last executing test programs: 27.685793591s ago: executing program 1 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) accept4$ax25(r1, &(0x7f0000000180)={{0x3, @netrom}, [@null, @netrom, @bcast, @bcast, @default, @netrom, @default, @netrom]}, &(0x7f00000000c0)=0xffffff3c, 0x80000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x9}]]}}}]}, 0x38}, 0x1, 0x2000000000000000}, 0x0) 27.685108818s ago: executing program 1 (id=781): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000020000103000000000000000002000000000000001a0000000500130001000000e4626a93834ed82680d01f711d8e326ea82bd125fe07e0e174ec0a6182e93dd9f7be3638b19e054c6d5a5a0254c9a48d241af5bac9ba9a755216e21db618617fdbbe3edcba9c6028f1dee5c8083c179596655a7be67da49d57ef7faad769623623eb912bf41c09fbde1373509b96a5bcbc64b1fb05278764d2eab7652bf4"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10041ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x18, 0x1, 0x1, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) 27.589567359s ago: executing program 1 (id=782): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) 27.514599587s ago: executing program 1 (id=784): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x9, 0x7}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x0, r1, 0x4, 0x1, 0xc5}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x11, "867c8e826a155244018cdaa2f363c7c4c3"}, &(0x7f0000000200)=0x19) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0x9, 0x101}, 0x90) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[{}, {}], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x4, 0x3, 0x0, r2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0xf, 0x10, 0x6}]}) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000580)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000005c0)={0x10000000, 0x1, 0x2}) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r5, &(0x7f0000000640)={0x40, 0x7d, 0x1, {0x0, 0x39, 0x2, 0x5, {0x2a, 0x1, 0x2}, 0x50000000, 0x3, 0xfff, 0x5d7f, 0x1, '%', 0x0, '', 0x1, '$', 0x4, '$:-.'}}, 0x40) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r7, &(0x7f00000006c0)="72d93057e64668c2e2645d22d4ac50eacb348787c281b056fd9c9b7897454573d701fb7d53273c956b528d8edc6135c29cbf5c8a339a73378561b8ce7a31ce57ea77ce9abaa05eddee629f93db7f0615e1319e30a86111b337669d3674ca49c60d11a9dc0ebd28bef96e87312502e7", 0x6f, 0x200400c0, &(0x7f0000000740)={0xa, 0x4e21, 0xd5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f00000007c0)={0x3, &(0x7f0000000780)=[{0x101, 0xf7, 0x9, 0x5}, {0xa, 0x2, 0xb, 0x5}, {0xd8d, 0x5, 0x94, 0x7}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000800)=0x400, 0x4) r8 = syz_open_dev$vcsu(&(0x7f0000000840), 0x5, 0x10000) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x811) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000980)=@assoc_id=r3, &(0x7f00000009c0)=0x4) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r9, &(0x7f0000000a00)="3cd2e526ed594733164c70a594f38feb255312cd936717f52c570b142183554ee64d6f5789b7957a99187befad208c3f7808360247f72d640b28e5bfde469d51f5e8a0", 0x43) get_mempolicy(&(0x7f0000000a80), &(0x7f0000000ac0), 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000b00)=0xbd77, 0x4) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000b40)={0x4, 0x0, &(0x7f0000ffd000/0x3000)=nil}) connect$inet6(r6, &(0x7f0000000b80)={0xa, 0x4e20, 0x204, @empty, 0x69}, 0x1c) 27.514111193s ago: executing program 1 (id=785): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x3, 0x2, 0xc00000000], [0x2, 0x2, 0xd20, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0x5, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0xfffffffffffffffa, 0x5, 0x931, 0x101, 0x3, 0xffffffffffeffffe, 0x8000000000000000, 0x9, 0xffffffffffffffff, 0xb, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xde, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xffffffffffffffff, 0x10001, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2000000003, 0x4, 0x7, 0x6, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000100)={0x5d, r1, 'id1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 27.204711507s ago: executing program 1 (id=791): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x4}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x56, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getroute={0x2c, 0x1a, 0x4, 0x70bd2a, 0x25dfdbff, {0x1c, 0x80, 0x14, 0xc, 0x1fa, 0x1, 0xfd, 0x9, 0x3c00}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_DST={0x8, 0x1, {0x7f}}]}, 0xffffffffffffff31}, 0x1, 0x0, 0x0, 0x40000845}, 0x4) 8.549353192s ago: executing program 32 (id=791): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x4}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x56, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getroute={0x2c, 0x1a, 0x4, 0x70bd2a, 0x25dfdbff, {0x1c, 0x80, 0x14, 0xc, 0x1fa, 0x1, 0xfd, 0x9, 0x3c00}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_DST={0x8, 0x1, {0x7f}}]}, 0xffffffffffffff31}, 0x1, 0x0, 0x0, 0x40000845}, 0x4) 4.974884545s ago: executing program 4 (id=846): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103703, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f00000024c0)={0xd5, 0x0, 0x2}) 4.841764204s ago: executing program 3 (id=889): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000005c0)={0x1, &(0x7f0000001dc0)=[{@none}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000001240)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffa, 0xe652, 0x2, 0x8e, 0x8, 0xff}, 0x9c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x9, '\x00', 0x0, r7, 0x3, 0x3, 0x5}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0) 4.503192014s ago: executing program 3 (id=895): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=0x189) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x0, 0x5}}) 4.343565398s ago: executing program 3 (id=897): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000019100)={0x41c6cd7f, 0x80000001, 0x8, 0xf321, 0x7, "7bf6988a89278eb01a1439be90a1e400f98698"}) r4 = fsmount(r3, 0x1, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000019080)={'hsr0\x00', 0x200}) fchdir(r4) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000040)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) wait4(r1, 0x0, 0x80000000, 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r1, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 4.132264002s ago: executing program 3 (id=902): r0 = syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x3a) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000006f40)='./file0\x00', 0x190) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000020c0), 0x404, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRES16=0x0, @ANYRES16=r2, @ANYRES32, @ANYRESHEX=r2, @ANYRESDEC]) (async) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x140008, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) dup3(r4, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) (async) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) keyctl$dh_compute(0x17, &(0x7f0000000d80), &(0x7f0000000dc0)=""/229, 0xe5, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e23, 0x3, 'lblc\x00', 0x4, 0x8, 0x7a}, {@remote, 0x4e22, 0x2000, 0xc, 0x2}}, 0x44) (async) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) (async) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000140)=0x68) (async) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) 4.033503294s ago: executing program 3 (id=903): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x2a6241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x4906e580, 0xffff, 0x800, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x1ffffffe, 0x4, 0x6, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0xa, 0x5, 0x7, 0xffffffff, 0x0, 0x0, 0xc000, 0x5, r3, 0x0, 0x403, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006dc0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xfffffffffffffff5, 0xe81, {0x6, 0x800003, 0x1, 0x800000000400000, 0x81, 0x0, {0x6, 0x7fff, 0x80000000002, 0x80000000004, 0x3ffffffffffc, 0xffffffffffffffff, 0x202, 0x11e0, 0x1, 0x2000, 0x7, r3, r4, 0x6, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000140)='./file0/../file0/file0\x00', r5}, 0x18) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000840)) 3.154109123s ago: executing program 3 (id=918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_vmscan_write_folio\x00', r1, 0x0, 0x100000001}, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x6, 0x8, 0x0, 0xd40c}}}}, 0xe) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x820000, &(0x7f0000000240)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r7}}], [{@euid_eq={'euid', 0x3d, r7}}]}}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}}) splice(r10, 0x0, r9, 0x0, 0xffffffffffff8000, 0x0) (async, rerun: 32) close(0x4) (async, rerun: 32) utimes(&(0x7f00000000c0)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_vmscan_write_folio\x00', r6, 0x0, 0x100000001}, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async) r12 = socket(0x10, 0x80003, 0x0) write(r12, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) (async) connect$inet6(r13, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3f, 0x44, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x606f, 0x0, 0xd, {[@generic={0x8, 0x2}]}}, {"92a13dfc2785e5f2cbe605698e2c0ca00a8214a16d45c4ed"}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 2.267263933s ago: executing program 2 (id=926): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c0016000e"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 2.10866028s ago: executing program 2 (id=928): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) (async) lseek(r0, 0x0, 0x4) (async) r1 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000001c0)=0x2) (async) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"3370491d", 0x8, 0x5, 0x2, 0x0, 0xdf, "001a0000008400", "00010b00", "8000", 'e\'U\\', ["0600", "3549fff7ff0000001e0200", "006a9cc1f000"]}) (async, rerun: 64) r3 = socket(0x10, 0x80002, 0x0) (async, rerun: 64) r4 = socket(0x200000000000011, 0x2, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff, 0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0x4, 0x3ff, 0x3, 0x10000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048010}, 0x4000080) (async) r13 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x56555941, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x5, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000235400e5012af870000100000001000000c0143f69050030965f85e411da0d3daf27adba97f603f86288713a725f35b77dd453976b5411a9c418dba4465bf1f5dda3dc7e9ac898a1356bb5fb5eca043f132db8b2909acdc7c90cc60f2e16716fae", @ANYRES32=r14, @ANYBLOB="20000100", @ANYRES32=r14, @ANYBLOB="00030100fe88000000000000000000000000010186dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40084c0) 1.981762037s ago: executing program 2 (id=929): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1.115183286s ago: executing program 0 (id=932): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='rpm_return_int\x00', r0}, 0x18) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0xf, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c89c) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f30e00"/28], 0x48) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x3}}, 0x2e) getsockopt(r6, 0x111, 0x2, 0x0, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000400020000000000000000004167edc1dea6bbc3a6600529ebc9b41a9c18c69b37c4e3afcd3654fb49f470a3c1675dc31b9a0182125a6edb693572b948331497b794128a0b2bd99b0663f1fb0f7eea87a89ece0e4dfb5cb1bfdad34eaa1ea867a8d751a0cf6bedd42a24abbfdee8d0c855955f671ff3c85424b11c", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000001000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="c2fb1a94", 0x4}], 0x1) (async, rerun: 32) r8 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) recvmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2d}, 0x94) (async) r11 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r11, 0x1, 0x29, 0x0, &(0x7f00000008c0)) (async, rerun: 32) r12 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r13 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r13, 0x114, 0x7, &(0x7f0000000380)={@un=@abs={0x1, 0x0, 0x4e22}, {&(0x7f00000002c0)=""/63, 0x3f}, &(0x7f0000000300), 0x4a}, 0xa0) 396.901027ms ago: executing program 2 (id=933): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40100) 396.451655ms ago: executing program 0 (id=934): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000500)={&(0x7f0000000440)=""/154, 0x9a}) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}, @common=@frag={{0x30}, {[0x2, 0x7], 0xfff, 0x4, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 334.629674ms ago: executing program 0 (id=935): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0xffffffffffffffad, 0x7, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 278.562905ms ago: executing program 2 (id=936): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd29, 0x0, {0x1c}}, 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000240)=""/109, 0x6d, &(0x7f0000000300)=""/165, 0x2, 0x1}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x0, @local, 0x1}, r5}}, 0x30) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500"}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x47c00, 0x5) 183.552979ms ago: executing program 2 (id=937): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = userfaultfd(0x80001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x20000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, @vifc_lcl_addr=@empty, @broadcast}, 0x10) 183.143215ms ago: executing program 0 (id=938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 72.009686ms ago: executing program 0 (id=939): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x138, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0x1}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x10c, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0xffff8001, 0xf073, 0x4010000, 0x8000}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x2, 0x9, 0x2}, {0x2008, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x5e3, 0x4, 0x8e, 0x3}, {0x2, 0xffffffff, 0x5, 0x1ad}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x1, 0x5, 0x5127, 0x800}, {0x6, 0x1, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x5, 0x406, 0x2, 0xfffffeff}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}]}}, @TCA_U32_INDEV={0x14, 0x8, 'gre0\x00'}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000201000010000000000000000000000000a18000000120a050000000002000000000a0000040400048014000000110001000000000000001e00f575f2b7"], 0x40}, 0x1, 0x0, 0x0, 0x4011}, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) 0s ago: executing program 0 (id=940): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmmsg$inet_sctp(r1, &(0x7f0000003c80)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="0901", 0x2}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8040) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x2, r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x18}, 0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) kernel console output (not intermixed with test programs): 152207][ T6622] binder: BINDER_SET_CONTEXT_MGR already set [ 73.154670][ T6622] binder: 6621:6622 ioctl 4018620d 200000000040 returned -16 [ 73.228474][ T6625] IPv6: sit1: Disabled Multicast RS [ 73.230878][ T6625] sit1: entered allmulticast mode [ 73.312416][ T6137] syz.0.31 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 73.316748][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 73.316767][ T6137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.316774][ T6137] Call Trace: [ 73.316779][ T6137] [ 73.316784][ T6137] dump_stack_lvl+0x16c/0x1f0 [ 73.316806][ T6137] dump_header+0x101/0x930 [ 73.316828][ T6137] oom_kill_process+0x272/0xa40 [ 73.316849][ T6137] out_of_memory+0x350/0x1700 [ 73.316871][ T6137] ? __pfx_out_of_memory+0x10/0x10 [ 73.316894][ T6137] mem_cgroup_out_of_memory+0x118/0x130 [ 73.316912][ T6137] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 73.316933][ T6137] ? do_raw_spin_unlock+0x172/0x230 [ 73.316952][ T6137] try_charge_memcg+0x695/0xd30 [ 73.316969][ T6137] ? __pfx_try_charge_memcg+0x10/0x10 [ 73.316983][ T6137] ? __print_lock_name+0x21/0xe0 [ 73.316999][ T6137] ? rcu_read_unlock+0x17/0x60 [ 73.317017][ T6137] charge_memcg+0x8a/0x230 [ 73.317031][ T6137] __mem_cgroup_charge+0x2b/0x1e0 [ 73.317047][ T6137] filemap_add_folio+0xe6/0x610 [ 73.317067][ T6137] ? __pfx_filemap_add_folio+0x10/0x10 [ 73.317091][ T6137] __filemap_get_folio+0x510/0xc30 [ 73.317114][ T6137] filemap_fault+0x661/0x29a0 [ 73.317129][ T6137] ? __pfx_filemap_fault+0x10/0x10 [ 73.317149][ T6137] ? __pfx_filemap_map_pages+0x10/0x10 [ 73.317165][ T6137] __do_fault+0x10d/0x490 [ 73.317186][ T6137] ? __pfx_filemap_map_pages+0x10/0x10 [ 73.317202][ T6137] do_pte_missing+0xf4a/0x3ba0 [ 73.317225][ T6137] ? find_held_lock+0x2b/0x80 [ 73.317240][ T6137] ? __handle_mm_fault+0x1529/0x2aa0 [ 73.317259][ T6137] __handle_mm_fault+0x1556/0x2aa0 [ 73.317281][ T6137] ? __pfx___handle_mm_fault+0x10/0x10 [ 73.317299][ T6137] ? __pte_offset_map_lock+0x174/0x310 [ 73.317313][ T6137] ? find_held_lock+0x2b/0x80 [ 73.317334][ T6137] ? follow_page_pte+0x5cf/0x1390 [ 73.317352][ T6137] handle_mm_fault+0x589/0xd10 [ 73.317372][ T6137] __get_user_pages+0x54e/0x3530 [ 73.317395][ T6137] ? __pfx___get_user_pages+0x10/0x10 [ 73.317409][ T6137] ? __kernel_write_iter+0x5a5/0xb10 [ 73.317425][ T6137] get_dump_page+0x257/0x3d0 [ 73.317440][ T6137] ? __pfx_get_dump_page+0x10/0x10 [ 73.317455][ T6137] ? dump_user_range+0x756/0xb70 [ 73.317472][ T6137] dump_user_range+0x195/0xb70 [ 73.317489][ T6137] ? __pfx_dump_user_range+0x10/0x10 [ 73.317503][ T6137] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 73.317528][ T6137] ? __pfx_writenote+0x10/0x10 [ 73.317546][ T6137] elf_core_dump+0x29c3/0x3c00 [ 73.317571][ T6137] ? __pfx_elf_core_dump+0x10/0x10 [ 73.317583][ T6137] ? kasan_save_stack+0x33/0x60 [ 73.317595][ T6137] ? kasan_save_track+0x14/0x30 [ 73.317605][ T6137] ? __kasan_kmalloc+0xaa/0xb0 [ 73.317616][ T6137] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 73.317627][ T6137] ? vfs_coredump+0x1ddc/0x5670 [ 73.317639][ T6137] ? arch_do_signal_or_restart+0x8f/0x7c0 [ 73.317653][ T6137] ? irqentry_exit_to_user_mode+0x176/0x310 [ 73.317672][ T6137] ? asm_exc_general_protection+0x26/0x30 [ 73.317689][ T6137] ? 0xffffffffff600000 [ 73.317729][ T6137] ? vfs_coredump+0x2b9f/0x5670 [ 73.317741][ T6137] vfs_coredump+0x2b9f/0x5670 [ 73.317760][ T6137] ? __pfx_vfs_coredump+0x10/0x10 [ 73.317773][ T6137] ? __lock_acquire+0x622/0x1c90 [ 73.317799][ T6137] ? lock_acquire+0x179/0x350 [ 73.317819][ T6137] ? is_bpf_text_address+0x8a/0x1a0 [ 73.317835][ T6137] ? bpf_ksym_find+0x127/0x1c0 [ 73.317857][ T6137] ? unwind_get_return_address+0x59/0xa0 [ 73.317872][ T6137] ? arch_stack_walk+0xa6/0x100 [ 73.317892][ T6137] ? stack_trace_save+0x8e/0xc0 [ 73.317908][ T6137] ? __pfx_stack_trace_save+0x10/0x10 [ 73.317926][ T6137] ? stack_depot_save_flags+0x29/0x9c0 [ 73.317941][ T6137] ? __lock_acquire+0xb8a/0x1c90 [ 73.317991][ T6137] ? proc_coredump_connector+0x2d1/0x4f0 [ 73.318008][ T6137] ? __pfx_proc_coredump_connector+0x10/0x10 [ 73.318029][ T6137] ? rcu_is_watching+0x12/0xc0 [ 73.318048][ T6137] get_signal+0x22e1/0x26d0 [ 73.318068][ T6137] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.318088][ T6137] ? __pfx_get_signal+0x10/0x10 [ 73.318108][ T6137] arch_do_signal_or_restart+0x8f/0x7c0 [ 73.318124][ T6137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 73.318144][ T6137] ? exc_general_protection+0x1ba/0x230 [ 73.318163][ T6137] irqentry_exit_to_user_mode+0x176/0x310 [ 73.318182][ T6137] asm_exc_general_protection+0x26/0x30 [ 73.318195][ T6137] RIP: 0033:0x7f46f618efd1 [ 73.318206][ T6137] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 73.318224][ T6137] RSP: 002b:0000200000000200 EFLAGS: 00010217 [ 73.318237][ T6137] RAX: 0000000000000000 RBX: 00007f46f63e6090 RCX: 00007f46f618efc9 [ 73.318245][ T6137] RDX: 0000200000000040 RSI: 0000200000000200 RDI: 0000000000000200 [ 73.318268][ T6137] RBP: 00007f46f6211f91 R08: 0000200000000240 R09: 0000200000000240 [ 73.318276][ T6137] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 73.318283][ T6137] R13: 00007f46f63e6128 R14: 00007f46f63e6090 R15: 00007fffee903d58 [ 73.318301][ T6137] [ 73.481642][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.490083][ T6137] memory: usage 307200kB, limit 307200kB, failcnt 64444 [ 73.494849][ T6137] memory+swap: usage 432152kB, limit 9007199254740988kB, failcnt 0 [ 73.497415][ T6137] kmem: usage 4964kB, limit 9007199254740988kB, failcnt 0 [ 73.499606][ T6137] Memory cgroup stats for /syz0: [ 73.499675][ T6137] cache 309219328 [ 73.502581][ T6137] rss 245760 [ 73.503643][ T6137] rss_huge 0 [ 73.504783][ T6137] shmem 309211136 [ 73.505987][ T6137] mapped_file 0 [ 73.507238][ T6137] dirty 0 [ 73.508410][ T6137] writeback 0 [ 73.509753][ T6137] workingset_refault_anon 189 [ 73.511542][ T6137] workingset_refault_file 55534 [ 73.513607][ T6137] swap 127950848 [ 73.514766][ T6137] swapcached 45056 [ 73.515956][ T6137] pgpgin 273708 [ 73.517093][ T6137] pgpgout 198149 [ 73.518179][ T6137] pgfault 19780 [ 73.519251][ T6137] pgmajfault 1137 [ 73.520419][ T6137] inactive_anon 228282368 [ 73.521980][ T6137] active_anon 80936960 [ 73.523610][ T6137] inactive_file 8192 [ 73.524897][ T6137] active_file 0 [ 73.526025][ T6137] unevictable 0 [ 73.527283][ T6137] hierarchical_memory_limit 314572800 [ 73.529344][ T6137] hierarchical_memsw_limit 9223372036854771712 [ 73.531597][ T6137] total_cache 309219328 [ 73.533040][ T6137] total_rss 245760 [ 73.534672][ T6137] total_rss_huge 0 [ 73.535885][ T6137] total_shmem 309211136 [ 73.537246][ T6137] total_mapped_file 0 [ 73.538809][ T6137] total_dirty 0 [ 73.540110][ T6137] total_writeback 0 [ 73.541555][ T6137] total_workingset_refault_anon 189 [ 73.544230][ T6137] total_workingset_refault_file 55534 [ 73.546071][ T6137] total_swap 127950848 [ 73.547505][ T6137] total_swapcached 45056 [ 73.549203][ T6137] total_pgpgin 273708 [ 73.550989][ T6137] total_pgpgout 198149 [ 73.552842][ T6137] total_pgfault 19780 [ 73.556960][ T6137] total_pgmajfault 1137 [ 73.559071][ T6137] total_inactive_anon 283181056 [ 73.566104][ T6137] total_active_anon 26038272 [ 73.568109][ T6137] total_inactive_file 8192 [ 73.570009][ T6137] total_active_file 0 [ 73.571616][ T6137] total_unevictable 0 [ 73.574771][ T6137] anon_cost 0 [ 73.576406][ T6137] file_cost 0 [ 73.577601][ T6137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.31,pid=6148,uid=0 [ 73.582305][ T6137] Memory cgroup out of memory: Killed process 6148 (syz.0.31) total-vm:98372kB, anon-rss:1192kB, file-rss:34556kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 73.615170][ T5948] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.651081][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.653698][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.666440][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.669046][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.682609][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.685267][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.690864][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.704025][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.707662][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.710755][ T6638] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 73.756694][ T6646] netlink: 156 bytes leftover after parsing attributes in process `syz.3.179'. [ 73.778785][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 73.789948][ T5948] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 73.793529][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 73.796091][ T5948] usb 6-1: Product: syz [ 73.797526][ T5948] usb 6-1: Manufacturer: syz [ 73.799054][ T5948] usb 6-1: SerialNumber: syz [ 73.803017][ T5948] usb 6-1: config 0 descriptor?? [ 73.818081][ T6661] trusted_key: encrypted_key: insufficient parameters specified [ 74.013356][ T6691] can0: slcan on ttyS3. [ 74.043816][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.046354][ T6695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.127439][ T6690] can0 (unregistered): slcan off ttyS3. [ 74.266540][ T6713] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 74.276229][ T6713] CIFS mount error: No usable UNC path provided in device string! [ 74.276229][ T6713] [ 74.279364][ T6713] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 74.285944][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.189'. [ 74.354620][ T5948] usb 6-1: USB disconnect, device number 2 [ 74.530928][ T6717] kvm: MONITOR instruction emulated as NOP! [ 74.951267][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 74.951278][ T40] audit: type=1400 audit(1762251294.778:322): avc: denied { watch watch_reads } for pid=6725 comm="syz.2.193" path="/65/file0" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.985210][ T40] audit: type=1400 audit(1762251294.788:323): avc: denied { accept } for pid=6729 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 74.996171][ T40] audit: type=1400 audit(1762251294.827:324): avc: denied { create } for pid=6728 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 75.391489][ T40] audit: type=1400 audit(1762251295.199:325): avc: denied { ioctl } for pid=6747 comm="syz.0.197" path="socket:[13689]" dev="sockfs" ino=13689 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.654804][ T40] audit: type=1400 audit(1762251295.464:326): avc: denied { remount } for pid=6756 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.704629][ T6757] syzkaller1: entered promiscuous mode [ 75.706403][ T6757] syzkaller1: entered allmulticast mode [ 75.713749][ T64] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 75.847853][ T40] audit: type=1400 audit(1762251295.650:327): avc: denied { create } for pid=6759 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 75.904293][ T40] audit: type=1400 audit(1762251295.709:328): avc: denied { write } for pid=6759 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 75.990370][ T40] audit: type=1400 audit(1762251295.797:329): avc: denied { create } for pid=6764 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.997761][ T40] audit: type=1400 audit(1762251295.807:330): avc: denied { connect } for pid=6764 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.037779][ T40] audit: type=1400 audit(1762251295.846:331): avc: denied { read } for pid=6769 comm="syz.2.204" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 76.600622][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.604313][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.645467][ T6801] 9pnet_fd: Insufficient options for proto=fd [ 76.844569][ T6820] fuse: Bad value for 'user_id' [ 76.846393][ T6820] fuse: Bad value for 'user_id' [ 77.089864][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.222'. [ 77.127907][ T5986] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 77.226132][ T6844] PM: Enabling pm_trace changes system date and time during resume. [ 77.226132][ T6844] PM: Correct system time has to be restored manually after resume. [ 77.293493][ T5986] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 77.298732][ T5986] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 77.307804][ T5986] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.312556][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.335708][ T6823] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.338364][ T6823] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.364842][ T5986] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.575172][ T6823] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 77.577577][ T6823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.581454][ T6877] netlink: 'syz.3.234': attribute type 11 has an invalid length. [ 77.582730][ T6823] vhci_hcd vhci_hcd.0: Device attached [ 77.595871][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.599314][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.605469][ T6879] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 77.609758][ T6675] vhci_hcd: stop threads [ 77.611360][ T6675] vhci_hcd: release socket [ 77.612670][ T5979] usb 6-1: USB disconnect, device number 3 [ 77.616075][ T6675] vhci_hcd: disconnect device [ 77.628826][ T6845] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.224'. [ 77.638506][ T6887] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 77.693129][ T6877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.765558][ T6877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.839024][ T6877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.931252][ T6877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.034737][ T6662] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.049275][ T6662] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.060983][ T6662] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.073487][ T6662] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.144125][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 78.185527][ T6897] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.738880][ T6944] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 78.852463][ T6954] validate_nla: 2 callbacks suppressed [ 78.852476][ T6954] netlink: 'syz.3.256': attribute type 29 has an invalid length. [ 78.857604][ T6954] netlink: 'syz.3.256': attribute type 29 has an invalid length. [ 78.869980][ T6957] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 79.009333][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 79.012294][ T6975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.262'. [ 79.093803][ T6991] binder: 6990:6991 ioctl 4018620d 0 returned -22 [ 79.096124][ T6991] binder: 6990:6991 ioctl c0306201 200000000240 returned -11 [ 79.205435][ T6996] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 79.221991][ T6996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.367677][ T7003] syzkaller1: entered promiscuous mode [ 79.370251][ T7003] syzkaller1: entered allmulticast mode [ 79.628616][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.651051][ T7017] __vm_enough_memory: pid: 7017, comm: syz.2.275, bytes: 4503599627366400 not enough memory for the allocation [ 79.686717][ T7019] sp0: Synchronizing with TNC [ 79.691952][ T7018] [U] `````````````````````````````````` [ 79.784318][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.788490][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.792674][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.796719][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.799574][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.806210][ T9] usb 5-1: config 0 descriptor?? [ 79.937539][ T7032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.032741][ T7040] netlink: 'syz.1.282': attribute type 10 has an invalid length. [ 80.044999][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 80.045013][ T40] audit: type=1400 audit(1762251299.778:498): avc: denied { read write } for pid=7034 comm="syz.3.281" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.057507][ T7038] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 80.060870][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.064750][ T40] audit: type=1400 audit(1762251299.778:499): avc: denied { read write open } for pid=7034 comm="syz.3.281" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.079876][ T7040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.088341][ T40] audit: type=1400 audit(1762251299.787:500): avc: denied { read write } for pid=7034 comm="syz.3.281" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.106081][ T40] audit: type=1400 audit(1762251299.787:501): avc: denied { open } for pid=7034 comm="syz.3.281" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.116511][ T40] audit: type=1400 audit(1762251299.797:502): avc: denied { create } for pid=7037 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.122995][ T40] audit: type=1400 audit(1762251299.797:503): avc: denied { write } for pid=7037 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.131923][ T40] audit: type=1400 audit(1762251299.797:504): avc: denied { ioctl } for pid=7034 comm="syz.3.281" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.139624][ T40] audit: type=1400 audit(1762251299.827:505): avc: denied { module_request } for pid=7039 comm="syz.1.282" kmod="netdev-pim6reg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.147749][ T40] audit: type=1400 audit(1762251299.847:506): avc: denied { read write } for pid=5930 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.155917][ T40] audit: type=1400 audit(1762251299.847:507): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.225855][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.229943][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.233287][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.236088][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.239679][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.242098][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.244698][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.247745][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.252114][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.254569][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.356265][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 80.436226][ T9] usb 5-1: USB disconnect, device number 2 [ 81.230854][ T7054] netfs: Couldn't get user pages (rc=-14) [ 81.287929][ T7057] comedi: valid board names for 8255 driver are: [ 81.290118][ T7057] 8255 [ 81.291007][ T7057] comedi: valid board names for vmk80xx driver are: [ 81.293414][ T7057] vmk80xx [ 81.294411][ T7057] comedi: valid board names for usbduxsigma driver are: [ 81.296669][ T7057] usbduxsigma [ 81.297750][ T7057] comedi: valid board names for usbduxfast driver are: [ 81.299840][ T7057] usbduxfast [ 81.301029][ T7057] comedi: valid board names for usbdux driver are: [ 81.305503][ T7057] usbdux [ 81.306758][ T7057] comedi: valid board names for ni6501 driver are: [ 81.309086][ T7057] ni6501 [ 81.310065][ T7057] comedi: valid board names for dt9812 driver are: [ 81.312160][ T7057] dt9812 [ 81.313158][ T7057] comedi: valid board names for ni_labpc_cs driver are: [ 81.316632][ T7057] ni_labpc_cs [ 81.317800][ T7057] comedi: valid board names for ni_daq_700 driver are: [ 81.319992][ T7057] ni_daq_700 [ 81.321073][ T7057] comedi: valid board names for labpc_pci driver are: [ 81.323215][ T7057] labpc_pci [ 81.324747][ T7057] comedi: valid board names for adl_pci9118 driver are: [ 81.326983][ T7057] pci9118dg [ 81.328318][ T7057] pci9118hg [ 81.329535][ T7057] pci9118hr [ 81.330729][ T7057] comedi: valid board names for 8255_pci driver are: [ 81.333161][ T7057] 8255_pci [ 81.334324][ T7057] comedi: valid board names for s526 driver are: [ 81.336334][ T7057] s526 [ 81.337242][ T7057] comedi: valid board names for multiq3 driver are: [ 81.339377][ T7057] multiq3 [ 81.340413][ T7057] comedi: valid board names for pcmuio driver are: [ 81.342458][ T7057] pcmuio48 [ 81.343491][ T7057] pcmuio96 [ 81.345403][ T7057] comedi: valid board names for pcmmio driver are: [ 81.347494][ T7057] pcmmio [ 81.348557][ T7057] comedi: valid board names for pcmda12 driver are: [ 81.350672][ T7057] pcmda12 [ 81.351688][ T7057] comedi: valid board names for pcmad driver are: [ 81.354183][ T7057] pcmad12 [ 81.355444][ T7057] pcmad16 [ 81.356725][ T7057] comedi: valid board names for ni_labpc driver are: [ 81.359280][ T7057] lab-pc-1200 [ 81.360727][ T7057] lab-pc-1200ai [ 81.362217][ T7057] lab-pc+ [ 81.363574][ T7057] comedi: valid board names for atmio16 driver are: [ 81.365946][ T7057] atmio16 [ 81.366994][ T7057] atmio16d [ 81.368039][ T7057] comedi: valid board names for ni_at_ao driver are: [ 81.370188][ T7057] at-ao-6 [ 81.371201][ T7057] at-ao-10 [ 81.372252][ T7057] comedi: valid board names for ni_at_a2150 driver are: [ 81.374686][ T7057] ni_at_a2150 [ 81.375804][ T7057] comedi: valid board names for adq12b driver are: [ 81.378026][ T7057] adq12b [ 81.378984][ T7057] comedi: valid board names for mpc624 driver are: [ 81.381388][ T7057] mpc624 [ 81.382401][ T7057] comedi: valid board names for c6xdigio driver are: [ 81.384844][ T7057] c6xdigio [ 81.385872][ T7057] comedi: valid board names for aio_iiro_16 driver are: [ 81.387939][ T7057] aio_iiro_16 [ 81.389166][ T7057] comedi: valid board names for aio_aio12_8 driver are: [ 81.391354][ T7057] aio_aio12_8 [ 81.392549][ T7057] aio_ai12_8 [ 81.393639][ T7057] aio_ao12_4 [ 81.394782][ T7057] comedi: valid board names for fl512 driver are: [ 81.397060][ T7057] fl512 [ 81.398060][ T7057] comedi: valid board names for dmm32at driver are: [ 81.400214][ T7057] dmm32at [ 81.401225][ T7057] comedi: valid board names for dt282x driver are: [ 81.403291][ T7057] dt2821 [ 81.404270][ T7057] dt2821-f [ 81.405373][ T7057] dt2821-g [ 81.406409][ T7057] dt2823 [ 81.407367][ T7057] dt2824-pgh [ 81.408462][ T7057] dt2824-pgl [ 81.409582][ T7057] dt2825 [ 81.410587][ T7057] dt2827 [ 81.411601][ T7057] dt2828 [ 81.412639][ T7057] dt2829 [ 81.413638][ T7057] dt21-ez [ 81.414685][ T7057] dt23-ez [ 81.415743][ T7057] dt24-ez [ 81.416761][ T7057] dt24-ez-pgl [ 81.417860][ T7057] comedi: valid board names for dt2817 driver are: [ 81.419914][ T7057] dt2817 [ 81.420883][ T7057] comedi: valid board names for dt2815 driver are: [ 81.422945][ T7057] dt2815 [ 81.423899][ T7057] comedi: valid board names for dt2814 driver are: [ 81.426122][ T7057] dt2814 [ 81.427159][ T7057] comedi: valid board names for dt2811 driver are: [ 81.429226][ T7057] dt2811-pgh [ 81.430336][ T7057] dt2811-pgl [ 81.431482][ T7057] comedi: valid board names for dt2801 driver are: [ 81.433628][ T7057] dt2801 [ 81.434594][ T7057] comedi: valid board names for das6402 driver are: [ 81.436919][ T7057] das6402-12 [ 81.438107][ T7057] das6402-16 [ 81.439183][ T7057] comedi: valid board names for das1800 driver are: [ 81.441310][ T7057] das-1701st [ 81.442434][ T7057] das-1701st-da [ 81.443666][ T7057] das-1702st [ 81.444868][ T7057] das-1702st-da [ 81.446250][ T7057] das-1702hr [ 81.447342][ T7057] das-1702hr-da [ 81.448531][ T7057] das-1701ao [ 81.449630][ T7057] das-1702ao [ 81.450706][ T7057] das-1801st [ 81.451788][ T7057] das-1801st-da [ 81.452991][ T7057] das-1802st [ 81.454135][ T7057] das-1802st-da [ 81.455458][ T7057] das-1802hr [ 81.456713][ T7057] das-1802hr-da [ 81.457996][ T7057] das-1801hc [ 81.459116][ T7057] das-1802hc [ 81.460242][ T7057] das-1801ao [ 81.461320][ T7057] das-1802ao [ 81.462450][ T7057] comedi: valid board names for das800 driver are: [ 81.464497][ T7057] das-800 [ 81.466133][ T7057] cio-das800 [ 81.467227][ T7057] das-801 [ 81.468242][ T7057] cio-das801 [ 81.469327][ T7057] das-802 [ 81.470349][ T7057] cio-das802 [ 81.471428][ T7057] cio-das802/16 [ 81.472667][ T7057] comedi: valid board names for isa-das08 driver are: [ 81.474839][ T7057] isa-das08 [ 81.476523][ T7057] das08-pgm [ 81.477658][ T7057] das08-pgh [ 81.478709][ T7057] das08-pgl [ 81.479774][ T7057] das08-aoh [ 81.480841][ T7057] das08-aol [ 81.481911][ T7057] das08-aom [ 81.483110][ T7057] das08/jr-ao [ 81.484263][ T7057] das08jr-16-ao [ 81.485520][ T7057] pc104-das08 [ 81.487425][ T7057] das08jr/16 [ 81.488528][ T7057] comedi: valid board names for das16m1 driver are: [ 81.490629][ T7057] das16m1 [ 81.491663][ T7057] comedi: valid board names for dac02 driver are: [ 81.493895][ T7057] dac02 [ 81.494912][ T7057] comedi: valid board names for rti802 driver are: [ 81.497934][ T7057] rti802 [ 81.498897][ T7057] comedi: valid board names for rti800 driver are: [ 81.500961][ T7057] rti800 [ 81.501911][ T7057] rti815 [ 81.502876][ T7057] comedi: valid board names for pcm3724 driver are: [ 81.504949][ T7057] pcm3724 [ 81.506076][ T7057] comedi: valid board names for pcl818 driver are: [ 81.508336][ T7057] pcl818l [ 81.509428][ T7057] pcl818h [ 81.510549][ T7057] pcl818hd [ 81.511668][ T7057] pcl818hg [ 81.512791][ T7057] pcl818 [ 81.513776][ T7057] pcl718 [ 81.514732][ T7057] pcm3718 [ 81.515728][ T7057] comedi: valid board names for pcl816 driver are: [ 81.517827][ T7057] pcl816 [ 81.518779][ T7057] pcl814b [ 81.519753][ T7057] comedi: valid board names for pcl812 driver are: [ 81.521955][ T7057] pcl812 [ 81.523064][ T7057] pcl812pg [ 81.524216][ T7057] acl8112pg [ 81.525368][ T7057] acl8112dg [ 81.526640][ T7057] acl8112hg [ 81.527926][ T7057] a821pgl [ 81.529053][ T7057] a821pglnda [ 81.530231][ T7057] a821pgh [ 81.531233][ T7057] a822pgl [ 81.532221][ T7057] a822pgh [ 81.533222][ T7057] a823pgl [ 81.534271][ T7057] a823pgh [ 81.535271][ T7057] pcl813 [ 81.536310][ T7057] pcl813b [ 81.537408][ T7057] acl8113 [ 81.538487][ T7057] iso813 [ 81.539542][ T7057] acl8216 [ 81.540689][ T7057] a826pg [ 81.541740][ T7057] comedi: valid board names for pcl730 driver are: [ 81.544161][ T7057] pcl730 [ 81.545128][ T7057] iso730 [ 81.546077][ T7057] acl7130 [ 81.547875][ T7057] pcm3730 [ 81.548898][ T7057] pcl725 [ 81.549874][ T7057] p8r8dio [ 81.550875][ T7057] acl7225b [ 81.551898][ T7057] p16r16dio [ 81.552993][ T7057] pcl733 [ 81.553949][ T7057] pcl734 [ 81.554908][ T7057] opmm-1616-xt [ 81.556081][ T7057] pearl-mm-p [ 81.557704][ T7057] ir104-pbf [ 81.558883][ T7057] comedi: valid board names for pcl726 driver are: [ 81.561155][ T7057] pcl726 [ 81.562169][ T7057] pcl727 [ 81.563171][ T7057] pcl728 [ 81.564136][ T7057] acl6126 [ 81.565138][ T7057] acl6128 [ 81.566135][ T7057] comedi: valid board names for pcl724 driver are: [ 81.568834][ T7057] pcl724 [ 81.570436][ T7057] pcl722 [ 81.571779][ T7057] pcl731 [ 81.572894][ T7057] acl7122 [ 81.573902][ T7057] acl7124 [ 81.574996][ T7057] pet48dio [ 81.576155][ T7057] pcmio48 [ 81.577387][ T7057] onyx-mm-dio [ 81.578505][ T7057] comedi: valid board names for pcl711 driver are: [ 81.580506][ T7057] pcl711 [ 81.581422][ T7057] pcl711b [ 81.582487][ T7057] acl8112hg [ 81.583515][ T7057] acl8112dg [ 81.584556][ T7057] comedi: valid board names for amplc_pc263 driver are: [ 81.586969][ T7057] pc263 [ 81.588016][ T7057] comedi: valid board names for amplc_pc236 driver are: [ 81.590183][ T7057] pc36at [ 81.591147][ T7057] comedi: valid board names for amplc_dio200 driver are: [ 81.593336][ T7057] pc212e [ 81.594322][ T7057] pc214e [ 81.595316][ T7057] pc215e [ 81.596323][ T7057] pc218e [ 81.597408][ T7057] pc272e [ 81.598409][ T7057] comedi: valid board names for comedi_parport driver are: [ 81.600745][ T7057] comedi_parport [ 81.602039][ T7057] comedi: valid board names for comedi_test driver are: [ 81.604250][ T7057] comedi_test [ 81.605392][ T7057] comedi: valid board names for comedi_bond driver are: [ 81.609056][ T7057] comedi_bond [ 82.074597][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 82.155503][ T7119] fuse: Bad value for 'rootmode' [ 82.163651][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.304'. [ 82.172287][ T7119] tipc: Started in network mode [ 82.173961][ T7119] tipc: Node identity ac14140f, cluster identity 4711 [ 82.177103][ T7119] tipc: New replicast peer: 255.255.255.255 [ 82.179831][ T7119] tipc: Enabled bearer , priority 10 [ 82.326757][ T7131] tmpfs: Unknown parameter 'quota ' [ 82.497364][ T7141] qrtr: Invalid version 0 [ 82.616353][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 82.643569][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 82.653199][ T7153] veth0_macvtap: left promiscuous mode [ 82.756723][ T7165] comedi comedi0: Minor 3 could not be opened [ 83.066692][ T7193] fuse: Bad value for 'group_id' [ 83.068332][ T7193] fuse: Bad value for 'group_id' [ 83.157764][ T5948] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 83.230800][ T7203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.241069][ T7203] binder: 7202:7203 ioctl c0306201 200000000500 returned -14 [ 83.262201][ T7205] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 83.314087][ T5948] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.317380][ T5948] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.320796][ T5986] tipc: Node number set to 2886997007 [ 83.322989][ T5948] usb 7-1: config 0 has no interface number 0 [ 83.325935][ T5948] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.332092][ T5948] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.335751][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.342884][ T5948] usb 7-1: config 0 descriptor?? [ 83.348626][ T5948] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 83.423568][ T7213] vim2m vim2m.0: vidioc_s_fmt queue busy [ 83.529734][ T7221] veth0: entered promiscuous mode [ 83.533535][ T7220] veth0: left promiscuous mode [ 83.552411][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.569435][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.338'. [ 83.620540][ T7226] vlan3: entered promiscuous mode [ 83.622197][ T7226] bridge0: entered promiscuous mode [ 83.641460][ T841] usb 7-1: USB disconnect, device number 2 [ 83.644920][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 83.707510][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.711400][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.715135][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.719120][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.721918][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.727975][ T9] usb 6-1: config 0 descriptor?? [ 83.877792][ T7241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4883 sclass=netlink_route_socket pid=7241 comm=syz.3.343 [ 83.884177][ T7241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61032 sclass=netlink_route_socket pid=7241 comm=syz.3.343 [ 84.163635][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 84.279535][ T7276] xt_l2tp: missing protocol rule (udp|l2tpip) [ 84.328741][ T7278] ip6t_srh: unknown srh invflags 4000 [ 84.417707][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.420646][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.433636][ T5986] usb 6-1: USB disconnect, device number 4 [ 84.435532][ T7288] netlink: 'syz.2.358': attribute type 2 has an invalid length. [ 84.483017][ T7294] xt_socket: unknown flags 0x20 [ 84.545287][ T7295] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 84.556176][ T7295] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 84.559082][ T7295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.721247][ T7312] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 84.724733][ T7312] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 84.728330][ T7312] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 84.730940][ T7312] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 84.734492][ T7312] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 84.741183][ T7312] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 84.745535][ T7312] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 84.748594][ T7312] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 84.751781][ T7312] netlink: 'syz.2.363': attribute type 3 has an invalid length. [ 84.799664][ T7315] overlay: filesystem on ./bus not supported as upperdir [ 84.902141][ T7313] overlayfs: missing 'workdir' [ 84.959400][ T7332] netlink: 48 bytes leftover after parsing attributes in process `syz.0.370'. [ 85.134026][ T40] kauditd_printk_skb: 1036 callbacks suppressed [ 85.134037][ T40] audit: type=1400 audit(1762251304.802:1544): avc: denied { create } for pid=7346 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.143616][ T40] audit: type=1400 audit(1762251304.802:1545): avc: denied { write } for pid=7346 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.150192][ T40] audit: type=1400 audit(1762251304.802:1546): avc: denied { read } for pid=7346 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.160149][ T40] audit: type=1400 audit(1762251304.812:1547): avc: denied { read write } for pid=5938 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.171473][ T40] audit: type=1400 audit(1762251304.812:1548): avc: denied { read write open } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.180667][ T40] audit: type=1400 audit(1762251304.812:1549): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.190735][ T40] audit: type=1400 audit(1762251304.812:1550): avc: denied { read write } for pid=5944 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.199751][ T40] audit: type=1400 audit(1762251304.812:1551): avc: denied { open } for pid=5944 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.207911][ T40] audit: type=1400 audit(1762251304.812:1552): avc: denied { ioctl } for pid=5944 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.218002][ T7358] netlink: 24 bytes leftover after parsing attributes in process `'. [ 85.218740][ T40] audit: type=1400 audit(1762251304.832:1553): avc: denied { read write } for pid=7350 comm="syz.3.377" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 85.234321][ T7358] netlink: 4 bytes leftover after parsing attributes in process `'. [ 85.310323][ T7366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.313048][ T7366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.316708][ T7366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.319465][ T7366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.332901][ T6019] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 85.401959][ T7370] netlink: 116 bytes leftover after parsing attributes in process `syz.1.383'. [ 85.405647][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 85.474328][ T6019] usb 5-1: device descriptor read/64, error -71 [ 85.538824][ T7374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.543849][ T7374] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 85.549202][ T7374] bond2: entered allmulticast mode [ 85.559758][ T7374] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 85.726933][ T6019] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 85.878634][ T6019] usb 5-1: device descriptor read/64, error -71 [ 85.990076][ T6019] usb usb5-port1: attempt power cycle [ 86.343528][ T6019] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 86.367683][ T6019] usb 5-1: device descriptor read/8, error -71 [ 86.453614][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.394'. [ 86.503547][ T7410] vxlan0: entered promiscuous mode [ 86.505398][ T7410] vxlan0: entered allmulticast mode [ 86.566458][ T7414] program syz.3.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.569865][ T7414] ata1.00: invalid service action 31 [ 86.605905][ T6019] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 86.632994][ T6019] usb 5-1: device descriptor read/8, error -71 [ 86.673501][ T7426] program syz.3.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.680827][ T7426] netlink: 212 bytes leftover after parsing attributes in process `syz.3.399'. [ 86.689964][ T7426] 8021q: VLANs not supported on sit0 [ 86.737607][ T6019] usb usb5-port1: unable to enumerate USB device [ 86.741559][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.400'. [ 86.870229][ T7439] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.956376][ T7446] random: crng reseeded on system resumption [ 86.983506][ T154] cfg80211: failed to load regulatory.db [ 87.127057][ T7454] openvswitch: netlink: Key type 44 is out of range max 32 [ 87.414017][ T5940] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 87.434332][ T5986] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 87.575278][ T5940] usb 8-1: Using ep0 maxpacket: 8 [ 87.578359][ T5940] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 87.580988][ T5940] usb 8-1: config 0 has no interface number 0 [ 87.583178][ T5940] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.587409][ T5940] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 87.591326][ T5940] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 141, changing to 11 [ 87.594939][ T5940] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 87.595670][ T5986] usb 7-1: Using ep0 maxpacket: 16 [ 87.599236][ T5940] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 87.603792][ T5986] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 87.605075][ T5940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.609712][ T5986] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.614812][ T5940] usb 8-1: config 0 descriptor?? [ 87.616490][ T5986] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.621723][ T5986] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.624817][ T5986] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.626895][ T5940] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 87.639363][ T5986] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 87.643088][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.648481][ T5986] usb 7-1: Product: syz [ 87.650339][ T5986] usb 7-1: Manufacturer: syz [ 87.652360][ T5986] usb 7-1: SerialNumber: syz [ 87.671700][ T5986] usb 7-1: config 0 descriptor?? [ 87.895141][ T5986] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5 [ 87.903119][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 87.907361][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 87.917417][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 87.928905][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 87.962613][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 87.970002][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 87.985617][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 87.998685][ T5936] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 88.013719][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 88.020891][ T5329] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 88.067566][ T7463] comedi comedi1: s526: I/O port conflict (0x3c4,64) [ 88.140661][ T7458] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 88.149447][ T5948] usb 7-1: USB disconnect, device number 3 [ 88.226373][ T7465] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 88.229822][ T7465] overlayfs: missing 'lowerdir' [ 88.479375][ T7473] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 88.517844][ T7475] syzkaller1: entered promiscuous mode [ 88.519731][ T7475] syzkaller1: entered allmulticast mode [ 88.717843][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.420'. [ 89.370388][ T5948] hid-generic 0001:00FF:0009.0004: collection stack underflow [ 89.375962][ T5948] hid-generic 0001:00FF:0009.0004: item 0 4 0 12 parsing failed [ 89.379459][ T5948] hid-generic 0001:00FF:0009.0004: probe with driver hid-generic failed with error -22 [ 89.482990][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 89.612703][ T7524] sit0: entered promiscuous mode [ 89.628381][ T7524] validate_nla: 126 callbacks suppressed [ 89.628391][ T7524] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 89.635210][ T7524] netlink: 1 bytes leftover after parsing attributes in process `syz.0.433'. [ 89.897052][ T5986] usb 8-1: USB disconnect, device number 6 [ 89.902928][ T5986] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 90.107101][ T5948] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 90.187737][ T40] kauditd_printk_skb: 21574 callbacks suppressed [ 90.187749][ T40] audit: type=1326 audit(1762251309.815:23116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.1.411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaaf8efc9 code=0x7ff00000 [ 90.210375][ T40] audit: type=1400 audit(1762251309.815:23117): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.220196][ T40] audit: type=1400 audit(1762251309.815:23118): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.228332][ T40] audit: type=1400 audit(1762251309.815:23119): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.237449][ T40] audit: type=1326 audit(1762251309.815:23120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.1.411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaaf8efc9 code=0x7ff00000 [ 90.246051][ T40] audit: type=1326 audit(1762251309.815:23121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.1.411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaaf8efc9 code=0x7ff00000 [ 90.253966][ T40] audit: type=1326 audit(1762251309.815:23122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.1.411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaaf8efc9 code=0x7ff00000 [ 90.262028][ T40] audit: type=1326 audit(1762251309.815:23123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.1.411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaaf8efc9 code=0x7ff00000 [ 90.269614][ T40] audit: type=1326 audit(1762251309.815:23124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.1.411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaaf8efc9 code=0x7ff00000 [ 90.277195][ T40] audit: type=1326 audit(1762251309.815:23125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.1.411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaaf8efc9 code=0x7ff00000 [ 90.279272][ T5948] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.287872][ T5948] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 90.296556][ T5948] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.300513][ T5948] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.304232][ T5948] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 90.307670][ T5948] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.320613][ T5948] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.323422][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.326000][ T5948] usb 7-1: Product: syz [ 90.327326][ T5948] usb 7-1: Manufacturer: syz [ 90.334815][ T7535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.338098][ T5948] cdc_wdm 7-1:1.0: skipping garbage [ 90.344273][ T5948] cdc_wdm 7-1:1.0: skipping garbage [ 90.348180][ T5948] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 90.350778][ T5948] cdc_wdm 7-1:1.0: Unknown control protocol [ 90.470537][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 90.556529][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.558795][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.561758][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.564062][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.564825][ T7561] binder: 7560:7561 ioctl c0306201 200000000080 returned -14 [ 90.566201][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.569091][ T7561] binder: 7560:7561 ioctl 40085112 200000000180 returned -22 [ 90.570510][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.575052][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.577288][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.579788][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.582229][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.584600][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.586767][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.588889][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.591059][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.593303][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.595477][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.597913][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.600179][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.602314][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 90.604412][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 90.632003][ T841] usb 7-1: USB disconnect, device number 4 [ 90.632034][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 90.729082][ T7565] sp0: Synchronizing with TNC [ 90.737212][ T7565] sp0: Found TNC [ 90.776851][ T7568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 90.778989][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.783506][ T7568] vhci_hcd vhci_hcd.0: Device attached [ 90.785727][ T7569] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 90.787845][ T7569] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.790819][ T7569] vhci_hcd vhci_hcd.0: Device attached [ 90.796007][ T7573] vhci_hcd: unknown pdu 1 [ 90.797680][ T7571] vhci_hcd: connection closed [ 90.801341][ T6675] vhci_hcd: stop threads [ 90.809076][ T6675] vhci_hcd: release socket [ 90.812123][ T6675] vhci_hcd: disconnect device [ 90.821472][ T6675] vhci_hcd: stop threads [ 90.824541][ T6675] vhci_hcd: release socket [ 90.825924][ T6675] vhci_hcd: disconnect device [ 90.890544][ T7564] [U] ` [ 90.997977][ T7582] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 91.008676][ T7582] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 91.054975][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'. [ 91.057936][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'. [ 91.069514][ T7587] kvm: emulating exchange as write [ 91.135663][ T841] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 91.276340][ T841] usb 7-1: device descriptor read/64, error -71 [ 91.388218][ T7605] netlink: 'syz.1.454': attribute type 4 has an invalid length. [ 91.391337][ T7605] netlink: 152 bytes leftover after parsing attributes in process `syz.1.454'. [ 91.398432][ T7605] wlan1: mtu less than device minimum [ 91.438046][ T7607] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 91.459309][ T7607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.517819][ T841] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 91.534490][ T7613] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.542314][ T7613] block device autoloading is deprecated and will be removed. [ 91.601174][ T7616] tipc: Started in network mode [ 91.602007][ T7607] md: could not open device unknown-block(0,0). [ 91.603313][ T7616] tipc: Node identity ce8c59fc7344, cluster identity 4711 [ 91.605452][ T7607] md: md_import_device returned -6 [ 91.610978][ T7616] tipc: Enabled bearer , priority 0 [ 91.660234][ T841] usb 7-1: device descriptor read/64, error -71 [ 91.682833][ T7623] kvm: kvm [7615]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 91.686231][ T7623] kvm: kvm [7615]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 91.770824][ T841] usb usb7-port1: attempt power cycle [ 91.822921][ T7615] tipc: Resetting bearer [ 91.901978][ T57] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 92.059544][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.065054][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.070110][ T57] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 92.074212][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.079013][ T57] usb 6-1: config 0 descriptor?? [ 92.113972][ T841] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 92.133980][ T841] usb 7-1: device descriptor read/8, error -71 [ 92.174417][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 92.386894][ T841] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 92.405849][ T841] usb 7-1: device descriptor read/8, error -71 [ 92.500338][ T57] hid_parser_main: 33 callbacks suppressed [ 92.500354][ T57] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 92.505194][ T57] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 92.520627][ T57] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0005/input/input6 [ 92.529270][ T841] usb usb7-port1: unable to enumerate USB device [ 92.601170][ T57] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 92.687395][ T154] tipc: Node number set to 3184024060 [ 92.863290][ T7615] tipc: Disabling bearer [ 92.956626][ T7634] syzkaller0: entered promiscuous mode [ 92.960043][ T7634] syzkaller0: entered allmulticast mode [ 93.004412][ T7645] IPv6: Can't replace route, no match found [ 93.209578][ T5940] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.356723][ T7653] netlink: 'syz.2.465': attribute type 10 has an invalid length. [ 93.359427][ T7653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.465'. [ 93.360500][ T5940] usb 5-1: device descriptor read/64, error -71 [ 93.601955][ T5940] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.732805][ T5940] usb 5-1: device descriptor read/64, error -71 [ 93.816892][ T7459] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 93.845226][ T5940] usb usb5-port1: attempt power cycle [ 94.086712][ T7653] batadv0: entered promiscuous mode [ 94.088910][ T7653] batadv0: entered allmulticast mode [ 94.092043][ T7653] bridge0: port 3(batadv0) entered blocking state [ 94.095615][ T7653] bridge0: port 3(batadv0) entered disabled state [ 94.099758][ T7653] bridge0: port 3(batadv0) entered blocking state [ 94.101896][ T7653] bridge0: port 3(batadv0) entered forwarding state [ 94.195681][ T5940] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 94.227560][ T5940] usb 5-1: device descriptor read/8, error -71 [ 94.286933][ T6669] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 94.291649][ T6669] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 94.367900][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 94.374671][ T7673] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 94.378426][ T7673] team0: Device ipvlan2 is already an upper device of the team interface [ 94.477767][ T5940] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 94.513098][ T5940] usb 5-1: device descriptor read/8, error -71 [ 94.619294][ T5940] usb usb5-port1: unable to enumerate USB device [ 94.796316][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 95.700491][ T40] kauditd_printk_skb: 4361 callbacks suppressed [ 95.700506][ T40] audit: type=1400 audit(1762251315.288:27463): avc: denied { read write } for pid=5938 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.713241][ T40] audit: type=1400 audit(1762251315.288:27464): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.722102][ T40] audit: type=1400 audit(1762251315.288:27465): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.733224][ T40] audit: type=1400 audit(1762251315.308:27466): avc: denied { prog_load } for pid=7713 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.742692][ T40] audit: type=1400 audit(1762251315.308:27467): avc: denied { bpf } for pid=7713 comm="syz.1.477" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.751193][ T40] audit: type=1400 audit(1762251315.308:27468): avc: denied { perfmon } for pid=7713 comm="syz.1.477" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.759395][ T40] audit: type=1400 audit(1762251315.308:27469): avc: denied { bpf } for pid=7713 comm="syz.1.477" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.767684][ T40] audit: type=1400 audit(1762251315.318:27470): avc: denied { read write } for pid=5930 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.776738][ T40] audit: type=1400 audit(1762251315.318:27471): avc: denied { read write open } for pid=5930 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.788286][ T40] audit: type=1400 audit(1762251315.318:27472): avc: denied { ioctl } for pid=5930 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.868205][ T7723] tipc: Can't bind to reserved service type 2 [ 95.881140][ T841] IPVS: starting estimator thread 0... [ 95.913500][ T7741] fuse: Bad value for 'rootmode' [ 95.965979][ T7737] IPVS: using max 46 ests per chain, 110400 per kthread [ 96.152314][ T7766] Failed to get privilege flags for destination (handle=0x2:0x10) [ 96.226179][ T7774] fuse: Bad value for 'fd' [ 96.231103][ T7774] fuse: Bad value for 'rootmode' [ 96.231258][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 96.235818][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.494'. [ 96.239691][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 96.285778][ T7778] macvlan1: entered allmulticast mode [ 96.290964][ T7778] veth1_vlan: entered allmulticast mode [ 96.307766][ T7786] bridge_slave_0: left allmulticast mode [ 96.309757][ T7786] bridge_slave_0: left promiscuous mode [ 96.311726][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.312004][ T7784] binder: 7781:7784 ioctl c0306201 200000000080 returned -14 [ 96.321196][ T7784] binder_alloc: 7781: binder_alloc_buf, no vma [ 96.324132][ T7784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.495'. [ 96.324165][ T7786] bridge_slave_1: left allmulticast mode [ 96.327169][ T7784] netlink: 92 bytes leftover after parsing attributes in process `syz.1.495'. [ 96.344509][ T7786] bridge_slave_1: left promiscuous mode [ 96.347220][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.375005][ T7786] bond0: (slave bond_slave_0): Releasing backup interface [ 96.390255][ T7786] bond0: (slave bond_slave_1): Releasing backup interface [ 96.397779][ T7786] team0: Port device team_slave_0 removed [ 96.403574][ T7786] team0: Port device team_slave_1 removed [ 96.407701][ T7786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.475001][ T7800] bpf: Bad value for 'uid' [ 96.478003][ T7800] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 96.482396][ T54] usb 6-1: USB disconnect, device number 5 [ 96.649921][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 96.856577][ T7826] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 96.878195][ T7826] bond4: entered promiscuous mode [ 96.880077][ T7826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.919174][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.510'. [ 96.923183][ T7826] bond4: entered allmulticast mode [ 96.928014][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 96.931655][ T7826] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.005962][ T5943] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 97.198641][ T7843] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 97.206779][ T7843] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 97.567196][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.574912][ T6669] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.578611][ T6669] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.581733][ T6669] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.888432][ T7904] binder: binder_mmap: 7903 200000ffc000-200001000000 bad vm_flags failed -1 [ 98.090611][ T7927] program syz.0.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.314652][ T7937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.531'. [ 98.435230][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.437785][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.440416][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.442895][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.447686][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.450368][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.452975][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.456431][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.459083][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.461420][ T5979] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 98.468728][ T5979] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 98.525770][ T7951] fido_id[7951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.574088][ T7960] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 98.583755][ T7960] lo speed is unknown, defaulting to 1000 [ 98.588004][ T7960] lo speed is unknown, defaulting to 1000 [ 98.591160][ T7960] lo speed is unknown, defaulting to 1000 [ 98.597206][ T7960] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.604539][ T7960] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.624446][ T7960] lo speed is unknown, defaulting to 1000 [ 98.627543][ T7960] lo speed is unknown, defaulting to 1000 [ 98.630188][ T7960] lo speed is unknown, defaulting to 1000 [ 98.632858][ T7960] lo speed is unknown, defaulting to 1000 [ 98.743451][ T7973] FAT-fs (sr0): bogus number of reserved sectors [ 98.745980][ T7973] FAT-fs (sr0): Can't find a valid FAT filesystem [ 99.139873][ T8007] bridge0: entered allmulticast mode [ 99.143728][ T8007] bridge0: left allmulticast mode [ 99.146364][ T8007] netlink: 'syz.2.553': attribute type 1 has an invalid length. [ 99.196553][ T8017] comedi comedi1: s526: I/O port conflict (0x3c4,64) [ 99.304988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.688869][ T8064] netlink: 'syz.3.572': attribute type 4 has an invalid length. [ 99.705101][ T54] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 99.846784][ T54] usb 6-1: device descriptor read/64, error -71 [ 99.860127][ T8085] program syz.0.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.913428][ T8087] __nla_validate_parse: 7 callbacks suppressed [ 99.913438][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 99.919531][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 100.084889][ T54] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 100.214802][ T54] usb 6-1: device descriptor read/64, error -71 [ 100.324905][ T54] usb usb6-port1: attempt power cycle [ 100.684829][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 100.727422][ T40] kauditd_printk_skb: 1505 callbacks suppressed [ 100.727434][ T40] audit: type=1400 audit(1762251576.306:28978): avc: denied { ioctl } for pid=8042 comm="syz.1.564" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.727522][ T54] usb 6-1: device descriptor read/8, error -71 [ 100.730670][ T40] audit: type=1400 audit(1762251576.306:28979): avc: denied { create } for pid=8094 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.739864][ T5943] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.740101][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.743614][ T40] audit: type=1400 audit(1762251576.306:28980): avc: denied { create } for pid=8094 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.763302][ T40] audit: type=1400 audit(1762251576.306:28981): avc: denied { write } for pid=8094 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.770374][ T40] audit: type=1400 audit(1762251576.306:28982): avc: denied { read } for pid=8094 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.776836][ T40] audit: type=1400 audit(1762251576.306:28983): avc: denied { create } for pid=8094 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.783629][ T40] audit: type=1400 audit(1762251576.306:28984): avc: denied { create } for pid=8094 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.790403][ T40] audit: type=1400 audit(1762251576.306:28985): avc: denied { create } for pid=8094 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.797253][ T40] audit: type=1400 audit(1762251576.306:28986): avc: denied { write } for pid=8094 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.804025][ T40] audit: type=1400 audit(1762251576.306:28987): avc: denied { read } for pid=8094 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.816814][ T8099] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 100.829347][ T8098] vxfs: WRONG superblock magic 00000000 at 1 [ 100.832345][ T8098] vxfs: WRONG superblock magic 00000000 at 8 [ 100.834346][ T8098] vxfs: can't find superblock. [ 100.968214][ T8102] lo speed is unknown, defaulting to 1000 [ 100.995020][ T54] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 101.015740][ T54] usb 6-1: device descriptor read/8, error -71 [ 101.126815][ T54] usb usb6-port1: unable to enumerate USB device [ 101.265726][ T8107] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 101.384823][ T5986] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 101.514847][ T5986] usb 6-1: device descriptor read/64, error -71 [ 101.754814][ T5986] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 101.761254][ T8120] syzkaller0: entered promiscuous mode [ 101.763584][ T8120] syzkaller0: entered allmulticast mode [ 101.767965][ T8120] 0: reclassify loop, rule prio 0, protocol 800 [ 101.885582][ T5986] usb 6-1: device descriptor read/64, error -71 [ 101.994978][ T5986] usb usb6-port1: attempt power cycle [ 102.146452][ T8135] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.590'. [ 102.196404][ T8137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8137 comm=syz.0.593 [ 102.201774][ T8137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=8137 comm=syz.0.593 [ 102.305682][ T8144] ip6t_srh: unknown srh invflags 4000 [ 102.334823][ T5986] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 102.355592][ T5986] usb 6-1: device descriptor read/8, error -71 [ 102.392758][ T8146] libceph: resolve ' [ 102.392758][ T8146] -&fYǝa2i [ 102.392758][ T8146] .?&*&' (ret=-3): failed [ 102.439210][ T8151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.598'. [ 102.445827][ T8151] netlink: 80 bytes leftover after parsing attributes in process `syz.0.598'. [ 102.542261][ T8163] Bluetooth: hci4: Frame reassembly failed (-90) [ 102.546303][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 103.442030][ T8181] ISOFS: Unable to identify CD-ROM format. [ 103.455208][ T8183] ISOFS: Unable to identify CD-ROM format. [ 103.618974][ T8196] lo speed is unknown, defaulting to 1000 [ 103.908241][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 104.072307][ T8217] netlink: 1 bytes leftover after parsing attributes in process `syz.1.616'. [ 104.177876][ T8222] support for the xor transformation has been removed. [ 104.240459][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 104.243598][ T8225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.620'. [ 104.249795][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.620'. [ 104.252666][ T8225] netlink: 'syz.2.620': attribute type 7 has an invalid length. [ 104.255380][ T8225] netlink: 'syz.2.620': attribute type 8 has an invalid length. [ 104.384933][ T8227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.574862][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 104.574928][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 105.224954][ T7459] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 105.330316][ T8247] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 105.374914][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 105.384855][ T7459] usb 5-1: Using ep0 maxpacket: 8 [ 105.392593][ T7459] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 105.401835][ T7459] usb 5-1: config 0 has no interface number 0 [ 105.404002][ T7459] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.411990][ T7459] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 105.422116][ T7459] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.432246][ T7459] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.442403][ T7459] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 105.452533][ T7459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.466086][ T7459] usb 5-1: config 0 descriptor?? [ 105.479558][ T7459] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 105.797148][ T40] kauditd_printk_skb: 569 callbacks suppressed [ 105.797160][ T40] audit: type=1400 audit(1762251581.376:29557): avc: denied { read write } for pid=5938 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.832398][ T40] audit: type=1400 audit(1762251581.386:29558): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.850871][ T40] audit: type=1400 audit(1762251581.386:29559): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.878658][ T7459] usb 5-1: USB disconnect, device number 11 [ 105.879939][ T40] audit: type=1400 audit(1762251581.456:29560): avc: denied { create } for pid=8249 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.885673][ T7459] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 105.888892][ T40] audit: type=1400 audit(1762251581.456:29561): avc: denied { bind } for pid=8249 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.897104][ T40] audit: type=1400 audit(1762251581.456:29562): avc: denied { setopt } for pid=8249 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.903331][ T40] audit: type=1400 audit(1762251581.456:29563): avc: denied { accept } for pid=8249 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.910888][ T40] audit: type=1400 audit(1762251581.456:29564): avc: denied { write } for pid=8249 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.935491][ T40] audit: type=1400 audit(1762251581.516:29565): avc: denied { prog_load } for pid=8249 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.941743][ T40] audit: type=1400 audit(1762251581.516:29566): avc: denied { bpf } for pid=8249 comm="syz.1.628" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.432585][ T8263] __nla_validate_parse: 2 callbacks suppressed [ 106.432602][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 106.447529][ T8263] bond2: Invalid ad_actor_system MAC address. [ 106.449817][ T8263] bond2: option ad_actor_system: invalid value (255) [ 106.453274][ T8263] bond2 (unregistering): Released all slaves [ 106.484785][ T6019] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 106.485540][ T8265] netlink: 'syz.0.632': attribute type 12 has an invalid length. [ 106.489830][ T8265] netlink: 'syz.0.632': attribute type 29 has an invalid length. [ 106.492702][ T8265] netlink: 148 bytes leftover after parsing attributes in process `syz.0.632'. [ 106.496916][ T8265] netlink: 'syz.0.632': attribute type 2 has an invalid length. [ 106.499887][ T8265] netlink: 'syz.0.632': attribute type 3 has an invalid length. [ 106.502611][ T8265] netlink: 15 bytes leftover after parsing attributes in process `syz.0.632'. [ 106.560067][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 106.567142][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 106.567674][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 106.655226][ T6019] usb 7-1: Using ep0 maxpacket: 32 [ 106.664963][ T6019] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.667521][ T6019] usb 7-1: config 0 has no interface number 0 [ 106.674499][ T6019] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 106.678430][ T6019] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.681269][ T6019] usb 7-1: Product: syz [ 106.683061][ T6019] usb 7-1: Manufacturer: syz [ 106.686504][ T6019] usb 7-1: SerialNumber: syz [ 106.692811][ T8278] syz.3.636: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 106.693241][ T6019] usb 7-1: config 0 descriptor?? [ 106.706107][ T6019] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 106.712403][ T6019] usb 7-1: selecting invalid altsetting 1 [ 106.714529][ T6019] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 106.716533][ T8280] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.637'. [ 106.746539][ T6019] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.757708][ T6019] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 106.760899][ T6019] usb 7-1: media controller created [ 106.772908][ T6019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.935581][ T8286] block nbd0: server does not support multiple connections per device. [ 106.940522][ T8286] block nbd0: shutting down sockets [ 106.942801][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 106.959432][ T8285] bond2: entered promiscuous mode [ 107.001820][ T8295] kernel profiling enabled (shift: 9) [ 107.071463][ T8300] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 107.291756][ T8325] netlink: 'syz.3.650': attribute type 13 has an invalid length. [ 107.297262][ T8325] gretap0: refused to change device tx_queue_len [ 107.299417][ T8325] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 107.320264][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 107.455785][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 107.550291][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 107.735074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 107.808650][ T8361] lo speed is unknown, defaulting to 1000 [ 107.844906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 107.855250][ T6019] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 107.861298][ T6019] zl10353_read_register: readreg error (reg=127, ret==-110) [ 107.865408][ T6019] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 107.882049][ T8368] mmap: syz.1.663 (8368) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.902586][ T8358] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 107.917084][ T6019] usb 7-1: USB disconnect, device number 9 [ 107.998195][ T8378] mkiss: ax0: crc mode is auto. [ 108.113486][ T8388] i2c i2c-1: Invalid block write size 34 [ 108.474819][ T5986] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 108.636383][ T5986] usb 6-1: Using ep0 maxpacket: 8 [ 108.644660][ T5986] usb 6-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 108.648233][ T5986] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.651352][ T5986] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.655625][ T5986] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50873, setting to 1024 [ 108.659526][ T5986] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 108.662946][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.669362][ T8392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.673417][ T5986] hub 6-1:1.0: bad descriptor, ignoring hub [ 108.677296][ T5986] hub 6-1:1.0: probe with driver hub failed with error -5 [ 108.680597][ T5986] cdc_wdm 6-1:1.0: skipping garbage [ 108.682669][ T5986] cdc_wdm 6-1:1.0: skipping garbage [ 108.689205][ T5986] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 108.691073][ T5986] cdc_wdm 6-1:1.0: Unknown control protocol [ 108.777288][ T8422] \%@ calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.901102][ T8426] xt_ipcomp: unknown flags 1D [ 108.958499][ C0] wdm_int_callback: 145 callbacks suppressed [ 108.958514][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.963562][ C0] wdm_int_callback: 145 callbacks suppressed [ 108.963575][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.968717][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.971428][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.974675][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 108.992640][ T8435] batman_adv: batadv0: Adding interface: gretap1 [ 108.995122][ T8435] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.005440][ T8435] batman_adv: batadv0: Interface activated: gretap1 [ 109.006263][ T154] usb 6-1: USB disconnect, device number 14 [ 109.324486][ T7459] IPVS: starting estimator thread 0... [ 109.426846][ T8452] IPVS: using max 46 ests per chain, 110400 per kthread [ 109.428810][ T8462] comedi comedi3: comedi_config --init_data is deprecated [ 109.749718][ T8478] tipc: Enabled bearer , priority 0 [ 109.759691][ T8478] syzkaller0: entered promiscuous mode [ 109.761815][ T8478] syzkaller0: entered allmulticast mode [ 109.830934][ T8478] tipc: Resetting bearer [ 109.842545][ T8483] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.880614][ T8477] tipc: Resetting bearer [ 109.892895][ T8477] tipc: Disabling bearer [ 109.979736][ T8496] netlink: 'syz.1.701': attribute type 9 has an invalid length. [ 110.158819][ T8516] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 110.161723][ T8516] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 110.171466][ T8516] loop2: detected capacity change from 0 to 7 [ 110.180501][ T8516] Dev loop2: unable to read RDB block 7 [ 110.183269][ T8516] loop2: AHDI p1 p2 p3 [ 110.184970][ T8516] loop2: partition table partially beyond EOD, truncated [ 110.189168][ T8516] loop2: p1 start 1601398130 is beyond EOD, truncated [ 110.191815][ T8516] loop2: p2 start 1702059890 is beyond EOD, truncated [ 110.409198][ T8540] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 110.439659][ T8540] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 110.544531][ T8550] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 110.754440][ T6660] bond0: (slave bond_slave_0): interface is now down [ 110.758228][ T6660] bond0: (slave bond_slave_1): interface is now down [ 110.764154][ T6660] bond0: now running without any active interface! [ 110.806245][ T40] kauditd_printk_skb: 1346 callbacks suppressed [ 110.806258][ T40] audit: type=1400 audit(1762251586.386:30913): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.817464][ T40] audit: type=1400 audit(1762251586.386:30914): avc: denied { read write open } for pid=5931 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.825981][ T40] audit: type=1400 audit(1762251586.386:30915): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.836806][ T40] audit: type=1400 audit(1762251586.396:30916): avc: denied { create } for pid=8564 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.843955][ T40] audit: type=1400 audit(1762251586.406:30917): avc: denied { create } for pid=8564 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.850843][ T40] audit: type=1400 audit(1762251586.406:30918): avc: denied { bind } for pid=8564 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.857731][ T40] audit: type=1400 audit(1762251586.406:30919): avc: denied { node_bind } for pid=8564 comm="syz.0.720" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 110.865856][ T40] audit: type=1400 audit(1762251586.406:30920): avc: denied { create } for pid=8564 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.873908][ T40] audit: type=1400 audit(1762251586.406:30921): avc: denied { bind } for pid=8564 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.883228][ T40] audit: type=1400 audit(1762251586.406:30922): avc: denied { node_bind } for pid=8564 comm="syz.0.720" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 110.959145][ T8567] SELinux: failed to load policy [ 111.060620][ T8574] netlink: 'syz.0.722': attribute type 21 has an invalid length. [ 111.147946][ T8576] bond2 (unregistering): Released all slaves [ 111.385556][ T8589] cgroup2: Unknown parameter 'euid' [ 111.494194][ T8594] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8594 comm=syz.0.730 [ 111.554222][ T8598] efs: device does not support 512 byte blocks [ 111.557949][ T8598] device does not support 512 byte blocks [ 111.557949][ T8598] [ 111.670931][ T8606] __nla_validate_parse: 11 callbacks suppressed [ 111.670943][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 111.744790][ T5979] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 111.906498][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 111.909999][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.913222][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 111.918037][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 111.923613][ T5979] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 111.927484][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.930030][ T5979] usb 5-1: Product: syz [ 111.931354][ T5979] usb 5-1: Manufacturer: syz [ 111.932853][ T5979] usb 5-1: SerialNumber: syz [ 111.936796][ T5979] usb 5-1: config 0 descriptor?? [ 111.965299][ T8621] Invalid logical block size (7) [ 112.157777][ T5979] adutux 5-1:0.0: ADU208 ᶼ둛 now attached to /dev/usb/adutux0 [ 112.259367][ T8641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.384795][ T54] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 112.489598][ T8656] netlink: 48 bytes leftover after parsing attributes in process `syz.1.749'. [ 112.524997][ T54] usb 7-1: device descriptor read/64, error -71 [ 112.764956][ T54] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 112.894821][ T54] usb 7-1: device descriptor read/64, error -71 [ 112.949160][ T8682] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 113.006423][ T54] usb usb7-port1: attempt power cycle [ 113.205004][ T8699] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 113.360913][ T8708] loop5: detected capacity change from 0 to 7 [ 113.373967][ T6243] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 113.385856][ T54] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 113.385941][ T6243] loop5: partition table partially beyond EOD, truncated [ 113.391391][ T6243] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 113.408282][ T8708] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 113.410104][ T8708] loop5: partition table partially beyond EOD, truncated [ 113.412630][ T8708] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 113.422478][ T54] usb 7-1: device descriptor read/8, error -71 [ 113.469939][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 113.506837][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 113.601379][ T8719] netlink: 'syz.3.767': attribute type 4 has an invalid length. [ 113.604738][ T8719] netlink: 152 bytes leftover after parsing attributes in process `syz.3.767'. [ 113.609714][ T8719] .`: renamed from bond0 [ 113.644448][ T8721] ubi31: attaching mtd0 [ 113.648245][ T8721] ubi31: scanning is finished [ 113.649896][ T8721] ubi31: empty MTD device detected [ 113.685477][ T54] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 113.718948][ T54] usb 7-1: device descriptor read/8, error -71 [ 113.822673][ T8721] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 113.825691][ T8721] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 113.828051][ T8721] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 113.830430][ T8721] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 113.833827][ T8721] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 113.838745][ T8721] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 113.841583][ T8721] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 803777496 [ 113.846444][ T54] usb usb7-port1: unable to enumerate USB device [ 113.847481][ T8721] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 113.860051][ T8737] ubi31: background thread "ubi_bgt31d" started, PID 8737 [ 113.875705][ T8739] No control pipe specified [ 114.040192][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'. [ 114.169158][ T8758] [U] zͻi[27| [ 114.170736][ T8758] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 114.175370][ T8758] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 114.177605][ T8758] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 114.189450][ T8758] [U] 8)X)YvxRĻbmbN@ox;JD, [ 114.191546][ T8758] [U] *Cn3v7KEXgt_3 [ 114.193270][ T8758] [U] D/QazҬEHgE1$_ks=R@ [ 114.195277][ T8758] [U] ϼcEv @ [ 114.196601][ T8758] [U] a% [ 114.197814][ T8758] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 114.204739][ T8758] [U] f1p3 [ 114.205827][ T8758] [U] N0[L;a_l&kMC [ 114.207395][ T8758] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 114.211238][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 114.214446][ T8757] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 audit_backlog_limit=64 [ 116.081176][ T5938] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 116.081183][ T5938] audit: backlog limit exceeded [ 116.085916][ T5938] audit: audit_backlog=65 > audit_backlog_limit=64 [ 116.087333][ T154] usb 8-1: Manufacturer: syz [ 116.097111][ T154] usb 8-1: SerialNumber: syz [ 116.101690][ T8832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.105814][ T8832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.116816][ T154] usb 8-1: Error in usbnet_get_endpoints (-22) [ 116.155908][ T8876] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 116.330676][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 116.333501][ T8832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.804'. [ 116.357268][ T6019] usb 8-1: USB disconnect, device number 7 [ 117.208846][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 117.523834][ T54] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 117.694952][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 117.698121][ T54] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.702031][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.705213][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.709182][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.712691][ T54] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 117.715890][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.737114][ T54] hub 5-1:1.0: bad descriptor, ignoring hub [ 117.739305][ T54] hub 5-1:1.0: probe with driver hub failed with error -5 [ 117.742003][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 117.743777][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 117.748176][ T54] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 117.751428][ T54] cdc_wdm 5-1:1.0: Unknown control protocol [ 117.945282][ T8961] binder: 8960:8961 ioctl c018620c 200000000240 returned -1 [ 117.986758][ T8972] __nla_validate_parse: 4 callbacks suppressed [ 117.986769][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 118.032916][ T8975] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 118.035718][ T8975] netlink: 'syz.2.842': attribute type 3 has an invalid length. [ 118.039147][ T8975] netlink: 224 bytes leftover after parsing attributes in process `syz.2.842'. [ 118.147393][ T8979] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 118.155796][ T6650] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x1e [ 120.582082][ T154] usb 5-1: USB disconnect, device number 13 [ 123.838154][ T40] kauditd_printk_skb: 2431 callbacks suppressed [ 123.838166][ T40] audit: type=1400 audit(1762251598.700:35500): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.848270][ T40] audit: type=1400 audit(1762251598.700:35501): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.856033][ T40] audit: type=1400 audit(1762251598.728:35502): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.864158][ T40] audit: type=1400 audit(1762251598.737:35503): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.875396][ T40] audit: type=1400 audit(1762251598.737:35504): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.882853][ T40] audit: type=1400 audit(1762251598.737:35505): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.890583][ T40] audit: type=1400 audit(1762251598.737:35506): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.897982][ T40] audit: type=1400 audit(1762251598.746:35507): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.905320][ T40] audit: type=1400 audit(1762251598.746:35508): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.912676][ T40] audit: type=1400 audit(1762251598.746:35509): avc: denied { setattr } for pid=5938 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.186423][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 131.186435][ T40] audit: type=1400 audit(1762251605.583:35516): avc: denied { execute } for pid=8988 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 131.196854][ T40] audit: type=1400 audit(1762251605.583:35517): avc: denied { execute_no_trans } for pid=8988 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 131.206499][ T40] audit: type=1400 audit(1762251605.583:35518): avc: denied { execute } for pid=8988 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 131.214298][ T40] audit: type=1400 audit(1762251605.611:35519): avc: denied { execmem } for pid=8988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 133.505620][ T40] audit: type=1400 audit(1762251607.753:35520): avc: denied { prog_load } for pid=8992 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.511696][ T40] audit: type=1400 audit(1762251607.753:35521): avc: denied { bpf } for pid=8992 comm="syz.3.848" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.518209][ T40] audit: type=1400 audit(1762251607.753:35522): avc: denied { perfmon } for pid=8992 comm="syz.3.848" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.525479][ T40] audit: type=1400 audit(1762251607.753:35523): avc: denied { bpf } for pid=8992 comm="syz.3.848" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.541007][ T40] audit: type=1400 audit(1762251607.753:35524): avc: denied { bpf } for pid=8992 comm="syz.3.848" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.547380][ T40] audit: type=1400 audit(1762251607.753:35525): avc: denied { read write } for pid=8991 comm="syz.0.845" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 133.620869][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.625924][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.629437][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.633250][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.636055][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.654184][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 133.661597][ T9002] lo speed is unknown, defaulting to 1000 [ 133.754264][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 133.819038][ T7667] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 133.835085][ T9020] sctp: [Deprecated]: syz.0.853 (pid 9020) Use of int in max_burst socket option deprecated. [ 133.835085][ T9020] Use struct sctp_assoc_value instead [ 133.846445][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.848722][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.852235][ T9002] bridge_slave_0: entered allmulticast mode [ 133.855195][ T9002] bridge_slave_0: entered promiscuous mode [ 133.859393][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.862083][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.864614][ T9002] bridge_slave_1: entered allmulticast mode [ 133.868918][ T9002] bridge_slave_1: entered promiscuous mode [ 133.922741][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.928027][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.953589][ T9026] sg_read: process 613 (syz.0.854) changed security contexts after opening file descriptor, this is not allowed. [ 133.963605][ T9002] team0: Port device team_slave_0 added [ 133.967423][ T9002] team0: Port device team_slave_1 added [ 133.981417][ T7667] usb 7-1: config 1 has no interfaces? [ 133.983348][ T7667] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.986668][ T7667] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.017229][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.019538][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.029041][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.034210][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.036911][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.045720][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.062949][ T9028] MINIX-fs: blocksize too small for device [ 134.112369][ T9002] hsr_slave_0: entered promiscuous mode [ 134.114970][ T9002] hsr_slave_1: entered promiscuous mode [ 134.117293][ T9002] debugfs: 'hsr0' already exists in 'hsr' [ 134.119435][ T9002] Cannot create hsr debugfs directory [ 134.268264][ T9002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.275029][ T9002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.280312][ T9002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.285881][ T9002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.303752][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.306179][ T9002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.308935][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.311387][ T9002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.342769][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.352465][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.357791][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.374540][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.383973][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.386329][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.396913][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.399277][ T6655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.541263][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.755923][ T9002] veth0_vlan: entered promiscuous mode [ 134.764217][ T9002] veth1_vlan: entered promiscuous mode [ 134.788762][ T9002] veth0_macvtap: entered promiscuous mode [ 134.793726][ T9002] veth1_macvtap: entered promiscuous mode [ 134.808286][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.816386][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.833438][ T6655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.836895][ T6655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.841009][ T6655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.844114][ T6655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.192038][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 135.623576][ T9100] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 135.630370][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 135.634268][ T9100] CIFS mount error: No usable UNC path provided in device string! [ 135.634268][ T9100] [ 135.639157][ T9100] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.643587][ T9101] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 135.748414][ T9106] Cache volume key already in use (9p,syz,) [ 135.908920][ T9112] veth1_virt_wifi: entered allmulticast mode [ 136.307438][ T9130] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 136.311563][ T9129] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 136.427683][ T9136] uj?Zj: renamed from lo [ 136.594938][ T40] kauditd_printk_skb: 545 callbacks suppressed [ 136.594951][ T40] audit: type=1400 audit(1762251610.643:36071): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.606467][ T40] audit: type=1400 audit(1762251610.643:36072): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.619193][ T40] audit: type=1400 audit(1762251610.643:36073): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.631225][ T40] audit: type=1400 audit(1762251610.671:36074): avc: denied { map_create } for pid=9144 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.638229][ T40] audit: type=1400 audit(1762251610.671:36075): avc: denied { bpf } for pid=9144 comm="syz.0.885" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.647599][ T40] audit: type=1400 audit(1762251610.671:36076): avc: denied { map_read map_write } for pid=9144 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.655965][ T40] audit: type=1400 audit(1762251610.671:36077): avc: denied { read write } for pid=9144 comm="syz.0.885" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.666021][ T40] audit: type=1400 audit(1762251610.671:36078): avc: denied { read write open } for pid=9144 comm="syz.0.885" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.676362][ T40] audit: type=1400 audit(1762251610.671:36079): avc: denied { read write } for pid=9144 comm="syz.0.885" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.686564][ T40] audit: type=1400 audit(1762251610.671:36080): avc: denied { open } for pid=9144 comm="syz.0.885" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.730283][ T841] usb 7-1: USB disconnect, device number 14 [ 137.064329][ T6655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.229466][ T9161] loop2: detected capacity change from 0 to 7 [ 137.235238][ T9161] loop2: p1 [ 137.236408][ T9161] loop2: partition table partially beyond EOD, truncated [ 137.239093][ T9161] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 137.258164][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.270820][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.275499][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.285599][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.288627][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.330760][ T9165] lo speed is unknown, defaulting to 1000 [ 137.362971][ T9171] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 137.376982][ T9171] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.380943][ T13] bond0: (slave dummy0): interface is now down [ 137.398490][ T5344] loop2: p1 [ 137.399974][ T5344] loop2: partition table partially beyond EOD, truncated [ 137.403360][ T13] bond0: (slave dummy0): interface is now down [ 137.403967][ T5344] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 137.422632][ T6660] bond0: (slave dummy0): interface is now down [ 137.444267][ T6660] bond0: (slave dummy0): interface is now down [ 137.449807][ T9175] netlink: 32 bytes leftover after parsing attributes in process `syz.0.894'. [ 137.465227][ T6657] bond0: (slave dummy0): interface is now down [ 137.467716][ T6657] bond0: now running without any active interface! [ 137.495883][ T8989] udevd[8989]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 137.537222][ T9165] chnl_net:caif_netlink_parms(): no params data found [ 137.554363][ T9182] mkiss: ax0: crc mode is auto. [ 137.664842][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.667223][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.670009][ T9165] bridge_slave_0: entered allmulticast mode [ 137.673290][ T9165] bridge_slave_0: entered promiscuous mode [ 137.677240][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.681046][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.684065][ T9165] bridge_slave_1: entered allmulticast mode [ 137.687124][ T9165] bridge_slave_1: entered promiscuous mode [ 137.744102][ T9196] netlink: 'syz.0.899': attribute type 2 has an invalid length. [ 137.746785][ T9196] netlink: 68 bytes leftover after parsing attributes in process `syz.0.899'. [ 137.750726][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.757700][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.822794][ T9165] team0: Port device team_slave_0 added [ 137.837874][ T9165] team0: Port device team_slave_1 added [ 137.881965][ T9193] block nbd2: shutting down sockets [ 137.954029][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.956293][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.967162][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.973798][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.976040][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.990583][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.037087][ T9220] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.048211][ T9165] hsr_slave_0: entered promiscuous mode [ 138.050485][ T9165] hsr_slave_1: entered promiscuous mode [ 138.052356][ T9193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9193 comm=syz.2.898 [ 138.052698][ T9165] debugfs: 'hsr0' already exists in 'hsr' [ 138.060960][ T9165] Cannot create hsr debugfs directory [ 138.356703][ T9232] netlink: 104 bytes leftover after parsing attributes in process `syz.2.909'. [ 138.365379][ T9232] gfs2: error -5 reading superblock [ 138.489841][ T9241] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 138.739300][ T9249] netlink: 'syz.2.915': attribute type 64 has an invalid length. [ 138.741834][ T9249] netlink: 'syz.2.915': attribute type 4 has an invalid length. [ 138.744395][ T9249] netlink: 152 bytes leftover after parsing attributes in process `syz.2.915'. [ 138.927285][ T6655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.034330][ T6655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.114620][ T6655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.257872][ T6655] bridge_slave_1: left allmulticast mode [ 139.261356][ T6655] bridge_slave_1: left promiscuous mode [ 139.265909][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.275419][ T6655] bridge_slave_0: left allmulticast mode [ 139.277615][ T6655] bridge_slave_0: left promiscuous mode [ 139.281895][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.373295][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 139.486077][ T5943] Bluetooth: hci2: command tx timeout [ 139.615913][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.621602][ T6655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.625432][ T6655] bond0 (unregistering): Released all slaves [ 139.633504][ T9278] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 139.697962][ T9289] netlink: 'syz.0.925': attribute type 2 has an invalid length. [ 139.702138][ T9289] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 139.705137][ T9289] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 139.723475][ T9289] SELinux: security policydb version 17 (MLS) not backwards compatible [ 139.724035][ T9292] netlink: 'syz.2.926': attribute type 11 has an invalid length. [ 139.726069][ T9289] SELinux: failed to load policy [ 139.733457][ T9292] netlink: 244 bytes leftover after parsing attributes in process `syz.2.926'. [ 139.929473][ T6655] hsr_slave_0: left promiscuous mode [ 139.933016][ T6655] hsr_slave_1: left promiscuous mode [ 139.938031][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.940522][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.944555][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.947113][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.998682][ T6655] veth1_macvtap: left promiscuous mode [ 140.002444][ T6655] veth0_macvtap: left promiscuous mode [ 140.002862][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.004626][ T6655] veth1_vlan: left promiscuous mode [ 140.006790][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.010520][ T6655] veth0_vlan: left promiscuous mode [ 140.278557][ T154] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.459040][ T154] usb 5-1: Using ep0 maxpacket: 8 [ 140.462356][ T154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.466038][ T154] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.468940][ T154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.475762][ T154] usb 5-1: config 0 descriptor?? [ 140.709320][ T154] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 140.716959][ T154] usb 5-1: USB disconnect, device number 14 [ 140.737852][ T6655] team0 (unregistering): Port device team_slave_1 removed [ 140.784804][ T9320] netlink: 256 bytes leftover after parsing attributes in process `syz.0.931'. [ 140.852099][ T6655] team0 (unregistering): Port device team_slave_0 removed [ 141.557323][ T9329] --map-set only usable from mangle table [ 141.619729][ T9165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.631179][ T9165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.643623][ T9334] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 141.649184][ T9165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.680429][ T9165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.686936][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 141.710099][ T5943] Bluetooth: hci2: command tx timeout [ 141.722608][ T9334] bond2: (slave bridge4): making interface the new active one [ 141.725429][ T9334] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 141.816186][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.847551][ T9165] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.857096][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.860095][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.874813][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.877296][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.949629][ T40] kauditd_printk_skb: 932 callbacks suppressed [ 141.949643][ T40] audit: type=1400 audit(1762251615.656:37013): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.971149][ T40] audit: type=1400 audit(1762251615.656:37014): avc: denied { read write open } for pid=5931 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.977604][ T6675] wlan1: Trigger new scan to find an IBSS to join [ 141.983000][ T40] audit: type=1400 audit(1762251615.656:37015): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.996532][ T6675] ------------[ cut here ]------------ [ 141.999162][ T6675] WARNING: CPU: 2 PID: 6675 at net/mac80211/scan.c:1236 ieee80211_request_ibss_scan+0x7cf/0x9d0 [ 142.003466][ T6675] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 142.005633][ T6675] CPU: 2 UID: 0 PID: 6675 Comm: kworker/u32:36 Not tainted syzkaller #0 PREEMPT(full) [ 142.012085][ T6675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.016843][ T6675] Workqueue: events_unbound cfg80211_wiphy_work [ 142.019360][ T6675] RIP: 0010:ieee80211_request_ibss_scan+0x7cf/0x9d0 [ 142.022530][ T6675] Code: 45 0c e9 15 fb ff ff e8 0f a7 eb f6 83 44 24 08 01 8b 74 24 08 bf 06 00 00 00 e8 3c a2 eb f6 e9 36 fd ff ff e8 f2 a6 eb f6 90 <0f> 0b 90 bb ea ff ff ff e9 69 fc ff ff 48 c7 c7 54 27 82 90 e8 58 [ 142.030986][ T6675] RSP: 0018:ffffc900037f7900 EFLAGS: 00010293 [ 142.034716][ T6675] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8ad1640c [ 142.038134][ T6675] RDX: ffff88802c1c8000 RSI: ffffffff8ad1649e RDI: 0000000000000005 [ 142.041064][ T6675] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 142.044210][ T40] audit: type=1400 audit(1762251615.684:37016): avc: denied { module_request } for pid=9165 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 142.044243][ T40] audit: type=1400 audit(1762251615.702:37017): avc: denied { write } for pid=5868 comm="syz-executor" path="pipe:[7421]" dev="pipefs" ino=7421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 142.044267][ T40] audit: type=1400 audit(1762251615.702:37018): avc: denied { write } for pid=5868 comm="syz-executor" path="pipe:[7421]" dev="pipefs" ino=7421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 142.044292][ T40] audit: type=1400 audit(1762251615.721:37019): avc: denied { search } for pid=9355 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.044316][ T40] audit: type=1400 audit(1762251615.721:37020): avc: denied { search } for pid=9355 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.044340][ T40] audit: type=1400 audit(1762251615.721:37021): avc: denied { search } for pid=9355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.051656][ T6675] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000005 [ 142.075255][ T9355] audit: audit_backlog=65 > audit_backlog_limit=64 [ 142.075720][ T6675] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888035160e80 [ 142.099654][ T6675] FS: 0000000000000000(0000) GS:ffff8880d6c0a000(0000) knlGS:0000000000000000 [ 142.102957][ T6675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.105425][ T6675] CR2: 000000110c39e1f5 CR3: 000000000e182000 CR4: 0000000000352ef0 [ 142.108239][ T6675] DR0: 0000000000000000 DR1: 0000800000000000 DR2: 0000000000000000 [ 142.110771][ T6675] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 142.113740][ T6675] Call Trace: [ 142.115003][ T6675] [ 142.116174][ T6675] ieee80211_ibss_work+0x1056/0x1480 [ 142.118092][ T6675] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 142.119925][ T6675] ? __lock_acquire+0xb8a/0x1c90 [ 142.121662][ T6675] ? rcu_is_watching+0x12/0xc0 [ 142.123337][ T6675] ? mark_held_locks+0x49/0x80 [ 142.124929][ T6675] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 142.126828][ T6675] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.128757][ T6675] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 142.130734][ T6675] ieee80211_iface_work+0xe6d/0x1360 [ 142.132913][ T6675] ? rcu_is_watching+0x12/0xc0 [ 142.134487][ T6675] cfg80211_wiphy_work+0x2c7/0x580 [ 142.136234][ T6675] process_one_work+0x9cf/0x1b70 [ 142.137931][ T6675] ? __pfx_process_one_work+0x10/0x10 [ 142.139792][ T6675] ? assign_work+0x1a0/0x250 [ 142.141303][ T6675] worker_thread+0x6c8/0xf10 [ 142.142812][ T6675] ? __pfx_worker_thread+0x10/0x10 [ 142.144789][ T6675] kthread+0x3c5/0x780 [ 142.146352][ T6675] ? __pfx_kthread+0x10/0x10 [ 142.148031][ T6675] ? rcu_is_watching+0x12/0xc0 [ 142.149848][ T6675] ? __pfx_kthread+0x10/0x10 [ 142.151339][ T6675] ret_from_fork+0x675/0x7d0 [ 142.152871][ T6675] ? __pfx_kthread+0x10/0x10 [ 142.154346][ T6675] ret_from_fork_asm+0x1a/0x30 [ 142.155896][ T6675] [ 142.156896][ T6675] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.159266][ T6675] CPU: 2 UID: 0 PID: 6675 Comm: kworker/u32:36 Not tainted syzkaller #0 PREEMPT(full) [ 142.162853][ T6675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.166633][ T6675] Workqueue: events_unbound cfg80211_wiphy_work [ 142.168601][ T6675] Call Trace: [ 142.169667][ T6675] [ 142.170611][ T6675] dump_stack_lvl+0x3d/0x1f0 [ 142.172154][ T6675] vpanic+0x640/0x6f0 [ 142.173445][ T6675] ? ieee80211_request_ibss_scan+0x7cf/0x9d0 [ 142.175327][ T6675] panic+0xca/0xd0 [ 142.176500][ T6675] ? __pfx_panic+0x10/0x10 [ 142.177901][ T6675] ? check_panic_on_warn+0x1f/0xb0 [ 142.179643][ T6675] check_panic_on_warn+0xab/0xb0 [ 142.181379][ T6675] __warn+0xf6/0x3c0 [ 142.182749][ T6675] ? ieee80211_request_ibss_scan+0x7cf/0x9d0 [ 142.184662][ T6675] report_bug+0x3c3/0x580 [ 142.186049][ T6675] ? ieee80211_request_ibss_scan+0x7cf/0x9d0 [ 142.187947][ T6675] handle_bug+0x184/0x210 [ 142.189321][ T6675] exc_invalid_op+0x17/0x50 [ 142.190763][ T6675] asm_exc_invalid_op+0x1a/0x20 [ 142.192582][ T6675] RIP: 0010:ieee80211_request_ibss_scan+0x7cf/0x9d0 [ 142.194850][ T6675] Code: 45 0c e9 15 fb ff ff e8 0f a7 eb f6 83 44 24 08 01 8b 74 24 08 bf 06 00 00 00 e8 3c a2 eb f6 e9 36 fd ff ff e8 f2 a6 eb f6 90 <0f> 0b 90 bb ea ff ff ff e9 69 fc ff ff 48 c7 c7 54 27 82 90 e8 58 [ 142.201642][ T6675] RSP: 0018:ffffc900037f7900 EFLAGS: 00010293 [ 142.203751][ T6675] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8ad1640c [ 142.206331][ T6675] RDX: ffff88802c1c8000 RSI: ffffffff8ad1649e RDI: 0000000000000005 [ 142.208922][ T6675] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 142.211879][ T6675] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000005 [ 142.214655][ T6675] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888035160e80 [ 142.217291][ T6675] ? ieee80211_request_ibss_scan+0x73c/0x9d0 [ 142.219388][ T6675] ? ieee80211_request_ibss_scan+0x7ce/0x9d0 [ 142.221603][ T6675] ieee80211_ibss_work+0x1056/0x1480 [ 142.223511][ T6675] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 142.225393][ T6675] ? __lock_acquire+0xb8a/0x1c90 [ 142.227210][ T6675] ? rcu_is_watching+0x12/0xc0 [ 142.229161][ T6675] ? mark_held_locks+0x49/0x80 [ 142.231176][ T6675] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 142.233791][ T6675] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.235975][ T6675] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 142.238262][ T6675] ieee80211_iface_work+0xe6d/0x1360 [ 142.240122][ T6675] ? rcu_is_watching+0x12/0xc0 [ 142.242168][ T6675] cfg80211_wiphy_work+0x2c7/0x580 [ 142.244627][ T6675] process_one_work+0x9cf/0x1b70 [ 142.246783][ T6675] ? __pfx_process_one_work+0x10/0x10 [ 142.249231][ T6675] ? assign_work+0x1a0/0x250 [ 142.250991][ T6675] worker_thread+0x6c8/0xf10 [ 142.252838][ T6675] ? __pfx_worker_thread+0x10/0x10 [ 142.254477][ T6675] kthread+0x3c5/0x780 [ 142.255794][ T6675] ? __pfx_kthread+0x10/0x10 [ 142.257378][ T6675] ? rcu_is_watching+0x12/0xc0 [ 142.259009][ T6675] ? __pfx_kthread+0x10/0x10 [ 142.260517][ T6675] ret_from_fork+0x675/0x7d0 [ 142.262113][ T6675] ? __pfx_kthread+0x10/0x10 [ 142.263619][ T6675] ret_from_fork_asm+0x1a/0x30 [ 142.265148][ T6675] [ 142.267135][ T6675] Kernel Offset: disabled [ 142.268653][ T6675] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:37:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802c1e2480 RCX=0000000000000007 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff818c181b RBP=ffffffff818c181b RSP=ffffc900036b7c98 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff9081f6d7 R11=0000000000000001 R12=ffff888028cb94d0 R13=0000607e25a39c68 R14=ffff88802c1e2480 R15=dffffc0000000000 RIP=ffffffff8b6041e0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555590550500 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe79b517d60 CR3=000000003956b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe79a9b76c3 00007fe79a9b76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4f21cc60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555590576094 00005555905753e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555905634a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559056b9a2 000055559056b4f0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 015a840480828082 080009e003001000 09d00300100009c0 0302100009b00301 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808080801000 0980040100000a08 0606015a84048082 8082080009e00300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100009d003001000 09c00302100009b0 0301a81000089003 02020007a0032404 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00079c030a040007 9803080400079003 2c0400078c030c04 0007880320800800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07800316040006fc 0310040006f80304 080006f003060400 06ec0310040006e8 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff9ac8ff68 RCX=ffffffff819937d0 RDX=0000000000000001 RSI=0000000000000004 RDI=ffffc9000dedf7e0 RBP=1ffff92001bdbef8 RSP=ffffc9000dedf7c0 R8 =0000000000000001 R9 =fffff52001bdbefc R10=0000000000000003 R11=0000000000000001 R12=dffffc0000000000 R13=ffffffff9ac8ff68 R14=0000000000000111 R15=0000000000000200 RIP=ffffffff819937dd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007febffb14c80 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007febffca26d0 CR3=0000000040a5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febffbed7b0 00007febffe7f5f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febffbed7b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f4342494c470033 2e325f4342494c47 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005f625f6570 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 696e695f79666974 6f6e616600636f6c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000006d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000450 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febffe7fb20 00007febffe80050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85295415 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc900037f7270 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9add6700 R15=ffffffff852953b0 RIP=ffffffff8529543f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39e1f5 CR3=0000000051754000 CR4=00352ef0 DR0=0000000000000000 DR1=0000800000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc541dd890 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a6ce12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a6ce12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a6ce12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a6ce12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a6ce1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a6ce1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888106c66188 RCX=ffffc900061077c0 RDX=ffff888029428000 RSI=ffffffff845bdd9d RDI=ffff888106c66188 RBP=ffffc90006107628 RSP=ffffc90006107498 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000800 R11=0000000000000001 R12=ffffc90006107938 R13=0000000000000600 R14=ffffc90006107938 R15=ffffc90006107628 RIP=ffffffff81bd0b98 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5613e80880 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055bb1ed3edd8 CR3=0000000029c50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c000c002 Opmask01=0000000000000000 Opmask02=000000000000002f Opmask03=0000000000000000 Opmask04=00000000ffff7fff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056006b736964 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3d9f99d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005613ded8bd70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005613ded93250 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56137f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c25600c6823 73730c25600c6823 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 73732560adaaac73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000020 00000000302d7872 00000030706f6f6c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005613ded93340 00005613ded93250 00005613ded94e10 00005613deda1420 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000010 0000000000000015 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000