.398218][ T7923] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 178.401966][ T7923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.405535][ T7923] usb 5-1: Product: syz [ 178.407214][ T7923] usb 5-1: Manufacturer: syz [ 178.409081][ T7923] usb 5-1: SerialNumber: syz [ 178.439540][ T7602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.443630][ T7602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.508553][ T7602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.512403][ T7602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.526224][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.534601][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.732717][T12246] team0: Port device team_slave_0 added [ 178.740830][T12246] team0: Port device team_slave_1 added [ 178.824662][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.827229][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.838353][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.857662][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.857936][ T7923] rtl8150 5-1:1.0: couldn't reset the device [ 178.860696][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.862661][ T7923] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 178.874008][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.880638][ T7923] usb 5-1: USB disconnect, device number 21 [ 178.890685][ T7602] bridge_slave_1: left allmulticast mode [ 178.892547][ T7602] bridge_slave_1: left promiscuous mode [ 178.894625][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.899549][ T7602] bridge_slave_0: left allmulticast mode [ 178.901315][ T7602] bridge_slave_0: left promiscuous mode [ 178.903604][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.949686][ T7602] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 179.048651][ T7602] bond3 (unregistering): (slave geneve2): Releasing active interface [ 179.363863][ T7602] bond0 (unregistering): Released all slaves [ 179.433704][ T7602] bond1 (unregistering): Released all slaves [ 179.501969][ T7602] bond2 (unregistering): Released all slaves [ 179.577117][ T7602] bond3 (unregistering): Released all slaves [ 179.593064][ T6021] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 179.618145][T12246] hsr_slave_0: entered promiscuous mode [ 179.620515][T12246] hsr_slave_1: entered promiscuous mode [ 179.659799][ T7602] tipc: Disabling bearer [ 179.663405][ T7602] tipc: Left network mode [ 179.763054][ T6021] usb 5-1: Using ep0 maxpacket: 8 [ 179.766354][ T6021] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 179.769815][ T6021] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 179.772900][ T6021] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.776127][ T6021] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.780122][ T6021] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 179.782994][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.984067][ T5945] Bluetooth: hci4: command tx timeout [ 179.988694][ T6021] usb 5-1: GET_CAPABILITIES returned 0 [ 179.990972][ T6021] usbtmc 5-1:16.0: can't read capabilities [ 180.192869][ T53] usb 5-1: USB disconnect, device number 22 [ 180.301827][ T7602] hsr_slave_0: left promiscuous mode [ 180.304204][ T7602] hsr_slave_1: left promiscuous mode [ 180.306313][ T7602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.328491][ T7602] pimreg3 (unregistering): left allmulticast mode [ 180.338820][ T7602] pim6reg13 (unregistering): left allmulticast mode [ 180.413714][T10320] usb 9-1: USB disconnect, device number 6 [ 180.589116][T12311] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1814'. [ 180.602755][T12312] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1814'. [ 180.648723][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 180.780284][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 180.780295][ T40] audit: type=1400 audit(1760623105.879:36944): avc: denied { ioctl } for pid=12318 comm="syz.0.1817" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.782207][T12319] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1817'. [ 180.797479][ T40] audit: type=1400 audit(1760623105.899:36945): avc: denied { append } for pid=12318 comm="syz.0.1817" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.860240][ T40] audit: type=1400 audit(1760623105.959:36946): avc: denied { read } for pid=12318 comm="syz.0.1817" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 180.867588][ T40] audit: type=1400 audit(1760623105.959:36947): avc: denied { open } for pid=12318 comm="syz.0.1817" path="/459/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 180.945078][T12322] netlink: 'syz.0.1818': attribute type 5 has an invalid length. [ 181.464794][T12246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.471814][T12314] IPv6: sit2: Disabled Multicast RS [ 181.474099][T12314] sit2: entered allmulticast mode [ 181.486700][T12246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.493442][T12246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.499991][T12246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.519307][ T40] audit: type=1400 audit(1760623106.619:36948): avc: denied { create } for pid=12330 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.526724][ T40] audit: type=1400 audit(1760623106.619:36949): avc: denied { getopt } for pid=12330 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.568698][T12246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.572531][ T40] audit: type=1400 audit(1760623106.669:36950): avc: denied { unlink } for pid=12332 comm="syz.0.1820" name="#23" dev="tmpfs" ino=2477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 181.581774][T12333] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.583489][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.586005][ T40] audit: type=1400 audit(1760623106.679:36951): avc: denied { getattr } for pid=12332 comm="syz.0.1820" name="/" dev="9p" ino=71827647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 181.591962][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.598279][ T7611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.606899][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.609492][ T7611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.609976][ T40] audit: type=1400 audit(1760623106.709:36952): avc: denied { rename } for pid=12332 comm="syz.0.1820" name="file1" dev="overlay" ino=71827837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.620135][ T40] audit: type=1400 audit(1760623106.709:36953): avc: denied { unlink } for pid=12332 comm="syz.0.1820" name="file0" dev="overlay" ino=71827963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 181.718713][T12246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.740653][T12246] veth0_vlan: entered promiscuous mode [ 181.748427][T12246] veth1_vlan: entered promiscuous mode [ 181.762377][T12246] veth0_macvtap: entered promiscuous mode [ 181.770009][T12246] veth1_macvtap: entered promiscuous mode [ 181.790955][T12246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.797247][T12246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.804470][ T7595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.807582][ T7595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.811776][ T7595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.816033][ T7595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.853095][ T7586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.855778][ T7586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.875592][ T7611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.878079][ T7611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.932810][T12362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1828'. [ 181.956145][T11897] udevd[11897]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 182.027200][ T7602] IPVS: stop unused estimator thread 0... [ 182.055652][T12377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1803'. [ 182.063078][ T5945] Bluetooth: hci4: command tx timeout [ 182.095318][T12380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12380 comm=syz.0.1831 [ 182.349551][T12407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=12407 comm=syz.3.1838 [ 182.357009][T12407] netlink: 'syz.3.1838': attribute type 2 has an invalid length. [ 182.359483][T12407] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1838'. [ 182.362407][T12407] nbd: must specify a device to reconfigure [ 182.440539][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 182.842356][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'. [ 182.846273][T12416] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1841'. [ 182.849987][T12416] netlink: 'syz.0.1841': attribute type 3 has an invalid length. [ 182.854103][T12416] netlink: 'syz.0.1841': attribute type 2 has an invalid length. [ 182.858287][T12416] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1841'. [ 182.887928][T12424] binder: 12423:12424 ioctl c0306201 0 returned -14 [ 182.892227][T12425] binder: 12423:12425 ioctl c0306201 0 returned -14 [ 183.215393][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 183.292280][T12470] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1858'. [ 183.339932][ T840] Process accounting resumed [ 183.341977][T12476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1861'. [ 183.350924][T12476] SELinux: policydb version -1469912478 does not match my version range 15-35 [ 183.357521][T12476] SELinux: failed to load policy [ 183.424972][T12473] Process accounting resumed [ 183.875090][ T840] Process accounting resumed [ 183.879143][T12533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.890007][T12533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.947069][T12543] lo speed is unknown, defaulting to 1000 [ 184.143135][ T5945] Bluetooth: hci4: command tx timeout [ 184.673072][ T1029] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 184.833026][ T1029] usb 5-1: Using ep0 maxpacket: 8 [ 184.836649][ T1029] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.841789][ T1029] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.845826][ T1029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.849642][ T1029] usb 5-1: config 0 descriptor?? [ 184.882894][T12564] tipc: Enabled bearer , priority 4 [ 184.885420][T12564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12564 comm=syz.4.1889 [ 184.929873][T12571] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 185.021293][T12578] overlayfs: unescaped trailing colons in lowerdir mount option. [ 185.093864][T12582] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 185.117295][T12582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.150441][T12582] bond0: (slave veth3): Enslaving as an active interface with a down link [ 185.173852][T12582] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 185.176985][T12582] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 185.258169][ T1029] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 185.400621][T12585] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 185.437565][T12590] netlink: 'syz.4.1897': attribute type 1 has an invalid length. [ 185.440056][T12590] netlink: 'syz.4.1897': attribute type 4 has an invalid length. [ 185.870372][T12629] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 185.874878][T12629] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 185.879285][T12629] overlayfs: failed to get uuid (15/file0, err=-13); falling back to uuid=null. [ 185.917674][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 185.917689][ T40] audit: type=1400 audit(1760623111.019:37025): avc: denied { mounton } for pid=12632 comm="syz.2.1912" path="/16/file0" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.953371][T12640] netlink: 'syz.4.1914': attribute type 30 has an invalid length. [ 185.969739][ T7613] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.973341][ T7613] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.976627][ T7613] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.979997][ T7613] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.002029][ T40] audit: type=1400 audit(1760623111.099:37026): avc: denied { read } for pid=12643 comm="syz.4.1916" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.012184][ T40] audit: type=1400 audit(1760623111.099:37027): avc: denied { open } for pid=12643 comm="syz.4.1916" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.020193][ T40] audit: type=1400 audit(1760623111.099:37028): avc: denied { ioctl } for pid=12643 comm="syz.4.1916" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.114024][ T40] audit: type=1400 audit(1760623111.219:37029): avc: denied { create } for pid=12648 comm="syz.4.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 186.120074][ T40] audit: type=1400 audit(1760623111.219:37030): avc: denied { connect } for pid=12648 comm="syz.4.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 186.147528][ T40] audit: type=1400 audit(1760623111.249:37031): avc: denied { getopt } for pid=12652 comm="syz.4.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.186314][ T53] IPVS: starting estimator thread 0... [ 186.186792][T12658] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 186.280692][T12662] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 186.283045][T12659] IPVS: using max 43 ests per chain, 103200 per kthread [ 186.286228][T12662] block device autoloading is deprecated and will be removed. [ 186.289008][ T40] audit: type=1400 audit(1760623111.389:37032): avc: denied { ioctl } for pid=12660 comm="syz.4.1922" path="/333/file0/file0" dev="fuse" ino=64 ioctlcmd=0x922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 186.296509][ T40] audit: type=1400 audit(1760623111.389:37033): avc: denied { sqpoll } for pid=12663 comm="syz.2.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.319491][ T40] audit: type=1400 audit(1760623111.419:37034): avc: denied { read } for pid=12665 comm="syz.2.1924" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 187.207724][T12683] SELinux: failed to load policy [ 187.275488][T12686] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 187.286551][T12686] gfs2: not a GFS2 filesystem [ 187.324619][T12688] netlink: 'syz.2.1932': attribute type 11 has an invalid length. [ 187.425873][ T1029] usb 5-1: USB disconnect, device number 23 [ 187.561675][T12702] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 187.564185][T12702] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 187.567915][T12702] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 187.571537][T12702] __nla_validate_parse: 9 callbacks suppressed [ 187.571545][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1937'. [ 187.653092][ T6020] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 187.666985][T12702] nbd: must specify at least one socket [ 187.767504][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 187.791988][T12705] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1938'. [ 187.803018][ T6020] usb 9-1: Using ep0 maxpacket: 8 [ 187.807107][ T6020] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.811607][ T6020] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.816066][ T6020] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.818799][ T6020] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 187.822372][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.833772][ T6020] usb 9-1: config 0 descriptor?? [ 187.890482][T12727] tipc: Started in network mode [ 187.892302][T12727] tipc: Node identity 7acab162052a, cluster identity 4711 [ 187.896196][T12727] tipc: Enabled bearer , priority 0 [ 187.899167][T12727] syzkaller0: entered promiscuous mode [ 187.901459][T12727] syzkaller0: entered allmulticast mode [ 187.948459][T12727] syzkaller0: mtu less than device minimum [ 187.978935][T12726] tipc: Resetting bearer [ 187.990126][T12726] tipc: Disabling bearer [ 188.126395][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1944'. [ 188.131966][T12742] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1944'. [ 188.244867][ T6020] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 188.247186][ T6020] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 188.249416][ T6020] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 188.251657][ T6020] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 188.251677][ T6020] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 188.252011][ T6020] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 188.443651][T12695] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 188.446064][T12695] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1934'. [ 188.454559][ T6020] usb 9-1: USB disconnect, device number 7 [ 188.499300][T12750] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.504151][T12750] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 188.783812][T12756] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=548 sclass=netlink_xfrm_socket pid=12756 comm=syz.2.1949 [ 188.806921][T12760] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1950'. [ 188.939357][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1957'. [ 188.941698][T12774] 9pnet_virtio: no channels available for device syz [ 188.945689][T12774] 9pnet_virtio: no channels available for device syz [ 188.948701][T12774] 9pnet_virtio: no channels available for device syz [ 188.951432][T12774] 9pnet_virtio: no channels available for device syz [ 188.954609][T12774] 9pnet_virtio: no channels available for device syz [ 188.957600][T12774] 9pnet_virtio: no channels available for device syz [ 188.960761][T12774] 9pnet_virtio: no channels available for device syz [ 188.964751][T12774] 9pnet_virtio: no channels available for device syz [ 188.967666][T12774] 9pnet_virtio: no channels available for device syz [ 188.970338][T12774] 9pnet_virtio: no channels available for device syz [ 188.973505][T12774] 9pnet_virtio: no channels available for device syz [ 188.976101][T12774] 9pnet_virtio: no channels available for device syz [ 188.979061][T12774] 9pnet_virtio: no channels available for device syz [ 188.982471][T12774] 9pnet_virtio: no channels available for device syz [ 188.985687][T12774] 9pnet_virtio: no channels available for device syz [ 188.988468][T12774] 9pnet_virtio: no channels available for device syz [ 188.991065][T12774] 9pnet_virtio: no channels available for device syz [ 188.994226][T12774] 9pnet_virtio: no channels available for device syz [ 188.996790][T12774] 9pnet_virtio: no channels available for device syz [ 188.999459][T12774] 9pnet_virtio: no channels available for device syz [ 189.001889][T12774] 9pnet_virtio: no channels available for device syz [ 189.005086][T12774] 9pnet_virtio: no channels available for device syz [ 189.007864][T12774] 9pnet_virtio: no channels available for device syz [ 189.011027][T12774] 9pnet_virtio: no channels available for device syz [ 189.014218][T12774] 9pnet_virtio: no channels available for device syz [ 189.017482][T12774] 9pnet_virtio: no channels available for device syz [ 189.020120][T12774] 9pnet_virtio: no channels available for device syz [ 189.022730][T12774] 9pnet_virtio: no channels available for device syz [ 189.026824][T12774] 9pnet_virtio: no channels available for device syz [ 189.029618][T12774] 9pnet_virtio: no channels available for device syz [ 189.032176][T12774] 9pnet_virtio: no channels available for device syz [ 189.034832][T12774] 9pnet_virtio: no channels available for device syz [ 189.137683][T12798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12798 comm=syz.3.1966 [ 189.148207][T12799] geneve2: entered promiscuous mode [ 189.299354][T12819] tipc: Started in network mode [ 189.301557][T12819] tipc: Node identity , cluster identity 4711 [ 189.304201][T12819] tipc: Failed to obtain node identity [ 189.306432][T12819] tipc: Enabling of bearer rejected, failed to enable media [ 189.319364][T12822] tmpfs: Unknown parameter '\srquot5zrdli' [ 189.334285][T12823] QAT: Invalid ioctl -2144835806 [ 189.345850][T12826] program syz.3.1975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.614504][ T6020] IPVS: starting estimator thread 0... [ 189.723071][T12843] IPVS: using max 43 ests per chain, 103200 per kthread [ 189.841411][T12852] random: crng reseeded on system resumption [ 189.867673][T12852] use of bytesused == 0 is deprecated and will be removed in the future, [ 189.870400][T12852] use the actual size instead. [ 189.892059][T12854] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27412 sclass=netlink_xfrm_socket pid=12854 comm=syz.2.1982 [ 190.283066][ T840] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 190.337330][T12864] syzkaller0: entered promiscuous mode [ 190.339184][T12864] syzkaller0: entered allmulticast mode [ 190.342197][T12863] tipc: Started in network mode [ 190.343936][T12863] tipc: Node identity f2a009070b41, cluster identity 4711 [ 190.346364][T12863] tipc: Enabled bearer , priority 0 [ 190.355571][T12863] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 190.366942][T12864] tipc: Resetting bearer [ 190.373608][T12862] tipc: Resetting bearer [ 190.388404][T12862] tipc: Disabling bearer [ 190.433270][ T840] usb 7-1: Using ep0 maxpacket: 8 [ 190.436480][ T840] usb 7-1: config 2 interface 0 has no altsetting 0 [ 190.440302][ T840] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 190.444080][ T840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.446802][ T840] usb 7-1: Product: syz [ 190.448093][ T840] usb 7-1: Manufacturer: syz [ 190.449582][ T840] usb 7-1: SerialNumber: syz [ 190.461583][T12868] ceph: No source [ 190.537992][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1990'. [ 190.541641][T12882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1990'. [ 190.692936][ T840] usb 7-1: USB disconnect, device number 8 [ 191.043997][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 191.044008][ T40] audit: type=1400 audit(1760623116.149:37095): avc: denied { execute_no_trans } for pid=12949 comm="syz.0.2011" path="/508/file0" dev="tmpfs" ino=2722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 191.070667][T12952] fuse: Bad value for 'fd' [ 191.073384][ T53] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 191.161916][T12954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12954 comm=syz.0.2013 [ 191.167254][T12954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=12954 comm=syz.0.2013 [ 191.205940][ T53] usb 9-1: device descriptor read/64, error -71 [ 191.463256][ T53] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 191.613482][ T53] usb 9-1: device descriptor read/64, error -71 [ 191.672143][ T6021] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 191.710268][ T40] audit: type=1400 audit(1760623116.809:37096): avc: denied { write } for pid=12977 comm="syz.3.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 191.712828][T12978] IPVS: length: 24 != 55320 [ 191.723464][ T53] usb usb9-port1: attempt power cycle [ 191.827678][ T6021] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 191.831659][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.835148][ T6021] usb 5-1: Product: syz [ 191.837003][ T6021] usb 5-1: Manufacturer: syz [ 191.839056][ T6021] usb 5-1: SerialNumber: syz [ 191.844981][ T6021] usb 5-1: config 0 descriptor?? [ 191.849020][ T40] audit: type=1400 audit(1760623116.949:37097): avc: denied { accept } for pid=12979 comm="syz.3.2021" lport=60946 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.857968][ T40] audit: type=1400 audit(1760623116.949:37098): avc: denied { setopt } for pid=12979 comm="syz.3.2021" lport=60946 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.967237][ T5983] hid-generic 0362:07FF:7FFFFFFF.000C: item fetching failed at offset 0/2 [ 191.972418][ T5983] hid-generic 0362:07FF:7FFFFFFF.000C: probe with driver hid-generic failed with error -22 [ 192.064984][ T53] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 192.094793][ T53] usb 9-1: device descriptor read/8, error -71 [ 192.117435][ T840] usb 5-1: USB disconnect, device number 24 [ 192.165753][T12998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=12998 comm=syz.3.2025 [ 192.225546][T13003] tipc: Enabled bearer , priority 0 [ 192.229217][T13003] syzkaller0: entered promiscuous mode [ 192.231575][T13003] syzkaller0: entered allmulticast mode [ 192.246445][ T40] audit: type=1400 audit(1760623117.349:37099): avc: denied { write } for pid=13001 comm="syz.3.2027" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 192.247966][T13003] tipc: Resetting bearer [ 192.280420][ T40] audit: type=1400 audit(1760623117.379:37100): avc: denied { bind } for pid=12999 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.293651][ T40] audit: type=1400 audit(1760623117.399:37101): avc: denied { write } for pid=13014 comm="syz.3.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.324694][T13003] tipc: Resetting bearer [ 192.336533][T13003] tipc: Disabling bearer [ 192.336606][ T53] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 192.340720][T13018] cgroup: No subsys list or none specified [ 192.364716][ T53] usb 9-1: device descriptor read/8, error -71 [ 192.456307][T13020] xt_TCPMSS: Only works on TCP SYN packets [ 192.473240][ T53] usb usb9-port1: unable to enumerate USB device [ 192.501730][ T40] audit: type=1400 audit(1760623117.599:37102): avc: denied { create } for pid=13021 comm="syz.3.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 192.511360][ T40] audit: type=1400 audit(1760623117.599:37103): avc: denied { getopt } for pid=13021 comm="syz.3.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 192.613140][ T840] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 192.623709][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 192.765776][ T840] usb 5-1: config 250 has an invalid interface number: 146 but max is 0 [ 192.769467][ T840] usb 5-1: config 250 contains an unexpected descriptor of type 0x2, skipping [ 192.775200][ T840] usb 5-1: config 250 has no interface number 0 [ 192.778034][ T840] usb 5-1: config 250 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 192.782534][ T840] usb 5-1: config 250 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 192.787691][ T840] usb 5-1: config 250 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 192.792234][ T840] usb 5-1: config 250 interface 146 altsetting 7 endpoint 0xA has an invalid bInterval 104, changing to 10 [ 192.797255][ T840] usb 5-1: config 250 interface 146 altsetting 7 endpoint 0xA has invalid maxpacket 41358, setting to 1024 [ 192.801937][ T840] usb 5-1: config 250 interface 146 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 192.806947][ T840] usb 5-1: config 250 interface 146 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 192.807857][T13034] random: crng reseeded on system resumption [ 192.811135][ T840] usb 5-1: config 250 interface 146 altsetting 7 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 192.817972][ T840] usb 5-1: config 250 interface 146 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 192.821445][ T840] usb 5-1: config 250 interface 146 altsetting 7 endpoint 0x5 has an invalid bInterval 195, changing to 11 [ 192.825251][ T840] usb 5-1: config 250 interface 146 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 192.828656][ T840] usb 5-1: config 250 interface 146 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 192.828679][ T840] usb 5-1: config 250 interface 146 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 192.828693][ T840] usb 5-1: config 250 interface 146 altsetting 7 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 192.828709][ T840] usb 5-1: config 250 interface 146 has no altsetting 0 [ 192.837723][ T840] usb 5-1: New USB device found, idVendor=045e, idProduct=0472, bcdDevice=ce.48 [ 192.843249][T13034] Hibernate inconsistent memory map detected! [ 192.845700][ T840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.849388][T13034] PM: hibernation: Image mismatch: architecture specific data [ 192.850992][ T840] usb 5-1: Product: syz [ 192.855807][ T840] usb 5-1: Manufacturer: Ѓ [ 192.857708][ T840] usb 5-1: SerialNumber: syz [ 192.887745][ T40] audit: type=1400 audit(1760623117.989:37104): avc: denied { map } for pid=13035 comm="syz.3.2037" path="socket:[45900]" dev="sockfs" ino=45900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.103419][ T840] usb 5-1: USB disconnect, device number 25 [ 193.136877][T13042] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 193.141494][T13042] VFS: Can't find a romfs filesystem on dev nullb0. [ 193.141494][T13042] [ 193.151772][T13041] vivid-000: ================= START STATUS ================= [ 193.155105][T13041] vivid-000: Test Pattern: 75% Colorbar [ 193.157738][T13041] vivid-000: Fill Percentage of Frame: 100 [ 193.160226][T13041] vivid-000: Horizontal Movement: No Movement [ 193.162779][T13041] vivid-000: Vertical Movement: No Movement [ 193.166433][T13041] vivid-000: OSD Text Mode: All [ 193.168512][T13041] vivid-000: Show Border: false [ 193.170593][T13041] vivid-000: Show Square: false [ 193.172669][T13041] vivid-000: Sensor Flipped Horizontally: false [ 193.175376][T13041] vivid-000: Sensor Flipped Vertically: false [ 193.177899][T13041] vivid-000: Insert SAV Code in Image: false [ 193.180442][T13041] vivid-000: Insert EAV Code in Image: true [ 193.182923][T13041] vivid-000: Insert Video Guard Band: false [ 193.185506][T13041] vivid-000: Reduced Framerate: true [ 193.187725][T13041] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 193.190887][T13041] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 193.195728][T13041] vivid-000: Enable Capture Cropping: true grabbed [ 193.198253][T13041] vivid-000: Enable Capture Composing: true grabbed [ 193.201035][T13041] vivid-000: Enable Capture Scaler: true grabbed [ 193.205377][T13041] vivid-000: Timestamp Source: End of Frame [ 193.207870][T13041] vivid-000: Colorspace: sRGB [ 193.209905][T13041] vivid-000: Transfer Function: Default [ 193.212219][T13041] vivid-000: Y'CbCr Encoding: Default [ 193.214579][T13041] vivid-000: HSV Encoding: Hue 0-179 [ 193.216794][T13041] vivid-000: Quantization: Default [ 193.218956][T13041] vivid-000: Apply Alpha To Red Only: true [ 193.221404][T13041] vivid-000: Standard Aspect Ratio: 14x9 [ 193.223862][T13041] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 193.227053][T13041] vivid-000: DV Timings: 640x480p59 inactive [ 193.230186][T13041] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 193.232875][T13041] vivid-000: Maximum EDID Blocks: 2 [ 193.235205][T13041] vivid-000: Limited RGB Range (16-235): false [ 193.237753][T13041] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 193.240883][T13041] vivid-000: Power Present: 0x00000001 [ 193.243354][T13041] tpg source WxH: 320x180 (R'G'B) [ 193.245440][T13041] tpg field: 1 [ 193.246892][T13041] tpg crop: (0,0)/320x180 [ 193.248659][T13041] tpg compose: (0,0)/320x180 [ 193.250597][T13041] tpg colorspace: 8 [ 193.252177][T13041] tpg transfer function: 0/2 [ 193.254112][T13041] tpg quantization: 0/1 [ 193.255894][T13041] tpg RGB range: 0/2 [ 193.257521][T13041] vivid-000: ================== END STATUS ================== [ 193.300359][T13047] netlink: 'syz.0.2040': attribute type 2 has an invalid length. [ 193.304455][T13047] __nla_validate_parse: 5 callbacks suppressed [ 193.304469][T13047] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2040'. [ 193.391906][T13052] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2041'. [ 193.739517][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.741726][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.792726][T13064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.800384][T13064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.901154][ T7612] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.910201][ T7612] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.917376][ T7612] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.920684][ T7612] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.058728][T13080] batman_adv: batadv0: Adding interface: dummy0 [ 194.061240][T13080] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.070774][T13080] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 194.072660][T13082] netlink: 'syz.4.2052': attribute type 4 has an invalid length. [ 194.132273][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 194.135983][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 194.142021][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 194.144902][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 194.147757][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 194.150600][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 194.153700][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 194.156854][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 194.361460][T13118] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 194.364046][T13118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.367715][T13118] vhci_hcd vhci_hcd.0: Device attached [ 194.370470][T13119] vhci_hcd: connection closed [ 194.370734][ T7602] vhci_hcd: stop threads [ 194.371527][T13110] evm: overlay not supported [ 194.372745][ T7602] vhci_hcd: release socket [ 194.378515][ T7602] vhci_hcd: disconnect device [ 194.481889][T13127] macvtap1: entered promiscuous mode [ 194.483931][T13127] batadv0: entered promiscuous mode [ 194.487683][T13127] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 194.911416][T13137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.460208][T13164] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 195.825737][T13184] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 195.828208][T13184] UDF-fs: Scanning with blocksize 2048 failed [ 195.830895][T13184] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 195.833695][T13184] UDF-fs: Scanning with blocksize 4096 failed [ 195.971087][T13195] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 196.158664][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 196.158681][ T40] audit: type=1400 audit(1760623121.259:37132): avc: denied { ioctl } for pid=13192 comm="syz.4.2087" path="socket:[48310]" dev="sockfs" ino=48310 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 196.170457][ T40] audit: type=1400 audit(1760623121.259:37133): avc: denied { write } for pid=13204 comm="syz.0.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.282410][ T40] audit: type=1400 audit(1760623121.379:37134): avc: denied { watch_sb watch_reads } for pid=13214 comm="syz.4.2096" path="/382/bus" dev="tmpfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.316374][T13218] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 196.377630][T13219] sp0: Synchronizing with TNC [ 196.479574][ T40] audit: type=1400 audit(1760623121.579:37135): avc: denied { firmware_load } for pid=13222 comm="syz.2.2099" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 196.504828][T13223] syz.2.2099 (13223) used greatest stack depth: 17704 bytes left [ 196.526917][ T40] audit: type=1400 audit(1760623121.629:37136): avc: denied { read } for pid=13224 comm="syz.0.2101" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 196.528344][T13229] netlink: 'syz.2.2100': attribute type 4 has an invalid length. [ 196.536782][ T40] audit: type=1400 audit(1760623121.629:37137): avc: denied { open } for pid=13224 comm="syz.0.2101" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 196.549076][ T40] audit: type=1400 audit(1760623121.629:37138): avc: denied { ioctl } for pid=13224 comm="syz.0.2101" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 196.752603][T13240] x_tables: duplicate underflow at hook 3 [ 196.883455][ T53] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 197.046396][ T53] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 197.050058][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.052742][ T53] usb 7-1: Product: syz [ 197.054739][ T53] usb 7-1: Manufacturer: syz [ 197.056561][ T53] usb 7-1: SerialNumber: syz [ 197.119951][T13251] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 197.122128][T13251] syzkaller1: owner set to 825 [ 197.300610][ T40] audit: type=1400 audit(1760623122.399:37139): avc: denied { ioctl } for pid=13258 comm="syz.3.2112" path="socket:[47499]" dev="sockfs" ino=47499 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 197.353143][ T40] audit: type=1400 audit(1760623122.449:37140): avc: denied { mounton } for pid=13264 comm="syz.4.2110" path="/384/bus" dev="tmpfs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 197.359420][T13266] XFS (nullb0): Invalid superblock magic number [ 197.422620][ T40] audit: type=1400 audit(1760623122.519:37141): avc: denied { map } for pid=13281 comm="syz.4.2115" path="/proc/1158/task/1159/pagemap" dev="proc" ino=46920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 197.464391][T13238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.467078][T13238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.470580][ T53] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 197.475896][ T53] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 197.479291][ T53] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 197.485235][ T53] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 197.489992][ T53] usb 7-1: USB disconnect, device number 9 [ 197.955773][T13314] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 197.957992][T13314] overlayfs: failed to set xattr on upper [ 197.959694][T13314] overlayfs: ...falling back to redirect_dir=nofollow. [ 197.961747][T13314] overlayfs: ...falling back to index=off. [ 197.963921][T13314] overlayfs: ...falling back to uuid=null. [ 197.967295][T13314] program syz.0.2122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.241136][T13333] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 198.322883][T13342] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 198.395340][T13350] netlink: 'syz.0.2136': attribute type 10 has an invalid length. [ 198.667130][T13358] uprobe: syz.3.2139:13358 failed to unregister, leaking uprobe [ 198.721725][T13372] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 198.726091][T13372] bond1 (unregistering): Released all slaves [ 199.245895][T13404] (syz.2.2152,13404,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 199.249245][T13404] (syz.2.2152,13404,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 199.253499][T13404] (syz.2.2152,13404,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 199.257248][T13404] (syz.2.2152,13404,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 199.267100][T13408] syz.2.2152: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 199.276499][T13408] CPU: 0 UID: 0 PID: 13408 Comm: syz.2.2152 Not tainted syzkaller #0 PREEMPT(full) [ 199.276515][T13408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.276522][T13408] Call Trace: [ 199.276526][T13408] [ 199.276530][T13408] dump_stack_lvl+0x16c/0x1f0 [ 199.276550][T13408] warn_alloc+0x248/0x3a0 [ 199.276567][T13408] ? __pfx_warn_alloc+0x10/0x10 [ 199.276589][T13408] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 199.276603][T13408] ? __vmalloc_node_noprof+0xad/0xf0 [ 199.276619][T13408] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 199.276638][T13408] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 199.276654][T13408] ? __lock_acquire+0x62e/0x1ce0 [ 199.276671][T13408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.276687][T13408] ? ___kmalloc_large_node+0xed/0x160 [ 199.276703][T13408] __kvmalloc_node_noprof+0x431/0x9c0 [ 199.276714][T13408] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 199.276728][T13408] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 199.276745][T13408] ? hashlimit_mt_check_common+0x8c0/0x1460 [ 199.276757][T13408] hashlimit_mt_check_common+0x8c0/0x1460 [ 199.276775][T13408] hashlimit_mt_check_v1+0x2fc/0x370 [ 199.276788][T13408] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 199.276801][T13408] ? find_held_lock+0x2b/0x80 [ 199.276819][T13408] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 199.276833][T13408] xt_check_match+0x286/0xa50 [ 199.276846][T13408] ? __schedule+0x928/0x5de0 [ 199.276862][T13408] ? __pfx_xt_check_match+0x10/0x10 [ 199.276876][T13408] ? pcpu_alloc_noprof+0x1f5/0x14c0 [ 199.276895][T13408] ? xt_find_match+0x1f6/0x290 [ 199.276910][T13408] find_check_entry.constprop.0+0x317/0x9b0 [ 199.276929][T13408] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 199.276948][T13408] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.276967][T13408] ? kfree+0x2b8/0x6d0 [ 199.276979][T13408] ? translate_table+0xba1/0x1720 [ 199.277004][T13408] translate_table+0xc98/0x1720 [ 199.277024][T13408] ? __pfx_translate_table+0x10/0x10 [ 199.277042][T13408] do_ipt_set_ctl+0x570/0xae0 [ 199.277057][T13408] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 199.277069][T13408] ? find_held_lock+0x2b/0x80 [ 199.277084][T13408] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 199.277098][T13408] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.277113][T13408] ? sockopt_release_sock+0x52/0x60 [ 199.277130][T13408] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.277146][T13408] ? sockopt_release_sock+0x52/0x60 [ 199.277169][T13408] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 199.277183][T13408] nf_setsockopt+0x8a/0xf0 [ 199.277195][T13408] ip_setsockopt+0xcb/0xf0 [ 199.277211][T13408] udp_setsockopt+0x7d/0xd0 [ 199.277223][T13408] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 199.277236][T13408] do_sock_setsockopt+0xf0/0x1d0 [ 199.277249][T13408] __sys_setsockopt+0x1a0/0x230 [ 199.277267][T13408] __x64_sys_setsockopt+0xbd/0x160 [ 199.277281][T13408] ? do_syscall_64+0x91/0xfa0 [ 199.277297][T13408] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.277313][T13408] do_syscall_64+0xcd/0xfa0 [ 199.277329][T13408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.277341][T13408] RIP: 0033:0x7f3d61d8eec9 [ 199.277350][T13408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.277361][T13408] RSP: 002b:00007f3d62b61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.277371][T13408] RAX: ffffffffffffffda RBX: 00007f3d61fe6180 RCX: 00007f3d61d8eec9 [ 199.277378][T13408] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 199.277384][T13408] RBP: 00007f3d61e11f91 R08: 0000000000000448 R09: 0000000000000000 [ 199.277390][T13408] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 199.277397][T13408] R13: 00007f3d61fe6218 R14: 00007f3d61fe6180 R15: 00007fffc85d3c08 [ 199.277422][T13408] [ 199.277493][T13408] Mem-Info: [ 199.348433][ T1424] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 199.351379][T13408] active_anon:11236 inactive_anon:0 isolated_anon:0 [ 199.351379][T13408] active_file:17979 inactive_file:3747 isolated_file:0 [ 199.351379][T13408] unevictable:14064 dirty:92 writeback:1 [ 199.351379][T13408] slab_reclaimable:12954 slab_unreclaimable:76347 [ 199.351379][T13408] mapped:27031 shmem:4418 pagetables:1603 [ 199.351379][T13408] sec_pagetables:311 bounce:0 [ 199.351379][T13408] kernel_misc_reclaimable:0 [ 199.351379][T13408] free:453773 free_pcp:22435 free_cma:0 [ 199.353240][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.354345][T13408] Node 0 active_anon:44944kB inactive_anon:0kB active_file:71868kB inactive_file:14848kB unevictable:52720kB isolated(anon):0kB isolated(file):0kB mapped:108076kB dirty:368kB writeback:4kB shmem:14136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:15504kB pagetables:6192kB sec_pagetables:1244kB all_unreclaimable? no Balloon:0kB [ 199.413664][T13414] __nla_validate_parse: 45 callbacks suppressed [ 199.413675][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2154'. [ 199.414048][T13408] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.419175][T13414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13414 comm=syz.0.2154 [ 199.431781][T13408] Node 0 DMA free:15328kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.471888][T13408] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 199.473814][T13408] Node 0 DMA32 free:205208kB boost:10240kB min:37788kB low:44672kB high:51556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45092kB inactive_anon:0kB active_file:71868kB inactive_file:14844kB unevictable:52720kB writepending:280kB zspages:0kB present:2080628kB managed:1265760kB mlocked:3984kB bounce:0kB free_pcp:67248kB local_pcp:15112kB free_cma:0kB [ 199.484176][T13408] lowmem_reserve[]: 0 0 0 0 0 [ 199.485740][T13408] Node 1 Normal free:1594124kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:140kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:22528kB local_pcp:1376kB free_cma:0kB [ 199.495749][T13408] lowmem_reserve[]: 0 0 0 0 0 [ 199.497268][T13408] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 15328kB [ 199.501947][T13408] Node 0 DMA32: 1698*4kB (UME) 794*8kB (UME) 366*16kB (ME) 171*32kB (UM) 290*64kB (UME) 239*128kB (UM) 116*256kB (UM) 67*512kB (UM) 44*1024kB (UM) 5*2048kB (UM) 3*4096kB (M) = 205208kB [ 199.507564][T13408] Node 1 Normal: 23*4kB (UM) 27*8kB (UE) 42*16kB (UME) 32*32kB (UME) 17*64kB (UME) 11*128kB (UME) 5*256kB (UME) 6*512kB (UME) 2*1024kB (UE) 3*2048kB (UM) 385*4096kB (UM) = 1594004kB [ 199.513167][T13408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.515906][T13408] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 199.518596][T13408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.521550][T13408] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 199.524477][T13408] 36451 total pagecache pages [ 199.525959][T13408] 4 pages in swap cache [ 199.527280][T13408] Free swap = 124996kB [ 199.528588][T13408] Total swap = 124996kB [ 199.529921][T13408] 1048443 pages RAM [ 199.531161][T13408] 0 pages HighMem/MovableOnly [ 199.532645][T13408] 282690 pages reserved [ 199.534034][T13408] 0 pages cma reserved [ 199.578091][T13419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2156'. [ 199.581135][T13419] netlink: 'syz.2.2156': attribute type 7 has an invalid length. [ 199.583739][T13419] netlink: 'syz.2.2156': attribute type 8 has an invalid length. [ 199.586258][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2156'. [ 214.703273][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.075175][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.080447][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.083770][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.086580][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.089136][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.105118][ T1424] ================================================================== [ 215.107767][ T1424] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 215.110080][ T1424] Read of size 8 at addr ffff88802b53f020 by task aoe_tx0/1424 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.113678][ T1424] [ 215.115409][ T1424] CPU: 3 UID: 0 PID: 1424 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 215.115424][ T1424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.115431][ T1424] Call Trace: [ 215.115435][ T1424] [ 215.115439][ T1424] dump_stack_lvl+0x116/0x1f0 [ 215.115459][ T1424] print_report+0xcd/0x630 [ 215.115472][ T1424] ? __virt_addr_valid+0x81/0x610 [ 215.115487][ T1424] ? __phys_addr+0xe8/0x180 [ 215.115501][ T1424] ? handle_tx+0x5a5/0x630 [ 215.115512][ T1424] kasan_report+0xe0/0x110 [ 215.115523][ T1424] ? handle_tx+0x5a5/0x630 [ 215.115534][ T1424] handle_tx+0x5a5/0x630 [ 215.115547][ T1424] dev_hard_start_xmit+0x94/0x740 [ 215.115567][ T1424] __dev_queue_xmit+0xa46/0x4490 [ 215.115585][ T1424] ? preempt_schedule_thunk+0x16/0x30 [ 215.115599][ T1424] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.115615][ T1424] ? __lock_acquire+0xb97/0x1ce0 [ 215.115635][ T1424] ? do_raw_spin_lock+0x12c/0x2b0 [ 215.115649][ T1424] ? rcu_is_watching+0x12/0xc0 [ 215.115664][ T1424] tx+0xcc/0x190 [ 215.115767][ T1424] ? __pfx_tx+0x10/0x10 [ 215.115780][ T1424] kthread+0x1e4/0x3e0 [ 215.115792][ T1424] ? find_held_lock+0x2b/0x80 [ 215.115805][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.115817][ T1424] ? __pfx_default_wake_function+0x10/0x10 [ 215.115831][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.115847][ T1424] ? __kthread_parkme+0x19e/0x250 [ 215.115863][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.115875][ T1424] kthread+0x3c2/0x780 [ 215.115885][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.115895][ T1424] ? rcu_is_watching+0x12/0xc0 [ 215.115913][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.115923][ T1424] ret_from_fork+0x672/0x7d0 [ 215.115933][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.115942][ T1424] ret_from_fork_asm+0x1a/0x30 [ 215.115956][ T1424] [ 215.115960][ T1424] [ 215.120730][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 215.120739][ T40] audit: type=1400 audit(1760623140.209:37163): avc: denied { write } for pid=5872 comm="syz-executor" path="pipe:[4058]" dev="pipefs" ino=4058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 215.123241][ T1424] Allocated by task 12735: [ 215.123252][ T1424] kasan_save_stack+0x33/0x60 [ 215.123264][ T1424] kasan_save_track+0x14/0x30 [ 215.123273][ T1424] __kasan_kmalloc+0xaa/0xb0 [ 215.123282][ T1424] alloc_tty_struct+0x96/0x8c0 [ 215.123303][ T1424] tty_init_dev.part.0+0x1e/0x500 [ 215.206047][ T1424] tty_open+0xa4f/0xf90 [ 215.207939][ T1424] chrdev_open+0x234/0x6a0 [ 215.209926][ T1424] do_dentry_open+0x97f/0x1530 [ 215.212139][ T1424] vfs_open+0x82/0x3f0 [ 215.213961][ T1424] path_openat+0x1de4/0x2cb0 [ 215.216111][ T1424] do_filp_open+0x20b/0x470 [ 215.218117][ T1424] do_sys_openat2+0x11b/0x1d0 [ 215.220295][ T1424] __x64_sys_openat+0x174/0x210 [ 215.222430][ T1424] do_syscall_64+0xcd/0xfa0 [ 215.224533][ T1424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.227191][ T1424] [ 215.228306][ T1424] Freed by task 5983: [ 215.230089][ T1424] kasan_save_stack+0x33/0x60 [ 215.232190][ T1424] kasan_save_track+0x14/0x30 [ 215.234504][ T1424] __kasan_save_free_info+0x3b/0x60 [ 215.236858][ T1424] __kasan_slab_free+0x5f/0x80 [ 215.238981][ T1424] kfree+0x2b8/0x6d0 [ 215.240834][ T1424] process_one_work+0x9cf/0x1b70 [ 215.243044][ T1424] worker_thread+0x6c8/0xf10 [ 215.245199][ T1424] kthread+0x3c2/0x780 [ 215.247061][ T1424] ret_from_fork+0x672/0x7d0 [ 215.248806][ T1424] ret_from_fork_asm+0x1a/0x30 [ 215.250738][ T1424] [ 215.251763][ T1424] Last potentially related work creation: [ 215.254341][ T1424] kasan_save_stack+0x33/0x60 [ 215.256574][ T1424] kasan_record_aux_stack+0xa7/0xc0 [ 215.258969][ T1424] insert_work+0x36/0x230 [ 215.260848][ T1424] __queue_work+0x97e/0x1160 [ 215.262771][ T1424] queue_work_on+0x1a4/0x1f0 [ 215.264924][ T1424] release_tty+0x4de/0x5d0 [ 215.266947][ T1424] tty_release_struct+0xb7/0xe0 [ 215.269144][ T1424] tty_release+0xe2d/0x1430 [ 215.271157][ T1424] __fput+0x3ff/0xb70 [ 215.273067][ T1424] task_work_run+0x14d/0x240 [ 215.275152][ T1424] do_exit+0x86f/0x2bf0 [ 215.277184][ T1424] do_group_exit+0xd3/0x2a0 [ 215.279240][ T1424] get_signal+0x2671/0x26d0 [ 215.281360][ T1424] arch_do_signal_or_restart+0x8f/0x7c0 [ 215.283864][ T1424] exit_to_user_mode_loop+0x85/0x130 [ 215.286149][ T1424] do_syscall_64+0x426/0xfa0 [ 215.288346][ T1424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.291101][ T1424] [ 215.292207][ T1424] The buggy address belongs to the object at ffff88802b53f000 [ 215.292207][ T1424] which belongs to the cache kmalloc-cg-2k of size 2048 [ 215.298511][ T1424] The buggy address is located 32 bytes inside of [ 215.298511][ T1424] freed 2048-byte region [ffff88802b53f000, ffff88802b53f800) [ 215.304063][ T1424] [ 215.305055][ T1424] The buggy address belongs to the physical page: [ 215.307340][ T1424] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b539000 pfn:0x2b538 [ 215.310509][ T1424] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 215.313146][ T1424] memcg:ffff88805323a201 [ 215.314514][ T1424] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 215.317164][ T1424] page_type: f5(slab) [ 215.318460][ T1424] raw: 00fff00000000240 ffff88801b44c140 ffffea0000cce610 ffffea0000e91810 [ 215.321150][ T1424] raw: ffff88802b539000 0000000000080004 00000000f5000000 ffff88805323a201 [ 215.323838][ T1424] head: 00fff00000000240 ffff88801b44c140 ffffea0000cce610 ffffea0000e91810 [ 215.326542][ T1424] head: ffff88802b539000 0000000000080004 00000000f5000000 ffff88805323a201 [ 215.329247][ T1424] head: 00fff00000000003 ffffea0000ad4e01 00000000ffffffff 00000000ffffffff [ 215.331999][ T1424] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 215.334700][ T1424] page dumped because: kasan: bad access detected [ 215.336712][ T1424] page_owner tracks the page as allocated [ 215.338505][ T1424] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5947, tgid 5947 (syz-executor), ts 53826633229, free_ts 53814887625 [ 215.345047][ T1424] post_alloc_hook+0x1c0/0x230 [ 215.346593][ T1424] get_page_from_freelist+0x10a3/0x3a30 [ 215.348337][ T1424] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 215.350215][ T1424] alloc_pages_mpol+0x1fb/0x550 [ 215.351784][ T1424] new_slab+0x24a/0x360 [ 215.353106][ T1424] ___slab_alloc+0xdc4/0x1ae0 [ 215.354617][ T1424] __slab_alloc.constprop.0+0x63/0x110 [ 215.356340][ T1424] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 215.358346][ T1424] kmemdup_noprof+0x29/0x60 [ 215.359795][ T1424] neigh_sysctl_register+0xb2/0x670 [ 215.361448][ T1424] addrconf_sysctl_register+0xb9/0x1f0 [ 215.363190][ T1424] ipv6_add_dev+0xb31/0x15f0 [ 215.364666][ T1424] addrconf_notify+0x53e/0x19e0 [ 215.366229][ T1424] notifier_call_chain+0xbc/0x410 [ 215.367833][ T1424] call_netdevice_notifiers_info+0xbe/0x140 [ 215.369700][ T1424] register_netdevice+0x182e/0x2270 [ 215.371410][ T1424] page last free pid 5947 tgid 5947 stack trace: [ 215.373392][ T1424] __free_frozen_pages+0x7df/0x1160 [ 215.375048][ T1424] qlist_free_all+0x4d/0x120 [ 215.376536][ T1424] kasan_quarantine_reduce+0x195/0x1e0 [ 215.378274][ T1424] __kasan_slab_alloc+0x69/0x90 [ 215.379831][ T1424] __kmalloc_cache_noprof+0x274/0x780 [ 215.381543][ T1424] kobject_uevent_env+0x265/0x1870 [ 215.383182][ T1424] __kobject_del+0x168/0x1f0 [ 215.384647][ T1424] kobject_put+0x327/0x5a0 [ 215.386056][ T1424] netdev_queue_update_kobjects+0x4e5/0x720 [ 215.387968][ T1424] netif_set_real_num_tx_queues+0x151/0x870 [ 215.389855][ T1424] veth_init_queues+0xe1/0x190 [ 215.391400][ T1424] veth_newlink+0x4f3/0xa00 [ 215.392850][ T1424] rtnl_newlink+0xc42/0x2000 [ 215.394332][ T1424] rtnetlink_rcv_msg+0x95b/0xe90 [ 215.395949][ T1424] netlink_rcv_skb+0x158/0x420 [ 215.397475][ T1424] netlink_unicast+0x5a7/0x870 [ 215.398996][ T1424] [ 215.399770][ T1424] Memory state around the buggy address: [ 215.401542][ T1424] ffff88802b53ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 215.404051][ T1424] ffff88802b53ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 215.406550][ T1424] >ffff88802b53f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.409037][ T1424] ^ [ 215.410677][ T1424] ffff88802b53f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.413191][ T1424] ffff88802b53f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.415700][ T1424] ================================================================== [ 215.418318][ T1424] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.420587][ T1424] CPU: 3 UID: 0 PID: 1424 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 215.423405][ T1424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.426770][ T1424] Call Trace: [ 215.427855][ T1424] [ 215.428817][ T1424] dump_stack_lvl+0x3d/0x1f0 [ 215.430310][ T1424] vpanic+0x640/0x6f0 [ 215.431614][ T1424] panic+0xca/0xd0 [ 215.432826][ T1424] ? __pfx_panic+0x10/0x10 [ 215.434266][ T1424] ? check_panic_on_warn+0x1f/0xb0 [ 215.435915][ T1424] check_panic_on_warn+0xab/0xb0 [ 215.437501][ T1424] end_report+0x107/0x170 [ 215.438905][ T1424] kasan_report+0xee/0x110 [ 215.440338][ T1424] ? handle_tx+0x5a5/0x630 [ 215.441770][ T1424] handle_tx+0x5a5/0x630 [ 215.443125][ T1424] dev_hard_start_xmit+0x94/0x740 [ 215.444728][ T1424] __dev_queue_xmit+0xa46/0x4490 [ 215.446318][ T1424] ? preempt_schedule_thunk+0x16/0x30 [ 215.448029][ T1424] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.449719][ T1424] ? __lock_acquire+0xb97/0x1ce0 [ 215.451331][ T1424] ? do_raw_spin_lock+0x12c/0x2b0 [ 215.452936][ T1424] ? rcu_is_watching+0x12/0xc0 [ 215.454479][ T1424] tx+0xcc/0x190 [ 215.455634][ T1424] ? __pfx_tx+0x10/0x10 [ 215.457015][ T1424] kthread+0x1e4/0x3e0 [ 215.458372][ T1424] ? find_held_lock+0x2b/0x80 [ 215.459880][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.461370][ T1424] ? __pfx_default_wake_function+0x10/0x10 [ 215.463227][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.464886][ T1424] ? __kthread_parkme+0x19e/0x250 [ 215.466516][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.467987][ T1424] kthread+0x3c2/0x780 [ 215.469292][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.470783][ T1424] ? rcu_is_watching+0x12/0xc0 [ 215.472317][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.473813][ T1424] ret_from_fork+0x672/0x7d0 [ 215.475294][ T1424] ? __pfx_kthread+0x10/0x10 [ 215.476779][ T1424] ret_from_fork_asm+0x1a/0x30 [ 215.478318][ T1424] [ 215.479889][ T1424] Kernel Offset: disabled [ 215.481275][ T1424] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:20:52 Registers: info registers vcpu 0 CPU#0 RAX=ffff888024acafb0 RBX=ffff888024acafb0 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff888024acafd8 RBP=0000000000000000 RSP=ffffc9000359f0c0 R8 =0000000000080000 R9 =0000000000000001 R10=0000000000000028 R11=0000000000000001 R12=ffff888024acafd8 R13=ffff888024aca480 R14=0000000000000000 R15=0000000000000002 RIP=ffffffff819831d0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69dd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc5e0f17d60 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5e03b76c3 00007fc5e03b76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c2ec9e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555804e7e70 00005555804e7ab0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000400000017 ffffffff00000001 a3d1ac0800010000 0008060601278e02 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00012a100008010f ffffffffffff0408 8088818810000210 0003b38000000007 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0408060a00000000 e8080003b3f00300 080003b3e0030010 0003b3d000000006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0300100003b3b003 0fffffffffffff04 0000000500000007 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b390030f00000001 ffff0403b3800300 1000001000001000 0000000400000017 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000020000 RBX=ffff88804fa7d430 RCX=0000000000020000 RDX=0000000000020007 RSI=0000000000000000 RDI=ffff88804fa7d430 RBP=0000000000000000 RSP=ffffc90020cb73d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88804fa7d430 R13=ffff88804fa7c900 R14=0000000000000000 R15=ffffffff8e3c44a0 RIP=ffffffff8198313a RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558e11e500 ffffffff 00c00000 GS =0000 ffff8880d6add000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2c86d15000 CR3=000000004c211000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89ecd146 ffffffff89ecd155 0000000200000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000874 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c880300040008 000410003c100008 0171f2160000027b 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02000b82030c0200 0b80030810000010 0002800408100000 00000210060a0174 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac1ffffffff80800 028003100a800405 10038002050a8004 0380040c8004229e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800080074980000 0000000000000000 000001ffffffffff ffffffe7080cb803 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108000cb00317fd fffff808000ca003 0c08000c98030008 000c900305bbc408 ZMM24=c7fe4d75c7fe4d75 c7fe4d75c7fe4d75 c7fe4d75c7fe4d75 c7fe4d75c7fe4d75 c7fe4d75c7fe4d75 c7fe4d75c7fe4d75 c7fe4d75c7fe4d75 c7fe4d75c7fe4d75 ZMM25=ed5358d3ed5358d3 ed5358d3ed5358d3 ed5358d3ed5358d3 ed5358d3ed5358d3 ed5358d3ed5358d3 ed5358d3ed5358d3 ed5358d3ed5358d3 ed5358d3ed5358d3 ZMM26=abd5924fabd5924f abd5924fabd5924f abd5924fabd5924f abd5924fabd5924f abd5924fabd5924f abd5924fabd5924f abd5924fabd5924f abd5924fabd5924f ZMM27=383b7231383b7231 383b7231383b7231 383b7231383b7231 383b7231383b7231 383b7231383b7231 383b7231383b7231 383b7231383b7231 383b7231383b7231 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c20c0000c20c0000 c20c0000c20c0000 c20c0000c20c0000 c20c0000c20c0000 c20c0000c20c0000 c20c0000c20c0000 c20c0000c20c0000 c20c0000c20c0000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88802c5d1a00 RCX=000000006579636a RDX=0000000000000000 RSI=ffffffff8dadd0f6 RDI=ffffffff8bf1d240 RBP=dffffc0000000000 RSP=ffffc90003bdf950 R8 =1a68696331eb4ef8 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000000 R12=0000000000000000 R13=ffffea00011e6a00 R14=ffff888023c9c000 R15=ffffc90003bdf9e0 RIP=ffffffff8b652784 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2c85f18750 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c85f8546a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c861b74a8 00007f2c861b74a0 00007f2c861b7498 00007f2c861b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c86d1d100 00007f2c861b7460 00007f2c861b7478 00007f2c861b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c861b74b8 00007f2c861b74b0 00007f2c861b74a8 00007f2c861b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852f9e15 RDI=ffffffff9ae03820 RBP=ffffffff9ae037e0 RSP=ffffc90006eef448 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032343154 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9ae037e0 R15=ffffffff852f9db0 RIP=ffffffff852f9e3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cdd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3d62b60f98 CR3=000000005f6f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00737570635f6576 697463656666652e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ea412fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ea412fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ea412fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ea412fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ea41305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ea41313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ea5b74a8 00007f39ea5b74a0 00007f39ea5b7498 00007f39ea5b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39eb11d100 00007f39ea5b7460 00007f39ea5b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ea5b74b8 00007f39ea5b74b0 00007f39ea5b74a8 00007f39ea5b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000